WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-31 20:29:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

linux: kernel_symbol object extension: move properties to getters

Browse Source
This commit is contained in:
Gustavo Moreira
2025-02-03 07:59:57 +11:00
parent 348720c89a
commit cef87e014c
2 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/extensions/__init__.py
+3 -6
View File
@@ -3225,8 +3225,7 @@ class kernel_symbol(objects.StructType):
long_mask = (1 << layer.bits_per_register) - 1
return (self.vol.offset + off) & long_mask
@property
def name(self) -> str:
def get_name(self) -> str:
if self.has_member("name_offset"):
# kernel >= 4.19 and CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
# See 7290d58095712a89f845e1bca05334796dd49ed2
@@ -3246,8 +3245,7 @@ class kernel_symbol(objects.StructType):
return name_bytes.decode("utf-8", errors="ignore")
@property
def value(self) -> int:
def get_value(self) -> int:
if self.has_member("value_offset"):
# kernel >= 4.19 and CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
# See 7290d58095712a89f845e1bca05334796dd49ed2
@@ -3258,8 +3256,7 @@ class kernel_symbol(objects.StructType):
raise AttributeError("Unsupported kernel_symbol type implementation")
@property
def namespace(self) -> str:
def get_namespace(self) -> str:
if self.has_member("namespace_offset"):
# kernel >= 4.19 and CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
# See 7290d58095712a89f845e1bca05334796dd49ed2
volatility3/framework/symbols/linux/kallsyms.py
+2 -2
View File
@@ -722,7 +722,7 @@ class Kallsyms(interfaces.configuration.VersionableInterface):
self._kas_config.stop_ksymtab,
)
return kernel_symbol is not None and kernel_symbol.value == address
return kernel_symbol is not None and kernel_symbol.get_value() == address
def _elfsym_to_kassymbol(
self,
@@ -1026,7 +1026,7 @@ class Kallsyms(interfaces.configuration.VersionableInterface):
name: str,
kernel_symbol: interfaces.objects.ObjectInterface,
) -> int:
return self._cmp_symbol_name(name, kernel_symbol.name)
return self._cmp_symbol_name(name, kernel_symbol.get_name())
def _cmp_symbol_name(
self,