mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-22 01:24:51 +02:00
Ensure we can cache the linux/mac banners.
This commit is contained in:
@@ -22,7 +22,7 @@ class LinuxBannerCache(symbol_cache.SymbolBannerCache):
|
||||
class LinuxSymbolFinder(symbol_finder.SymbolFinder):
|
||||
"""Linux symbol loader based on uname signature strings"""
|
||||
|
||||
banner_config_key = "linux_banner"
|
||||
banner_config_key = "kernel_banner"
|
||||
banner_cache = LinuxBannerCache
|
||||
symbol_class = "volatility.framework.symbols.linux.LinuxKernelIntermedSymbols"
|
||||
|
||||
|
||||
@@ -21,7 +21,7 @@ class MacBannerCache(symbol_cache.SymbolBannerCache):
|
||||
class MacSymbolFinder(symbol_finder.SymbolFinder):
|
||||
"""Mac symbol loader based on uname signature strings"""
|
||||
|
||||
banner_config_key = 'mac_banner'
|
||||
banner_config_key = 'kernel_banner'
|
||||
banner_cache = MacBannerCache
|
||||
symbol_class = "volatility.framework.symbols.mac.MacKernelIntermedSymbols"
|
||||
|
||||
@@ -159,7 +159,7 @@ class MacUtilities(object):
|
||||
version_minor_json_address = context.symbol_space.get_symbol(version_minor_symbol).address
|
||||
version_minor_phys_offset = MacUtilities.virtual_to_physical_address(version_minor_json_address)
|
||||
|
||||
if compare_banner_offset == 0 or compare_banner == "":
|
||||
if not compare_banner_offset or not compare_banner:
|
||||
offset_generator = cls._scan_generator(context, layer_name, progress_callback)
|
||||
else:
|
||||
offset_generator = [(compare_banner_offset, compare_banner)]
|
||||
|
||||
@@ -220,7 +220,7 @@ class Intel(interfaces.layers.TranslationLayerInterface):
|
||||
optional = False),
|
||||
requirements.IntRequirement(name = 'kernel_virtual_offset',
|
||||
optional = True),
|
||||
requirements.StringRequirement(name = 'linux_banner',
|
||||
requirements.StringRequirement(name = 'kernel_banner',
|
||||
optional = True)]
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user