Ensure we can cache the linux/mac banners.

This commit is contained in:
Mike Auty
2018-12-13 21:23:59 +00:00
parent c0fcd15d4f
commit d9369001d4
3 changed files with 4 additions and 4 deletions
+1 -1
View File
@@ -22,7 +22,7 @@ class LinuxBannerCache(symbol_cache.SymbolBannerCache):
class LinuxSymbolFinder(symbol_finder.SymbolFinder):
"""Linux symbol loader based on uname signature strings"""
banner_config_key = "linux_banner"
banner_config_key = "kernel_banner"
banner_cache = LinuxBannerCache
symbol_class = "volatility.framework.symbols.linux.LinuxKernelIntermedSymbols"
+2 -2
View File
@@ -21,7 +21,7 @@ class MacBannerCache(symbol_cache.SymbolBannerCache):
class MacSymbolFinder(symbol_finder.SymbolFinder):
"""Mac symbol loader based on uname signature strings"""
banner_config_key = 'mac_banner'
banner_config_key = 'kernel_banner'
banner_cache = MacBannerCache
symbol_class = "volatility.framework.symbols.mac.MacKernelIntermedSymbols"
@@ -159,7 +159,7 @@ class MacUtilities(object):
version_minor_json_address = context.symbol_space.get_symbol(version_minor_symbol).address
version_minor_phys_offset = MacUtilities.virtual_to_physical_address(version_minor_json_address)
if compare_banner_offset == 0 or compare_banner == "":
if not compare_banner_offset or not compare_banner:
offset_generator = cls._scan_generator(context, layer_name, progress_callback)
else:
offset_generator = [(compare_banner_offset, compare_banner)]
+1 -1
View File
@@ -220,7 +220,7 @@ class Intel(interfaces.layers.TranslationLayerInterface):
optional = False),
requirements.IntRequirement(name = 'kernel_virtual_offset',
optional = True),
requirements.StringRequirement(name = 'linux_banner',
requirements.StringRequirement(name = 'kernel_banner',
optional = True)]