WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-27 20:14:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2009 from the-rectifier/taints_issue_6.19

Browse Source 
fix: linux 6.19 taint_flag.module removal
This commit is contained in:
ikelos
2026-09-08 23:32:35 +01:00
committed by GitHub
parent 9e4931687b 7cdaa49b1c
commit d9b33c5442
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/constants/linux/__init__.py
+4 -2
View File
@@ -487,16 +487,18 @@ TAINT_FLAGS = {
"L": TaintFlag(shift=1 << 14, desc="SOFTLOCKUP", when_present=True, module=False),
"K": TaintFlag(shift=1 << 15, desc="LIVEPATCH", when_present=True, module=True),
"X": TaintFlag(shift=1 << 16, desc="AUX", when_present=True, module=True),
"T": TaintFlag(shift=1 << 17, desc="RANDSTRUCT", when_present=True, module=True),
"T": TaintFlag(shift=1 << 17, desc="RANDSTRUCT", when_present=True, module=False),
"N": TaintFlag(shift=1 << 18, desc="TEST", when_present=True, module=True),
"J": TaintFlag(shift=1 << 19, desc="FWCTL", when_present=True, module=False),
}
"""Flags used to taint kernel and modules, for debugging purposes.
Map based on 6.12-rc5.
Map based on 7.2.0-rc5.
Documentation :
- https://www.kernel.org/doc/Documentation/admin-guide/sysctl/kernel.rst#:~:text=guide/sysrq.rst.-,tainted,-%3D%3D%3D%3D%3D%3D%3D%0A%0ANon%2Dzero%20if
- https://www.kernel.org/doc/Documentation/admin-guide/tainted-kernels.rst#:~:text=More%20detailed%20explanation%20for%20tainting
- https://docs.kernel.org/admin-guide/tainted-kernels.html#table-for-decoding-tainted-state
- taint_flag kernel struct
- taint_flags kernel constant
"""
volatility3/framework/symbols/linux/utilities/tainting.py
+3 -2
View File
@@ -14,7 +14,7 @@ class Tainting(interfaces.configuration.VersionableInterface):
- kernel: print_tainted
"""
_version = (1, 0, 0)
_version = (1, 0, 1)
_required_framework_version = (2, 0, 0)
framework.require_interface_version(*_required_framework_version)
@@ -91,7 +91,8 @@ class Tainting(interfaces.configuration.VersionableInterface):
for taint_bit, taint_flag in enumerate(
cls._get_kernel_taint_flags_list(context, kernel_module_name)
):
if is_module and not taint_flag.module:
# https://lore.kernel.org/all/20251022082938.26670-1-petr.pavlu@suse.com/T/#u: "taint/module: Remove unnecessary taint_flag.module field"
if is_module and taint_flag.has_member("module") and not taint_flag.module:
continue
try: