WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 02:07:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Removed extra flag

Browse Source
This commit is contained in:
Paul Kermann
2022-09-28 11:19:46 +03:00
parent dc31ae1dda
commit d9c434da3f
1 changed files with 2 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/vadinfo.py
+2 -14
View File
@@ -49,13 +49,8 @@ class VadInfo(interfaces.plugins.PluginInterface):
# TODO: Convert this to a ListRequirement so that people can filter on sets of ranges
requirements.IntRequirement(name = 'address',
description = "Process virtual memory address to include " \
"(all other address ranges are excluded). This must be " \
"a base address, not an address within the desired range.",
"(all other address ranges are excluded).",
optional = True),
requirements.IntRequirement(name='containing-address',
description="Process virtual memory address to include" \
"This is a containing address in the VAD.",
optional=True),
requirements.ListRequirement(name = 'pid',
description = 'Filter on specific process IDs',
element_type = int,
@@ -179,17 +174,10 @@ class VadInfo(interfaces.plugins.PluginInterface):
if self.config.get('address', None) is not None:
def filter_function(x: interfaces.objects.ObjectInterface) -> bool:
return x.get_start() not in [self.config['address']]
return not (x.get_start() <= self.config['address'] <= x.get_end())
filter_func = filter_function
if self.config.get('containing-address', None) is not None:
def containing_filter_function(x: interfaces.objects.ObjectInterface) -> bool:
return not (x.get_start() <= self.config['containing-address'] <= x.get_end())
filter_func = containing_filter_function
for proc in procs:
process_name = utility.array_to_string(proc.ImageFileName)