mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-17 20:35:40 +02:00
Merge pull request #755 from digitalisx/fix/minor
Fix: minor code for improve (typo, author).
This commit is contained in:
@@ -80,7 +80,7 @@ class Check_syscall(plugins.PluginInterface):
|
||||
|
||||
def _get_table_info_disassembly(self, ptr_sz, vmlinux):
|
||||
"""Find the size of the system call table by disassembling functions
|
||||
that immediately reference it in their first isntruction This is in the
|
||||
that immediately reference it in their first instruction This is in the
|
||||
form 'cmp reg,NR_syscalls'."""
|
||||
table_size = 0
|
||||
|
||||
|
||||
@@ -1,7 +1,6 @@
|
||||
# This file is Copyright 2021 Volatility Foundation and licensed under the Volatility Software License 1.0
|
||||
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
|
||||
#
|
||||
# Author: Gustavo Moreira
|
||||
|
||||
import logging
|
||||
from collections import namedtuple
|
||||
|
||||
@@ -95,10 +95,10 @@ class SSDT(plugins.PluginInterface):
|
||||
if is_kernel_64:
|
||||
array_subtype = "long"
|
||||
|
||||
def kvo_calulator(func: int) -> int:
|
||||
def kvo_calculator(func: int) -> int:
|
||||
return kvo + service_table_address + (func >> 4)
|
||||
|
||||
find_address = kvo_calulator
|
||||
find_address = kvo_calculator
|
||||
else:
|
||||
array_subtype = "unsigned long"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user