WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-25 15:42:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Replace hardcoded exclamation marks for constants.BANG

Browse Source
This commit is contained in:
Mike Auty
2017-08-08 09:50:22 +01:00
parent 2caeeb275e
commit fc0fa96ed8
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+5 -5
View File
@@ -1,7 +1,6 @@
import collections.abc
from volatility.framework import exceptions
from volatility.framework import objects
from volatility.framework import constants, exceptions, objects
# Keep these in a basic module, to prevent import cycles when symbol providers require them
from volatility.framework.symbols.generic import GenericIntelProcess
@@ -63,10 +62,11 @@ class _EPROCESS(GenericIntelProcess):
raise StopIteration
sym_table = self.vol.type_name.split("!")[0]
peb = self._context.object("{}!_PEB".format(sym_table), layer_name = proc_layer_name, offset = self.Peb)
peb = self._context.object("{}{}!_PEB".format(sym_table, constants.BANG), layer_name = proc_layer_name,
offset = self.Peb)
for entry in peb.Ldr.InLoadOrderModuleList.to_list("{}!_LDR_DATA_TABLE_ENTRY".format(sym_table),
"InLoadOrderLinks"):
for entry in peb.Ldr.InLoadOrderModuleList.to_list(
"{}{}_LDR_DATA_TABLE_ENTRY".format(sym_table, constants.BANG), "InLoadOrderLinks"):
yield entry