WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,047 Commits 80 Branches 17 Tags
bugfix/missing_modules
Commit Graph
6047 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ikelosandGitHub c0d83de90d Merge pull request #1532 from volatilityfoundation/duplicated_module_docstrings 
Linux: Fix copy-pasted module docstrings
 2025-01-09 23:41:39 +00:00
ikelosandGitHub 77ebb428ba Merge pull request #1531 from j-t-1/conversion 
Use in-place subtraction
 2025-01-09 23:40:42 +00:00
Mike Auty d07d31047b Core: Revert the exception catching too 2025-01-09 18:24:48 +00:00
Mike Auty 21decf1370 Core: Put the dependencies back for jsonschema 2025-01-09 18:12:36 +00:00
Mike Auty e676e6179a Swap fastjsonschema for jsonschema because of date-time validation issues 2025-01-09 18:08:22 +00:00
Mike Auty 0860441c2f Core: Improve speed to JSONSchema validation 2025-01-09 17:12:27 +00:00
j-t-1andGitHub 32cb6e11f6 Change one letter of a typo 2025-01-07 19:41:02 +00:00
David McDonald 43ac6c4d62 Fix copy-pasted module docstrings 
This updates the module docstrings for 5 modules that duplicate the
docstring from the `proc` module. This was presumably the result of using
the `proc` module as a template for the others.
 2025-01-07 10:24:46 -06:00
j-t-1andGitHub b5bc54cfae Use in-place subtraction 
Also tweak comments.
 2025-01-07 15:18:34 +00:00
Abyss Watcher d956742db9 remove typing.Set import 2025-01-06 00:31:39 +01:00
Abyss Watcher bd82f4f33d 2.16.0 -> 2.18.0 bump 2025-01-06 00:25:07 +01:00
Abyss Watcher 4115c26e7c bump framework req to 2.18.0 2025-01-06 00:24:44 +01:00
Abyss Watcher 302f9fdf5b cut unnecessary plugin runner functions 2025-01-06 00:24:18 +01:00
Abyss Watcher 5c70356c27 version check_modules requirement 2025-01-06 00:23:16 +01:00
Abyss Watcher 2d262e7acf cut unnecessary intermediate LinuxUtilityInterface 2025-01-06 00:20:56 +01:00
Abyss Watcher a7b4e2fb45 version check_modules 2025-01-06 00:02:15 +01:00
ikelosandGitHub a98a23fa41 Merge pull request #1529 from j-t-1/cmdscan 
Tiny comment changes
 2025-01-05 22:20:05 +00:00
j-t-1andGitHub 94ec7d89c0 Tiny comment changes 2025-01-05 21:55:58 +00:00
ikelosandGitHub 429b006646 Merge pull request #1530 from j-t-1/case 
Update case insensitive check
 2025-01-05 21:42:27 +00:00
j-t-1andGitHub 8f4f576e93 Update case insensitive check 
Update link and use casefold() instead of lower().
 2025-01-05 21:09:15 +00:00
ikelosandGitHub a9e10a4b48 Merge pull request #1513 from volatilityfoundation/env_var_missing_exception_handler 
Add missing exception handling in env var recovery. Prevent backtraces
 2025-01-05 20:41:32 +00:00
ikelosandGitHub 4363539f7b Merge pull request #1510 from j-t-1/shim 
Make f-string slightly more readable
 2025-01-05 20:38:23 +00:00
j-t-1andGitHub ab60add993 Update case insensitive check 
Update link and use casefold() instead of lower().
 2025-01-05 17:14:21 +00:00
j-t-1andGitHub 5f1d318c71 Tiny comment changes 2025-01-05 13:39:00 +00:00
ikelosandGitHub a8c449aa0c Merge pull request #1521 from volatilityfoundation/linux_add_process_layer 
Change add_process_layer to return None instead of throwing an except…
 2025-01-04 19:16:41 +00:00
Andrew Case 8ba60a2aad Change add_process_layer to return None instead of throwing an exception as it was meant to be designed 2025-01-04 16:49:02 +00:00
Andrew Case 03049f7895 Add missing exception handling in env var recovery. Prevent backtraces 2025-01-03 18:40:52 +00:00
j-t-1andGitHub 32ca62bbb1 Make f-string slightly more readable 2025-01-03 15:20:35 +00:00
Abyss Watcher 38c5cc168f bump framework req to 2.16.0 2025-01-03 13:23:27 +01:00
Abyss Watcher 4a34b988d1 minor readability adjustments 2025-01-03 13:21:09 +01:00
ikelosandGitHub 32a9d16f58 Merge branch 'develop' into modxview_plugin 2025-01-03 00:26:53 +00:00
ikelosandGitHub cedc0b074a Merge pull request #1500 from volatilityfoundation/issue_1469_cachedump_exception 
Exception handling in registry-related code
 2025-01-03 00:24:50 +00:00
ikelosandGitHub 66eb16172e Merge pull request #1503 from volatilityfoundation/issues/kmsg-msglen 
Linux: Fix kmsg unguarded read of msg.len
 2025-01-03 00:23:23 +00:00
ikelosandGitHub 801c933824 Merge pull request #1506 from Abyss-W4tcher/page_class_multi_arch 
Linux: ground work for multi-arch vmemmap_start calculation
 2025-01-03 00:21:39 +00:00
ikelosandGitHub 1e2ca8fb75 Merge pull request #1508 from gcmoreira/linux_kmsg_fix_1502_1496_1364 
linux: kmsg plugin: Fix f'string bug introduced in #1502
 2025-01-03 00:08:33 +00:00
Gustavo Moreira d2bb5c9f31 linux: fix kmsg fstring bug introduced in #1502 2025-01-03 10:01:37 +11:00
Abyss Watcher 89b8da8c39 make self.kernel private and call parent __init__ 2025-01-02 16:48:22 +01:00
Abyss Watcher 0a3502697c 2.13.0 -> 2.14.0 bump 2025-01-02 16:42:16 +01:00
Abyss Watcher 6e4213e321 update tainting requirements to new versioned utilities 2025-01-02 16:41:37 +01:00
Abyss Watcher 3105a31964 leverage Tainting from separated Linux utilities 2025-01-02 16:40:49 +01:00
Abyss Watcher 8bc62598f4 initial tainting utilities 2025-01-02 16:39:57 +01:00
Abyss Watcher 2a5f38ebad introduce versioned Linux utilities 2025-01-02 16:39:07 +01:00
Abyss Watcher dda104bd62 move out Tainting capabilities 2025-01-02 16:37:14 +01:00
Abyss Watcher b61ba66223 multi-architecture vmemmap_start calculation 2025-01-02 14:51:23 +01:00
Abyss Watcher 7278bb244f move get_flags_list at bottom 2025-01-02 14:47:18 +01:00
ikelosandGitHub dce5ff1f5c Merge pull request #1502 from volatilityfoundation/issues/issue1496 
Linux: Fix kmsg f-strings
 2025-01-02 11:36:29 +00:00
Mike Auty 97b93abe43 Linux: Remove unnecessary int cast 2025-01-02 11:26:21 +00:00
Gustavo Moreira ac299b0cfc linux: module symbols: Fixes and improve code. 
- Fixed an issue causing the generation of an invalid, extra symbol.
- Reuse ELF sym API instead of reimplemented it
- Updated the function to return the symbol index, enabling the use of additional module tables.
- Ensured the ELF symbol object has `cached_strtab` set, allowing retrieval of critical symbol information like names.
- Added typing hints
 2025-01-02 17:58:51 +11:00
David McDonald c8e67e526a Convert ValueError to TypeError 
All other methods in this class raise a `TypeError` if the hive was not
instantiated on a registry layer; this changes makes this method
consistent with the convention used in the others.

All `except` blocks checking for `ValueError` have been audited to
ensure that this doesn't break exception handling in existing code
within the framework. This also includes a minor version bump because:

1. RegistryHives are currently only instantiated one way, which is
   through the `hivelist` plugin. `hivelist` uses the correct layers when
   instantiating the hives.
2. Because there is currently a single source for registry hives, and
   it's unlikely that a hive from that source will ever be created on
   the wrong layer, it's unlikely that the existing `ValueError` is
   being raised anywhere within the framework's code.
3. It seems unlikely that consumers of this framework would be
   instantiating registry hives independent of the `hivelist` plugin,
   given that they would effectively have to duplicate the `hivelist`
   code to do so.

For these reasons, we're going to do a minor version bump, even though
an argument can be made that this warrants a major version bump
according to the SemVer rules. This is a one-off and does not indicate
any change in the way that we typically update version numbers.
 2025-01-01 22:43:01 -06:00
Mike Auty ac3e76665b Linux: Fix kmsg unguarded read of msg.len 2025-01-01 15:29:07 +00:00