Commit Graph
5259 Commits
Author SHA1 Message Date
David McDonald 1d1af696ff Windows: Handles - catch exception in handle iteration
An `InvalidAddressException` can occur inside of `__iter__` when
iterating over the handle table (the exact exception occurs when
creating the subtype in `objects.Array.__getitem__`. This changes the
handle code to do a manual iteration over the sequence using the array
length and indexes, catch the exception, log the index, and continue.

In the test sample that prompted this change, the exception occurred on
the access of the very last item in the array.

closes #1573
2025-01-31 17:35:08 -06:00
ikelosandGitHub ad90804af0 Merge pull request #1584 from volatilityfoundation/issues/issue1583
Windows: Fix vadyarascan typo
2025-01-27 22:40:54 +00:00
Mike Auty 105df4e140 Windows: Fix vadyarascan typo 2025-01-27 22:29:59 +00:00
ikelosandGitHub 2e72d7bbf4 Merge pull request #1582 from Abyss-W4tcher/docstring_embeds_additional_description
Embed additional plugin description in docstring
2025-01-27 17:40:18 +00:00
Abyss Watcher f64291faec split help on two consecutive newlines 2025-01-27 17:44:18 +01:00
Abyss Watcher 08f0364280 adapt plugins docstring to fit short and additional help format 2025-01-27 15:02:02 +01:00
Abyss Watcher d2859f2390 remove additional_description in favor of the docstring implementation 2025-01-27 15:00:03 +01:00
Abyss Watcher 7d14f4c778 remove additional_description in favor of the docstring implementation 2025-01-27 14:57:39 +01:00
ikelosandGitHub 2ff6c00507 Merge pull request #1581 from volatilityfoundation/issues/issue1580
Layers: Make the low-stub method less brittle
2025-01-27 10:05:26 +00:00
Mike Auty 8b31ae612f Layers: Make the low-stub method less brittle 2025-01-27 09:32:33 +00:00
ikelosandGitHub ea232f50e2 Merge pull request #1576 from Abyss-W4tcher/minor_bump_split_linuxutilities
Bump minor version following #1567
2025-01-26 12:47:38 +00:00
Abyss Watcher a25165d935 2.18.1 -> 2.19.0 bump 2025-01-26 13:44:23 +01:00
ikelosandGitHub c7dc608b78 Merge pull request #1567 from Abyss-W4tcher/split_linuxutilities_modules
Add deprecation decorator and split Linux modules utilities
2025-01-26 12:32:47 +00:00
Abyss Watcher 4cb386858e use __self__ and enhance exception msg 2025-01-26 13:20:48 +01:00
Abyss Watcher 5d58ba63db use __name__ instead of overkill __qualname__ 2025-01-26 13:19:01 +01:00
Abyss Watcher 80eebd2f49 use classmethod instead of staticmethod 2025-01-26 13:18:30 +01:00
Abyss Watcher 459483651b typo 2025-01-26 10:53:33 +01:00
Abyss Watcher 28081ed989 tidy up replacement_base_class_required_version 2025-01-26 10:35:25 +01:00
Abyss Watcher ba6b709aba use VersionMismatchException 2025-01-26 10:34:18 +01:00
Abyss Watcher 4bd385cc9d handle VersionMismatchException 2025-01-26 10:33:02 +01:00
Abyss Watcher 6d43dcd3a8 add VersionMismatchException 2025-01-26 10:31:46 +01:00
Abyss Watcher 4262eff889 adhere to AbstractNetfilter requirement checking 2025-01-25 20:04:51 +01:00
Abyss Watcher 3657c6fe5e require Modules >= 1.0.0 on deprecated methods 2025-01-25 19:54:20 +01:00
Abyss Watcher 2ed00cc91a add optional version requirement to deprecated_method 2025-01-25 19:52:47 +01:00
Abyss Watcher 825720ed5d catch UnsatisfiedException at plugin runtime 2025-01-25 19:48:31 +01:00
Abyss Watcher d8658f0729 put deprecated functions order back 2025-01-25 17:08:27 +01:00
ikelosandGitHub 69fc7fe723 Merge pull request #1566 from Danking555/develop
Add low stub offset kernel detection
2025-01-25 15:32:43 +00:00
ikelosandGitHub f644063e90 Merge pull request #1421 from volatilityfoundation/issues/issue1418
Issues/issue1418
2025-01-25 15:14:06 +00:00
Daniel Davidov 2e1b77f4b3 Move LowStubLayout constants to windows.constants
* Moved constants out of the class and moved to constants.windows
* Applied ruff and black
2025-01-25 16:22:49 +02:00
Abyss Watcher ce671bb2fa transfer deprecated_method into framework module 2025-01-25 15:02:25 +01:00
Abyss Watcher 8b0165b6f6 add linux_utilities_modules requirement 2025-01-25 14:45:21 +01:00
ikelosandGitHub 734c18c269 Merge pull request #1570 from volatilityfoundation/issues/explicit-version-check
Core: Move the python check somewhere it can't accidentally be removed
2025-01-25 12:59:19 +00:00
ikelosandGitHub a38a0282ae Merge branch 'develop' into issues/issue1418 2025-01-25 12:51:15 +00:00
ikelosandGitHub c0adb721b7 Merge pull request #1559 from volatilityfoundation/issues/issue1419
Layers: Update LeechCore RawIO with better error handling for readlines
2025-01-25 12:44:08 +00:00
ikelosandGitHub cae7930613 Merge pull request #1490 from volatilityfoundation/issue_1482_infinite_loop_oom
Prevent infinite looping and out of memory errors #1482
2025-01-25 12:21:40 +00:00
ikelosandGitHub 45e7f34636 Merge pull request #1568 from volatilityfoundation/1473-get_key_tryexcept
#1473 - add exception handling on calls to registry get_key
2025-01-25 11:53:38 +00:00
ikelosandGitHub 4d50d1072f Merge pull request #1558 from volatilityfoundation/issues/issue1546
Issues/issue1546
2025-01-25 11:27:09 +00:00
Andrew Case 506a61d884 Address feedback 2025-01-24 22:09:24 +00:00
Andrew Case e9088be0d8 Prevent infinite looping and out of memory errors #1482 2025-01-24 22:02:27 +00:00
Daniel Davidov 17d52c27bf Update method_low_stub_offset & run ruff & black
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
Mike Auty 128e1be154 Core: Fix f-string quotes 2025-01-23 20:57:44 +00:00
Mike Auty 61f60ac464 Core: Move the python check somewhere it can't accidentally be removed 2025-01-23 20:52:08 +00:00
Mike Auty a68be50798 Revert "Typing fix"
This reverts commit c82d432b10.
2025-01-23 20:30:21 +00:00
Dave Lassalle 81ba89eef6 #1473 - update exception message 2025-01-23 12:20:14 -06:00
Dave Lassalle 6c4cafa64f #1473 - black fixes 2025-01-23 11:59:37 -06:00
Dave Lassalle b8d9c7b883 #1473 - add missing exception handling for get_key 2025-01-23 11:57:43 -06:00
Abyss Watcher fd77c04153 move to linux_utilities_modules APIs 2025-01-23 10:46:42 +01:00
Abyss Watcher 7575aa5d63 deprecate lookup_module_address and mask_mods_list 2025-01-23 10:44:20 +01:00
Abyss Watcher 43ab0b0c31 add deprecation decorator 2025-01-23 10:43:14 +01:00
Abyss Watcher 34a7dfc72f split linux modules utilities 2025-01-23 10:42:52 +01:00