David McDonald
1d1af696ff
Windows: Handles - catch exception in handle iteration
...
An `InvalidAddressException` can occur inside of `__iter__` when
iterating over the handle table (the exact exception occurs when
creating the subtype in `objects.Array.__getitem__`. This changes the
handle code to do a manual iteration over the sequence using the array
length and indexes, catch the exception, log the index, and continue.
In the test sample that prompted this change, the exception occurred on
the access of the very last item in the array.
closes #1573
2025-01-31 17:35:08 -06:00
ikelos and GitHub
ad90804af0
Merge pull request #1584 from volatilityfoundation/issues/issue1583
...
Windows: Fix vadyarascan typo
2025-01-27 22:40:54 +00:00
Mike Auty
105df4e140
Windows: Fix vadyarascan typo
2025-01-27 22:29:59 +00:00
ikelos and GitHub
2e72d7bbf4
Merge pull request #1582 from Abyss-W4tcher/docstring_embeds_additional_description
...
Embed additional plugin description in docstring
2025-01-27 17:40:18 +00:00
Abyss Watcher
f64291faec
split help on two consecutive newlines
2025-01-27 17:44:18 +01:00
Abyss Watcher
08f0364280
adapt plugins docstring to fit short and additional help format
2025-01-27 15:02:02 +01:00
Abyss Watcher
d2859f2390
remove additional_description in favor of the docstring implementation
2025-01-27 15:00:03 +01:00
Abyss Watcher
7d14f4c778
remove additional_description in favor of the docstring implementation
2025-01-27 14:57:39 +01:00
ikelos and GitHub
2ff6c00507
Merge pull request #1581 from volatilityfoundation/issues/issue1580
...
Layers: Make the low-stub method less brittle
2025-01-27 10:05:26 +00:00
Mike Auty
8b31ae612f
Layers: Make the low-stub method less brittle
2025-01-27 09:32:33 +00:00
ikelos and GitHub
ea232f50e2
Merge pull request #1576 from Abyss-W4tcher/minor_bump_split_linuxutilities
...
Bump minor version following #1567
2025-01-26 12:47:38 +00:00
Abyss Watcher
a25165d935
2.18.1 -> 2.19.0 bump
2025-01-26 13:44:23 +01:00
ikelos and GitHub
c7dc608b78
Merge pull request #1567 from Abyss-W4tcher/split_linuxutilities_modules
...
Add deprecation decorator and split Linux modules utilities
2025-01-26 12:32:47 +00:00
Abyss Watcher
4cb386858e
use __self__ and enhance exception msg
2025-01-26 13:20:48 +01:00
Abyss Watcher
5d58ba63db
use __name__ instead of overkill __qualname__
2025-01-26 13:19:01 +01:00
Abyss Watcher
80eebd2f49
use classmethod instead of staticmethod
2025-01-26 13:18:30 +01:00
Abyss Watcher
459483651b
typo
2025-01-26 10:53:33 +01:00
Abyss Watcher
28081ed989
tidy up replacement_base_class_required_version
2025-01-26 10:35:25 +01:00
Abyss Watcher
ba6b709aba
use VersionMismatchException
2025-01-26 10:34:18 +01:00
Abyss Watcher
4bd385cc9d
handle VersionMismatchException
2025-01-26 10:33:02 +01:00
Abyss Watcher
6d43dcd3a8
add VersionMismatchException
2025-01-26 10:31:46 +01:00
Abyss Watcher
4262eff889
adhere to AbstractNetfilter requirement checking
2025-01-25 20:04:51 +01:00
Abyss Watcher
3657c6fe5e
require Modules >= 1.0.0 on deprecated methods
2025-01-25 19:54:20 +01:00
Abyss Watcher
2ed00cc91a
add optional version requirement to deprecated_method
2025-01-25 19:52:47 +01:00
Abyss Watcher
825720ed5d
catch UnsatisfiedException at plugin runtime
2025-01-25 19:48:31 +01:00
Abyss Watcher
d8658f0729
put deprecated functions order back
2025-01-25 17:08:27 +01:00
ikelos and GitHub
69fc7fe723
Merge pull request #1566 from Danking555/develop
...
Add low stub offset kernel detection
2025-01-25 15:32:43 +00:00
ikelos and GitHub
f644063e90
Merge pull request #1421 from volatilityfoundation/issues/issue1418
...
Issues/issue1418
2025-01-25 15:14:06 +00:00
Daniel Davidov
2e1b77f4b3
Move LowStubLayout constants to windows.constants
...
* Moved constants out of the class and moved to constants.windows
* Applied ruff and black
2025-01-25 16:22:49 +02:00
Abyss Watcher
ce671bb2fa
transfer deprecated_method into framework module
2025-01-25 15:02:25 +01:00
Abyss Watcher
8b0165b6f6
add linux_utilities_modules requirement
2025-01-25 14:45:21 +01:00
ikelos and GitHub
734c18c269
Merge pull request #1570 from volatilityfoundation/issues/explicit-version-check
...
Core: Move the python check somewhere it can't accidentally be removed
2025-01-25 12:59:19 +00:00
ikelos and GitHub
a38a0282ae
Merge branch 'develop' into issues/issue1418
2025-01-25 12:51:15 +00:00
ikelos and GitHub
c0adb721b7
Merge pull request #1559 from volatilityfoundation/issues/issue1419
...
Layers: Update LeechCore RawIO with better error handling for readlines
2025-01-25 12:44:08 +00:00
ikelos and GitHub
cae7930613
Merge pull request #1490 from volatilityfoundation/issue_1482_infinite_loop_oom
...
Prevent infinite looping and out of memory errors #1482
2025-01-25 12:21:40 +00:00
ikelos and GitHub
45e7f34636
Merge pull request #1568 from volatilityfoundation/1473-get_key_tryexcept
...
#1473 - add exception handling on calls to registry get_key
2025-01-25 11:53:38 +00:00
ikelos and GitHub
4d50d1072f
Merge pull request #1558 from volatilityfoundation/issues/issue1546
...
Issues/issue1546
2025-01-25 11:27:09 +00:00
Andrew Case
506a61d884
Address feedback
2025-01-24 22:09:24 +00:00
Andrew Case
e9088be0d8
Prevent infinite looping and out of memory errors #1482
2025-01-24 22:02:27 +00:00
Daniel Davidov
17d52c27bf
Update method_low_stub_offset & run ruff & black
...
* Eliminate unnecessary scanning for 32 bit processors where the structure PROCESSOR_START_BLOCK doesn't exist
* Put offsets as values of constants in a class - LowStubLayout.
* Add documentation in the class and in the function method_low_stub_offset
* Run "ruff check --fix" and "black ."
* Checked the method works on 3 physical machines
2025-01-24 21:09:28 +02:00
Mike Auty
128e1be154
Core: Fix f-string quotes
2025-01-23 20:57:44 +00:00
Mike Auty
61f60ac464
Core: Move the python check somewhere it can't accidentally be removed
2025-01-23 20:52:08 +00:00
Mike Auty
a68be50798
Revert "Typing fix"
...
This reverts commit c82d432b10 .
2025-01-23 20:30:21 +00:00
Dave Lassalle
81ba89eef6
#1473 - update exception message
2025-01-23 12:20:14 -06:00
Dave Lassalle
6c4cafa64f
#1473 - black fixes
2025-01-23 11:59:37 -06:00
Dave Lassalle
b8d9c7b883
#1473 - add missing exception handling for get_key
2025-01-23 11:57:43 -06:00
Abyss Watcher
fd77c04153
move to linux_utilities_modules APIs
2025-01-23 10:46:42 +01:00
Abyss Watcher
7575aa5d63
deprecate lookup_module_address and mask_mods_list
2025-01-23 10:44:20 +01:00
Abyss Watcher
43ab0b0c31
add deprecation decorator
2025-01-23 10:43:14 +01:00
Abyss Watcher
34a7dfc72f
split linux modules utilities
2025-01-23 10:42:52 +01:00