Mike Auty
9824538bd9
Numerous pycharm warnings resolved
...
This includes:
* Better ways of checking empty lists
* Not shadowing builtin functions like filter
* Preventing invalid slash warnings by marking strings as regexps
* Removing unnecessary brackets
* Lowercase variable names
* Adding/updating parameters in docstrings
* Removing unused code (lines not chunks)
* Change in not a member tests
* Changing some methods to static
* Shorting range membership checks
* Missing parameters
* Make some exception handlers more specific
* Don't define a lambda to a variable
* A few more instance checks to help type checkers
2018-12-16 13:21:06 +00:00
Mike Auty
29d41470a4
Mass reformat of typing imports
...
Relented on the strict import of direct objects/classes for the typing
module only. Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.
This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty
a16fb3bf7d
Don't break on validity tests.
2018-12-13 01:16:05 +00:00
Mike Auty
76264cee34
Catch invalid _OBJECT_HEADER objects.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
650a188d51
updates for win8/win10 poolscanning
2018-12-13 01:16:05 +00:00
Mike Auty
fa033b8ab7
Back out the symbol_table_name parameter, and provide full symbol names in the constraints.
2018-12-13 01:16:05 +00:00
Mike Auty
eacc45dab6
Ensure POOL_HEADER finds the right object in the right symbol table.
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
4b0e7e5309
remove the Path column from poolscanner. add File scanning
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d653839359
switch Handles.find_cookie() to a classmethod so it can be called from the poolscanner. add typing
2018-12-13 01:16:05 +00:00
Michael Ligh and ikelos
d667a68f97
switch Handles.list_objects() to a classmethod so it can be called from the poolscanner. pass the type_map into get_object()
2018-12-13 01:16:05 +00:00
Mike Auty
1a5c9d3af8
Roll symbols.utility into symbols file until we get enough functions we need to split them out again.
2018-12-12 23:38:01 +00:00
Mike Auty
e6711f580d
Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.
2018-10-24 19:31:22 +01:00
Mike Auty
df57ee5045
Fix minor typo in poolscanner logic (thanks mypy!).
2018-10-10 15:32:28 +01:00
Mike Auty
e500e87fc6
Add in type annotations for the poolscanner plugin.
2018-10-05 00:20:44 +01:00
Mike Auty
d6b60149a1
Update poolscanner to use the new symbol_table_is_64bit function.
2018-10-03 23:36:54 +01:00
Mike Auty
09f12a2126
Add in most of the code required for poolscanning goodness. @imhlv2 to fix the tests.
2018-10-03 22:03:29 +01:00
Mike Auty
c0b7376226
Ensure we don't break all plugins on versions where _POOL_HEADER doesn't exist.
2018-09-30 17:00:25 +01:00
Mike Auty
569bc97bc2
Fix up the use of native_layer_name in the poolscanning code.
2018-09-16 15:31:50 +01:00
Mike Auty
5add8ea078
Remove the obsolete FIXME.
2018-09-15 15:23:43 +01:00
Michael Ligh and ikelos
fffdd253ae
use renderers.NotApplicableValue() for the poolscanner plugin's name field
2018-09-15 15:22:38 +01:00
Mike Auty
0baa0ecdf5
Update the poolscanner to take care of multiple constraints with the same tag.
2018-09-15 15:22:38 +01:00
Michael Ligh and ikelos
9d6055d2ba
add a lambda placeholder for is_windows_10 - replace it once we have PE file version checks
2018-09-15 15:22:38 +01:00
Michael Ligh and ikelos
f02df7a92e
reduce the extra tag_type_map lookup by yielding the constraint from the pool scanner
2018-09-15 15:22:38 +01:00
Michael Ligh and ikelos
5d20faa0a7
work on _POOL_HEADER.get_object()
2018-09-15 15:22:38 +01:00
Michael Ligh and ikelos
be6a351a11
start adding the _POOL_HEADER extension. expand the pool constraints to include processes
2018-09-15 15:22:38 +01:00
Mike Auty
ce4ed9fea8
Add in the start of actual output from the poolscanner.
2018-09-15 15:22:38 +01:00
Michael Ligh and ikelos
56a5012a46
fix alignment, should offset be optional to context.module()? refactor pool type checks
2018-09-15 15:22:38 +01:00
Mike Auty
8a5d3b0c1e
Initial poolscanning code.
2018-09-15 15:22:38 +01:00
Mike Auty