David McDonald
e62cee391a
Testing: Adds validation of vol3 imports in check script
...
This checks `ast.ImportFrom` statements to see if anything other than
modules are being imported in this way. It enumerates all instances of
this and suggests a fix.
2025-03-29 15:49:33 -05:00
ikelos and GitHub
61e743036c
Merge pull request #1753 from volatilityfoundation/feature/use-less-memory-2
...
Don't completely remove the chainmap, but change one dict to a namedm…
2025-03-29 15:20:45 +00:00
Mike Auty
b73e4f0d2b
Don't completely remove the chainmap, but change one dict to a namedmapping
2025-03-29 14:32:14 +00:00
ikelos and GitHub
e1613d6ced
Merge pull request #1752 from volatilityfoundation/revert-1736-feature/use-less-memory
...
Revert "Feature/use less memory"
2025-03-29 12:59:03 +00:00
ikelos and GitHub
07f7a2e2be
Revert "Feature/use less memory"
2025-03-29 12:48:47 +00:00
ikelos and GitHub
2ff83404bc
Merge pull request #1736 from volatilityfoundation/feature/use-less-memory
...
Feature/use less memory
2025-03-29 12:33:51 +00:00
ikelos and GitHub
a79c58bcce
Merge pull request #1743 from volatilityfoundation/requirement_checks_github_action
...
Testing: Verify `VersionRequirement`s
2025-03-28 22:30:44 +00:00
David McDonald
6452fc18bd
Tone down language severity in messages
2025-03-28 15:39:09 -05:00
David McDonald
d7695ab9cf
Simplify error message output
2025-03-28 15:36:54 -05:00
David McDonald
46e3b8ffdb
Check for 'hidden' attribute when determining classes to validate
2025-03-28 15:22:37 -05:00
David McDonald
196556eab3
Test: Allow for other types of coding style violations
2025-03-28 15:18:22 -05:00
ikelos and GitHub
eec87d2512
Merge pull request #1749 from eve-mem/volshell_fix_1714
...
Volshell: handle case where paged out member would cause backtrace for dt output.
2025-03-28 19:49:47 +00:00
eve
23f2157931
Volshell: update display_type to handle struct members that are also python functions, e.g. write(). Thanks to @atcuno for the suggestion
2025-03-28 18:50:10 +00:00
eve
e21eb57b90
Volshell: handle case where paged out member would cause backtrace for dt output. Thanks to @atcuno for the code!
2025-03-28 18:40:51 +00:00
David McDonald
d0a1daf82c
ModuleExtract: Add missing requirement
2025-03-28 13:24:51 -05:00
David McDonald
27e59263a6
Docstring: explain version-checking script
...
This documents the general behavior and expectations of the
version-checking CI script.
2025-03-28 13:22:01 -05:00
David McDonald
03c6477902
Volshell: Attempt to resolve requirement conflicts
...
This change sets the `script`, `script-only`, and `primary` requirements
to only apply to the `generic.Volshell` class. `regex-scanner` is okay
to be shared between the base and inherited classes, but `script` and
`script-only` have to be generic-only in order to avoid conflicts when
populating the argparse parser.
`primary` must be generic-only in order to avoid ending up unsatisfied
when superclass requirements require a module, suppressing construction
of the `primary` layer.
2025-03-28 13:22:01 -05:00
David McDonald
9f024cf0f4
Refactor: use builtin ast lib instead of treesitter
...
Instead of using the tree-sitter third party library, this uses Python's
`ast` module to parse the source code and traverse the tree with a
visitor pattern. This is preferred because it's native to the language
itself, and Python developers are more likely to be familiar with it.
The traversal also handles nested scopes better than the prior
implementation. For example, classes that are declared inside of other
classes can now be looked up even though they don't exist at the top
level of the module namespace, since any time a class definition is
entered, that class is pushed to the top of a stack that can be examined
when visiting inner classes.
This also adds lots of log messages at different levels, plus a command
line argument for specifying verbosity, which should help with debugging
down the line.
2025-03-28 13:22:01 -05:00
David McDonald
68116556a8
Add calls to super().get_requirements() on inherited classes
2025-03-28 13:22:01 -05:00
David McDonald
0f73686364
Framework: Fix remaining missing requirements
...
This adds all of the missing requirements discovered via the new code
analysis script.
2025-03-28 13:22:01 -05:00
David McDonald
2ad1536b4e
Testing: Verify VersionRequirements
...
This adds a script and GitHub action to the `test` directory that
dynamically imports all modules in `volatility3`, searches for usages of
`VersionableInterface` objects within classes that inherit from
`ConfigurableInterface` but don't enumerate the used component as a
requirement in `get_requirements()`, and returns -1 if any violations
are found.
Fixes
2025-03-28 13:21:10 -05:00
ikelos and GitHub
49d0404031
Merge pull request #1747 from volatilityfoundation/issues/update-api-changes-log
...
Update the various MINOR version bumps to the current version
2025-03-28 16:37:40 +00:00
ikelos and GitHub
f844f80d2a
Update API_CHANGES.md
...
Fix typo highlighted by @eve-mem
2025-03-28 14:29:35 +00:00
ikelos and GitHub
d77d69cffa
Merge pull request #1746 from volatilityfoundation/fix_hidden_modules
...
Fix hidden_modules to actually list hidden modules...
2025-03-28 01:48:12 +00:00
Mike Auty
ee0ad0b4af
Update the various MINOR version bumps to the current version
2025-03-28 01:46:14 +00:00
Andrew Case
a3069a3192
Fix hidden_modules to actually list hidden modules...
2025-03-27 20:06:09 -05:00
ikelos and GitHub
e8e8e76e79
Merge pull request #1740 from volatilityfoundation/lkm_extraction
...
Add module extraction API. Add plugin to directly extract modules. Ho…
2025-03-28 00:55:57 +00:00
Andrew Case
61575ca2b1
Require parity framework version
2025-03-27 19:30:58 -05:00
Andrew Case
aab95ea18e
Add required interface version to plugin
2025-03-27 18:39:29 -05:00
Andrew Case
5cfd55eba8
ordering fix
2025-03-27 17:17:08 -05:00
Andrew Case
ed7e013aac
Bug fix
2025-03-27 17:06:14 -05:00
Andrew Case
82d4de90df
Address feedback update
2025-03-27 17:02:23 -05:00
Andrew Case
7f55ec6dd5
Address feedback
2025-03-27 16:46:51 -05:00
ikelos and GitHub
f33e9daa48
Merge pull request #1707 from volatilityfoundation/1471-registry-plugins-spread-across-directories-needs-standardization
...
1471 registry plugins spread across directories needs standardization
2025-03-27 16:36:58 +00:00
70e101ff90
Potential fix for code scanning alert no. 407: First argument to super() is not enclosing class
...
Think this is more correct
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-03-27 14:13:25 +00:00
Dave Lassalle
bfc7e01d75
fix merge conflicts
2025-03-27 08:25:34 -05:00
Dave Lassalle
ef29008cc8
#1471 - fix class deprecation and update other plugins
2025-03-26 17:53:19 -05:00
ikelos and GitHub
8de46033d7
Merge pull request #1737 from Abyss-W4tcher/additional_windows_testing
...
Windows: Additional testing
2025-03-26 20:30:15 +00:00
Abyss Watcher
dca182dc72
trigger tests
2025-03-26 15:59:35 +01:00
ikelos and GitHub
f74082ec36
Merge pull request #1742 from volatilityfoundation/1741-consoles-requirements
...
Consoles: Fix requirement versions
2025-03-26 14:50:15 +00:00
David McDonald
1c21b3cd04
Consoles: Fix requirement versions
...
When I updated the requirements for `Consoles` in #1738 , I bumped the
version number on the `VerInfo` requirement instead of on the `Info`
requirement.
closes #1741
2025-03-26 09:07:32 -05:00
Abyss-W4tcher and GitHub
ff8d6dbd42
Merge branch 'develop' into additional_windows_testing
2025-03-26 14:42:14 +01:00
Abyss Watcher
b80a34110e
adjust thrdscan
2025-03-26 14:41:05 +01:00
Dave Lassalle
f431f519b6
#1471 - black and ruff fixes
2025-03-26 08:22:37 -05:00
Dave Lassalle
67533b034a
#1471 - deprecation class for moving
2025-03-26 08:21:28 -05:00
Andrew Case
25eaaff06c
Bring hidden module to expose dump option. Fix CodeQL found bug
2025-03-26 01:30:26 +00:00
Andrew Case
e93df37649
Add module extraction API. Add plugin to directly extract modules. Hook module dumping into existing module listing plugins.
2025-03-26 01:16:53 +00:00
ikelos and GitHub
4fd0f20ff9
Merge pull request #1739 from volatilityfoundation/fix_thrdscan_checks
...
Fix checks in thrdscan that broke tests
2025-03-26 00:55:32 +00:00
Andrew Case
444305afc2
Handle kernel processes properly this time
2025-03-26 00:55:48 +00:00
Andrew Case
43ab95f4c5
Change thrdscan from looking for kernel processes
2025-03-26 00:50:34 +00:00
David McDonald