move the plugin description for linux_check_evt_arm to proper place for pydoc

This commit is contained in:
iMHLv2
2013-02-05 20:05:06 +00:00
parent 3cd0e2c881
commit 7cbab87f06
+2 -2
View File
@@ -27,12 +27,12 @@ import volatility.plugins.linux.common as linux_common
class linux_check_evt_arm(linux_common.AbstractLinuxCommand):
''' Checks the Exception Vector Table to look for syscall table hooking '''
VECTOR_BASE = 0xffff0000
SWI_BASE = VECTOR_BASE + 8
def calculate(self):
''' Performs various checks on the Exception Vector Table to look for syscall table hooking '''
linux_common.set_plugin_members(self)
# Get instructions executed when an inturrupt exception occurs
swi = obj.Object("unsigned int", offset = self.SWI_BASE, vm = self.addr_space)