From f2c094ed8fef59b248fe75dd466d8569de7d1c86 Mon Sep 17 00:00:00 2001 From: haco20292 Date: Wed, 27 Apr 2016 01:09:13 +0800 Subject: [PATCH] Fix an exception in linux_dmesg There're two "log_buf" symbols, one is d-type and the other is b-type. --- volatility/plugins/linux/dmesg.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/plugins/linux/dmesg.py b/volatility/plugins/linux/dmesg.py index 238a5832..8e42f0ce 100644 --- a/volatility/plugins/linux/dmesg.py +++ b/volatility/plugins/linux/dmesg.py @@ -32,9 +32,9 @@ class linux_dmesg(linux_common.AbstractLinuxCommand): def _get_log_info(self): - ptr_addr = self.addr_space.profile.get_symbol("log_buf") + ptr_addr = self.addr_space.profile.get_symbol("log_buf", "d") log_buf_addr = obj.Object("unsigned long", offset = ptr_addr, vm = self.addr_space) - log_buf_len = obj.Object("int", self.addr_space.profile.get_symbol("log_buf_len"), vm = self.addr_space) + log_buf_len = obj.Object("int", self.addr_space.profile.get_symbol("log_buf_len", "d"), vm = self.addr_space) return (log_buf_addr, log_buf_len)