admin/volatilityfoundation-volatility
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility synced 2026-06-08 18:04:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Linux - tty check

Browse Source
This commit is contained in:
atcuno
2014-04-15 16:10:50 -05:00
parent 6eb22d081a
commit 97945c33bb
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/linux/tty_check.py
+3 -5
View File
@@ -57,15 +57,13 @@ class linux_check_tty(linux_common.AbstractLinuxCommand):
name = tty_dev.name
recv_buf = tty_dev.ldisc.ops.receive_buf
if recv_buf in sym_cache:
sym_name = sym_cache[recv_buf]
else:
sym_name = self.is_known_address(recv_buf, modules)
hooked = self.is_known_address(recv_buf, modules)
if not sym_name:
if hooked:
sym_name = "HOOKED"
hooked = 1
else:
sym_name = self.profile.get_symbol_by_address("kernel", call_addr)
hooked = 0
sym_cache[recv_buf] = sym_name