mirror of
https://github.com/volatilityfoundation/volatility
synced 2026-06-08 18:04:46 +00:00
adjust the find_aslr_shift and mac_proc_maps plugins for proper widths of long/unsigned long values
This commit is contained in:
@@ -33,7 +33,7 @@ class mac_find_aslr_shift(common.AbstractMacCommand):
|
||||
yield self.profile.shift_address
|
||||
|
||||
def render_text(self, outfd, data):
|
||||
self.table_header(outfd, [("DTB Value", "[addr]")])
|
||||
self.table_header(outfd, [("DTB Value", "#018x")])
|
||||
for shift_address in data:
|
||||
if shift_address == 0:
|
||||
debug.error("Shift addresses are only required on 10.8+ images")
|
||||
|
||||
@@ -42,12 +42,11 @@ class mac_proc_maps(pslist.mac_pslist):
|
||||
map = map.links.next
|
||||
|
||||
def render_text(self, outfd, data):
|
||||
self.table_header(outfd, [("Start", "[addrpad]"),
|
||||
("End", "[addrpad]"),
|
||||
self.table_header(outfd, [("Start", "#018x"),
|
||||
("End", "#018x"),
|
||||
("Perms", "9"),
|
||||
("Map Name", "")])
|
||||
|
||||
## FIXME: [addrpad] gets truncated here for some reason
|
||||
for (proc, map) in data:
|
||||
self.table_row(outfd,
|
||||
map.links.start,
|
||||
|
||||
Reference in New Issue
Block a user