admin/volatilityfoundation-volatility
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility synced 2026-06-08 18:04:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

use dereference_as() and outfd.write() in mac_dmesg

Browse Source
This commit is contained in:
iMHLv2
2013-01-29 05:40:56 +00:00
parent e343a501ee
commit ef91ca77fb
1 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/mac/dmesg.py
+4 -7
View File
@@ -30,9 +30,8 @@ class mac_dmesg(common.AbstractMacCommand):
def calculate(self):
common.set_plugin_members(self)
msgbuf_ptr = obj.Object("Pointer", offset=self.get_profile_symbol("_msgbufp"), vm=self.addr_space)
msgbufp = obj.Object("msgbuf", offset=msgbuf_ptr, vm=self.addr_space)
msgbuf_ptr = obj.Object("Pointer", offset = self.get_profile_symbol("_msgbufp"), vm = self.addr_space)
msgbufp = msgbuf_ptr.dereference_as("msgbuf")
bufx = msgbufp.msg_bufx
size = msgbufp.msg_size
@@ -40,19 +39,17 @@ class mac_dmesg(common.AbstractMacCommand):
if bufc[bufx] == 0 and bufc[0] != 0:
buf = common.get_string(bufc, self.addr_space)
else:
if bufx > size:
bufx = 0
# older messages
buf = bufc[bufx:bufx+size]
buf = bufc[bufx:bufx + size]
buf = buf + bufc[0:bufx]
yield buf
def render_text(self, outfd, data):
for buf in data:
print buf
outfd.write("{0}\n".format(buf))