From f9b24cff342ef4d5b87addfb0ab91df8e28b5743 Mon Sep 17 00:00:00 2001 From: iMHLv2 Date: Sun, 9 Sep 2012 17:42:36 +0000 Subject: [PATCH] Linux - change addr to addrpad for proper sizing on both x86 and x64 on check_afinfo --- volatility/plugins/linux/check_afinfo.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/plugins/linux/check_afinfo.py b/volatility/plugins/linux/check_afinfo.py index a5a72e3f..4622aa27 100644 --- a/volatility/plugins/linux/check_afinfo.py +++ b/volatility/plugins/linux/check_afinfo.py @@ -66,7 +66,7 @@ class linux_check_afinfo(linux_common.AbstractLinuxCommand): if not global_var_addr: continue - global_var = obj.Object(struct_type, offset=global_var_addr, vm=self.addr_space) + global_var = obj.Object(struct_type, offset = global_var_addr, vm = self.addr_space) for (name, member, address) in self.check_afinfo(global_var_name, global_var, op_members, seq_members, modules): yield (name, member, address) @@ -75,7 +75,7 @@ class linux_check_afinfo(linux_common.AbstractLinuxCommand): self.table_header(outfd, [("What", "42"), ("Member", "30"), - ("Address", "[addr]")]) + ("Address", "[addrpad]")]) for (what, member, address) in data: self.table_row(outfd, what, member, address)