 Andrew C
|
c9599b11ae
|
Linux - remove unused code
|
2014-10-25 11:09:56 -05:00 |
|
|
Andrew C
|
c2bd0d9b98
|
Linux - update dname translation for 3.13+
|
2014-07-08 13:09:49 -05:00 |
|
|
atcuno
|
cba259820b
|
Linux - add common.py from book vm
|
2014-03-20 14:27:38 -05:00 |
|
|
iMHLv2
|
7edb7d9bf0
|
initial commit of revised strings plugin to work with linux and mac
|
2014-01-28 15:24:32 -06:00 |
|
|
iMHLv2
|
cde7d1efa5
|
a few updates to linux_common
https://github.com/iMHLv2/voldb/commit/a77f29ed052e9f30c5bafecb1bd2e5862
dc99ae6
|
2014-01-17 20:11:11 -06:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
iMHLv2
|
5c283ad4f7
|
AbstractLinuxCommand.known_addrs should be a dict initially, not a list and then set to a dict from plugins
|
2013-08-17 17:31:30 +00:00 |
|
|
atcuno
|
209e68ccf1
|
Linux - add support for architecutre specific plugins
|
2013-04-11 20:14:49 +00:00 |
|
|
iMHLv2
|
f606ffd282
|
add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369
|
2013-02-20 02:56:19 +00:00 |
|
|
iMHLv2
|
0cc8f8e4df
|
move the linux_common.get_partial_path() function to a dentry object class method
|
2013-02-19 20:52:38 +00:00 |
|
|
iMHLv2
|
4f7e22430b
|
remove the linux_common.S_ISREG and linux_common.S_ISDIR functions. replace them with an inode object class that has is_dir() and is_reg() methods
|
2013-02-19 20:05:32 +00:00 |
|
|
iMHLv2
|
300739da35
|
remove the deprecated walk_list_head() function from linux common
|
2013-02-19 19:54:45 +00:00 |
|
|
iMHLv2
|
49d57f9ae0
|
move online_cpus, get_per_cpu_symbol, and walk_per_cpu_var from AbstractLinuxCommand into linux_cpuinfo
|
2013-02-19 18:04:31 +00:00 |
|
|
iMHLv2
|
8ed0c4bdbc
|
move the linux get_task_start_time() API out of AbstractLinuxCommand - put it in the task_struct object class
|
2013-02-19 17:58:44 +00:00 |
|
|
iMHLv2
|
885087f009
|
remove the unnecessary AbstractLinuxCommand.get_profile_symbol(). plugins now call directly to the API
|
2013-02-19 17:44:04 +00:00 |
|
|
iMHLv2
|
0af575492f
|
replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead
|
2013-02-19 17:42:25 +00:00 |
|
|
atcuno
|
74a915194d
|
Linux - bugfix - update calculation of task start time to support 2.6.18 centos
|
2012-09-16 21:50:47 +00:00 |
|
|
atcuno
|
48ff833f38
|
Linux - bugfix - make return values consistent in address_in_module
|
2012-09-12 18:28:50 +00:00 |
|
|
atcuno
|
cbdef36153
|
Linux - move radix tree and getting files into find_file and update tmpfs to use new code
|
2012-09-12 00:28:36 +00:00 |
|
|
mike.auty@gmail.com
|
e139eece1a
|
Linux - Fix an error in common.py and shrink a function slightly.
|
2012-09-10 20:45:52 +00:00 |
|
|
atcuno
|
30d782dbd8
|
Linux - remove unnecesary TODOs and change some to FUTURE
|
2012-09-10 20:12:35 +00:00 |
|
|
atcuno
|
fa98736e2a
|
Linux - further cleanup of common for verify_ops, change check_fop and check_afinfo to use
|
2012-09-10 19:40:59 +00:00 |
|
|
atcuno
|
add23cbc31
|
Linux - continue the cleanup of common, update pidhashtable and cpuinfo to reference new code locations
|
2012-09-10 19:12:19 +00:00 |
|
|
atcuno
|
60d3ac6ac4
|
Linux - make get_page_contents use zread
|
2012-09-10 18:52:26 +00:00 |
|
|
atcuno
|
84cab784ea
|
Linux - get rid of phys_addr_of_page for page overlay to_paddr
|
2012-09-10 18:11:53 +00:00 |
|
|
atcuno
|
2a3eb5b70c
|
Linux - remove old sparse code from common
|
2012-09-10 18:05:06 +00:00 |
|
|
atcuno
|
f1302f9573
|
Linux - be extra careful with unallocated processes start time
|
2012-09-10 17:35:05 +00:00 |
|
|
mike.auty@gmail.com
|
e017034023
|
Pylint, formatting and styles fixes for all linux plugins.
|
2012-09-10 15:06:57 +00:00 |
|
|
atcuno
|
dbf56330c6
|
Linux - update dentry cache with get_partial to common
|
2012-09-10 05:17:55 +00:00 |
|
|
atcuno
|
0ac69619fa
|
Linux - get rid of mask_number from common
|
2012-09-09 21:13:11 +00:00 |
|
|
atcuno
|
b8c8e3ceca
|
Linux - make each plugin get its own address space
|
2012-09-09 18:18:57 +00:00 |
|
|
atcuno
|
d9af237923
|
Linux - add check_fop plugin
|
2012-09-08 21:24:03 +00:00 |
|
|
mike.auty@gmail.com
|
2eb7603401
|
Move the get_profile_symbol docstring to the right place.
|
2012-09-08 21:06:14 +00:00 |
|
|
mike.auty@gmail.com
|
8da7cfd8ad
|
Slightly improve error checking on the linux profile attribute.
|
2012-09-08 21:05:58 +00:00 |
|
|
mike.auty@gmail.com
|
2cb70a7968
|
Ensure Linux commands don't start playing with address spaces until they're told to execute.
|
2012-09-08 19:37:53 +00:00 |
|
|
mike.auty@gmail.com
|
b639c07121
|
Pylint before applying a fix for issue 279.
|
2012-09-08 19:37:43 +00:00 |
|
|
atcuno
|
ad3d1e1375
|
Linux - commit pointer truncations, will be removed in 2.3
|
2012-09-03 21:48:22 +00:00 |
|
|
iMHLv2
|
6fdcd8f995
|
Linux - whitespace stuff in common.py
|
2012-09-02 23:23:37 +00:00 |
|
|
atcuno
|
638e100592
|
Linux - make path calculation more resilient to unallocated entries
|
2012-08-31 18:38:01 +00:00 |
|
|
atcuno
|
f7044c792f
|
Linux - update module.c and pslist/psaux to support 3.5 timekeeping structures
|
2012-08-26 17:46:16 +00:00 |
|
|
atcuno
|
160467981c
|
Linux - Add Joes kmem_cache SLAB support
|
2012-08-25 17:03:41 +00:00 |
|
|
atcuno
|
0e8df1e298
|
Linux - update page cache code to new symbol methods and to chopped 64 bit pointers
|
2012-08-25 16:57:16 +00:00 |
|
|
atcuno
|
c05d36859a
|
Linux - move page cache code out of tmpfs, add support for sparse_mem in page cache code
|
2012-08-25 16:32:32 +00:00 |
|
|
atcuno
|
73793e6147
|
Linux - move get_profile_symbol to get_symbol in AbstractLinuxProfile, close 329
|
2012-08-25 15:52:55 +00:00 |
|
|
atcuno
|
3899b1af08
|
Linux - update multicore cpuinfo for new symbols method
|
2012-08-25 02:54:58 +00:00 |
|
|
atcuno
|
0de05bf7a5
|
Linux - update cpuinfo to use new symbol method and to use new per_cpu method
|
2012-08-24 23:37:23 +00:00 |
|
|
atcuno
|
9427b366f0
|
Linux - update all plugins but cpuinfo to new symbol handling method
|
2012-08-24 23:21:08 +00:00 |
|