Commit Graph

23 Commits

Author SHA1 Message Date
Karl Vogel f202a0b107 Fix endianness dependency in IpAddress
Current implementation byte swaps while reading the native
type, then byte swaps to convert to network order for inet_ntop
on little endian targets.

For big endian address spaces, this could would produce
incorrect results, as the native type would be in network byte
order, causing the struct.pack to mess up the IP address.

This aligns the conversion like it's done for IPv6 addresses.
2014-10-22 21:16:19 +02:00
iMHLv2 434289d356 move VolatilityMaxAddress to a basic type so its accessible to mac/linux profiles 2014-09-08 13:57:44 -05:00
iMHLv2 e6ed7078f9 sync with r3581 of trunk 2014-01-17 14:21:55 -06:00
iMHLv2 f699e93a4f sync with r3514 2013-10-08 01:04:26 -04:00
iMHLv2 d242168adb initial commit of r3513 branch 2013-10-07 11:55:04 -04:00
awalters 4c7cc26502 Standardization of file headers. License clarification. Dumpfiles committed to trunk. 2013-10-08 04:16:13 +00:00
gleeda e003ebffb9 Moving UnixTimeStamp to basic.py so that it can be used for profiles other than Windows 2013-02-11 19:20:51 +00:00
atcuno a77220c0b8 Linux - change the cast of IPv4 addresses to always be 4 bytes, fixes netstat, ifconfig, and route_cache 2012-08-27 01:19:22 +00:00
mike.auty@gmail.com 5cb4ab5dda Fix up a large number of very minor pylint/indentation/trailing space issues across the tree. 2012-05-14 23:06:56 +00:00
iMHLv2 613778538b move netscan.inet_ntop to utils.inet_ntop so its accessible from basic.IpAddress and plugins from other profiles like linux etc 2012-05-09 23:24:23 +00:00
mike.auty@gmail.com 8afb0e8ae8 Add in generic IPv6 Address. 2012-05-03 19:19:29 +00:00
mike.auty@gmail.com b6028b4f43 Move IpAddress to basic since it's platform agnostic. 2012-05-03 18:14:56 +00:00
iMHLv2 8eea2347b6 ikelos's patch for adding a len() to unicode strings so mutantscan's silent option doesn't crash. fixes Issue #242 2012-04-11 23:44:29 +00:00
mike.auty@gmail.com d2ad98c0e4 Replace while 1 with a properly guarded loop in DTB signature searching. 2012-04-06 17:44:37 +00:00
mike.auty@gmail.com 9edfd55258 Change the String __eq__ functions to __cmp__. 2012-03-22 00:35:19 +00:00
mike.auty@gmail.com 080decb612 Add in the missing __eq__ function since we've moved from NativeType to BaseObject. 2012-03-22 00:11:25 +00:00
mike.auty@gmail.com e44c2d641e Add in encoding support in strings.
Now String.v() returns a character array of length (as specified in
the constructor) or NoneObject if the object could not be read.
str(String) returns a string with encoding errors replaced by '?'
and unicode(String) returns a unicode string with encoding errors
replaced by '\ufffd'.

_UNICODE_STRING.v() returns a unicode string or NoneObject if the buffer
length is invalid.  str(_UNICODE_STRING) and unicode(_UNICODE_STRING)
behave like str(String) and unicode(String) except that if there is a
problem with the buffer length or dereferencing the buffer a warning
will be issued.  If the warning can safely be ignored use
str(_UNICODE_STRING or '') or unicode(_UNICODE_STRING or '').
2012-03-21 23:25:23 +00:00
mike.auty@gmail.com e3e089b096 Merge the newprofile branch into trunk. 2012-02-18 10:33:47 +00:00
mike.auty@gmail.com 5a2850f48c Fix up poor naming of the native types. 2012-01-15 01:29:23 +00:00
mike.auty@gmail.com 2042fe7051 Add in 64-bit native types. 2012-01-04 20:56:24 +00:00
mike.auty@gmail.com 9100a60394 Flip the level mask, and minor style change. 2012-01-02 17:44:41 +00:00
mike.auty@gmail.com 0129921aa8 Add in changes to the object model to support higher level VMs, with lower level offsets. 2011-12-29 13:35:31 +00:00
mike.auty@gmail.com 117e5b466a Move the Volatility-1.4_rc1 branch over to trunk. 2011-06-29 21:01:19 +00:00