Commit Graph

91 Commits

Author SHA1 Message Date
Andrew C 6d0f9c4132 Linux - update time handling for olderish kernels 2014-12-29 17:08:50 -06:00
Andrew C 7bcad479e5 Linux - update hidden modules for Android differences 2014-12-14 18:17:30 -06:00
Andrew C 49f99f627c Linux - greatly improve performance of hidden_modules 2014-10-28 12:34:40 -05:00
Andrew C 7ab63e037d Linux - add linux_getcwd 2014-10-24 12:33:24 -05:00
Andrew C ca31f237e3 Linux - fix proc_maps for Android without vdso support 2014-10-06 14:27:18 -05:00
Andrew C b95fc2fac1 Linux - move apihooks check into overlay 2014-10-06 14:24:40 -05:00
Andrew C 6ee97bcb81 Linux - add check for memory corruption in files tables 2014-10-06 13:38:45 -05:00
iMHLv2 1eaed92159 refs #87 fix linux dt() for dentry (d_count is None) 2014-09-12 19:48:22 -05:00
Andrew C da8d19f964 linux - update netstat api 2014-09-09 20:23:04 -05:00
Andrew Case 05b90542a6 Linux - update bash env 2014-09-02 09:21:17 -05:00
Andrew Case 625a1581ad Linux - update psenv 2014-08-28 21:38:17 -05:00
Andrew Case b2a055ea12 Linux - more robust mac address gathering 2014-08-27 22:30:42 -05:00
Andrew Case ad83cdb506 Linux - update APIs 2014-08-15 11:11:09 -05:00
Andrew Case d10075b060 Linux - move malfind to overlays 2014-07-26 19:20:07 -05:00
Andrew Case d49f544926 Linux - update lsof & netstat api 2014-07-26 18:50:39 -05:00
Andrew Case a3f462f632 Linux - move ldrmodules to overlay 2014-07-26 14:08:40 -05:00
Andrew Case 3253ca993d Linux - update bash hash to be 1000x faster 2014-07-25 17:46:57 -05:00
Andrew Case ec57367da4 Linux - update bash to use overlay 2014-07-25 16:13:21 -05:00
Andrew Case 9e9c23dddf Linux - update process thread gathering to be an overlay 2014-07-25 08:40:23 -07:00
Andrew C 25400d40aa Linux - get rid of linux64.py 2014-07-15 17:53:09 -05:00
Andrew C ffed473894 Linux - update task uid/gid getting for newer kernels 2014-07-12 23:18:27 -05:00
Andrew C 821a0229cb Linux - update netstat 2014-07-12 23:05:28 -05:00
Andrew C 77757c4279 Linux - update dentry for newer kernels 2014-07-09 04:15:41 -05:00
Andrew C 2effdbb92c Linux - update linux_mount 2014-07-08 21:32:47 -05:00
Andrew C 76bd415c0b Linux - switch all code to vm_name 2014-07-08 05:31:12 -05:00
Andrew C 6e82f35788 Linux - add new ELF API caps and linux_plthook 2014-07-07 23:04:18 -05:00
Andrew C 652d7e1ed1 Linux - add linux_elfs and new linux ELF APIs 2014-07-05 22:15:06 -05:00
Andrew C 55a6e1325a Linux - make kernel module symbol resolution support both 32 and 64 bit 2014-06-04 14:46:09 -05:00
atcuno 05e51abdd8 Linux - add linux.py from book vm 2014-03-15 20:34:37 -05:00
iMHLv2 ac76aecdc1 add some linux APIs (get_environment, etc)
https://github.com/iMHLv2/voldb/commit/a77f29ed052e9f30c5bafecb1bd2e5862
dc99ae6
2014-01-17 20:26:56 -06:00
iMHLv2 79042c90a0 Add new generic-elf api, update vboxelf to work with it, add linux_library_list
https://github.com/iMHLv2/voldb/commit/04477c868e28307995fde709a6ad54395
b006366
2014-01-17 19:28:20 -06:00
iMHLv2 e6ed7078f9 sync with r3581 of trunk 2014-01-17 14:21:55 -06:00
iMHLv2 f699e93a4f sync with r3514 2013-10-08 01:04:26 -04:00
iMHLv2 d242168adb initial commit of r3513 branch 2013-10-07 11:55:04 -04:00
atcuno 93affe0392 Linux - make system map parser skip corrupt lines 2013-11-15 14:22:25 +00:00
awalters 4c7cc26502 Standardization of file headers. License clarification. Dumpfiles committed to trunk. 2013-10-08 04:16:13 +00:00
atcuno c02298dd35 Linux - update ifconfig to understand virtual addresses 2013-09-30 06:40:19 +00:00
atcuno 936fc9dd29 Linux - make Linux timestamps UTC 2013-09-26 03:17:22 +00:00
atcuno 8a5018e4fc Linux - check for paged out command line args before reading 2013-09-24 17:51:58 +00:00
iMHLv2 d566437cc4 fix an exception in linux_netstat on a missing inet_sock.inet_dport. reported by Edwin Smulders. at the same time, create some APIs for linux's inet_sock object. fixes issue #434 2013-07-17 14:30:28 +00:00
iMHLv2 65fe680332 add the functions is_executable, is_readable and is_writable to the class LinuxPermissionFlags. patch by Edwin Smulders 2013-07-16 13:44:51 +00:00
iMHLv2 6a4dfbf869 move the linux command line function to the object class rather than the plugin 2013-07-03 19:03:08 +00:00
iMHLv2 86bea0b847 share the iterfind() function between windows, linux, and mac by placing it in the commonly accessible utils.py file 2013-04-09 19:07:36 +00:00
awalters 7438e8c783 Fixes issue 281 based on jsylve's updated patch. The arch values are not being used for address space selection. They are being used for architecture specific characteristics found in plugins. This is a first attempt at addressing the issue. We may revisit if problems arise. 2013-04-09 17:48:58 +00:00
iMHLv2 e25cc64037 the vm_area_struct overlay was in the wrong place 2013-04-02 12:19:19 +00:00
iMHLv2 d15e9e252e yet another attempt to fix the negative numbers in vm_area_struct for linux when using proc_maps 2013-04-02 11:24:23 +00:00
iMHLv2 e336e8e940 add an optional parameter to the linux search_process_memory() API named heap_only which when set to True only searches the process main heap segment for the specified strings 2013-04-02 02:13:05 +00:00
atcuno 60375d9c20 Linux - overlay vm area member to always be unsigned 2013-03-30 00:10:14 +00:00
iMHLv2 3fe19d1eb0 patching linux_check_tty plugin. fixes issue #386 2013-03-29 22:26:39 +00:00
iMHLv2 5dd17f9560 include the reason why mem_map_ptr and related symbols aren't in some profiles (NUMA) and let users know we dont yet support NUMA on linux 2013-03-29 21:18:41 +00:00