Andrew C
|
6d0f9c4132
|
Linux - update time handling for olderish kernels
|
2014-12-29 17:08:50 -06:00 |
|
Andrew C
|
7bcad479e5
|
Linux - update hidden modules for Android differences
|
2014-12-14 18:17:30 -06:00 |
|
Andrew C
|
49f99f627c
|
Linux - greatly improve performance of hidden_modules
|
2014-10-28 12:34:40 -05:00 |
|
Andrew C
|
7ab63e037d
|
Linux - add linux_getcwd
|
2014-10-24 12:33:24 -05:00 |
|
Andrew C
|
ca31f237e3
|
Linux - fix proc_maps for Android without vdso support
|
2014-10-06 14:27:18 -05:00 |
|
Andrew C
|
b95fc2fac1
|
Linux - move apihooks check into overlay
|
2014-10-06 14:24:40 -05:00 |
|
Andrew C
|
6ee97bcb81
|
Linux - add check for memory corruption in files tables
|
2014-10-06 13:38:45 -05:00 |
|
iMHLv2
|
1eaed92159
|
refs #87 fix linux dt() for dentry (d_count is None)
|
2014-09-12 19:48:22 -05:00 |
|
Andrew C
|
da8d19f964
|
linux - update netstat api
|
2014-09-09 20:23:04 -05:00 |
|
Andrew Case
|
05b90542a6
|
Linux - update bash env
|
2014-09-02 09:21:17 -05:00 |
|
Andrew Case
|
625a1581ad
|
Linux - update psenv
|
2014-08-28 21:38:17 -05:00 |
|
Andrew Case
|
b2a055ea12
|
Linux - more robust mac address gathering
|
2014-08-27 22:30:42 -05:00 |
|
Andrew Case
|
ad83cdb506
|
Linux - update APIs
|
2014-08-15 11:11:09 -05:00 |
|
Andrew Case
|
d10075b060
|
Linux - move malfind to overlays
|
2014-07-26 19:20:07 -05:00 |
|
Andrew Case
|
d49f544926
|
Linux - update lsof & netstat api
|
2014-07-26 18:50:39 -05:00 |
|
Andrew Case
|
a3f462f632
|
Linux - move ldrmodules to overlay
|
2014-07-26 14:08:40 -05:00 |
|
Andrew Case
|
3253ca993d
|
Linux - update bash hash to be 1000x faster
|
2014-07-25 17:46:57 -05:00 |
|
Andrew Case
|
ec57367da4
|
Linux - update bash to use overlay
|
2014-07-25 16:13:21 -05:00 |
|
Andrew Case
|
9e9c23dddf
|
Linux - update process thread gathering to be an overlay
|
2014-07-25 08:40:23 -07:00 |
|
Andrew C
|
25400d40aa
|
Linux - get rid of linux64.py
|
2014-07-15 17:53:09 -05:00 |
|
Andrew C
|
ffed473894
|
Linux - update task uid/gid getting for newer kernels
|
2014-07-12 23:18:27 -05:00 |
|
Andrew C
|
821a0229cb
|
Linux - update netstat
|
2014-07-12 23:05:28 -05:00 |
|
Andrew C
|
77757c4279
|
Linux - update dentry for newer kernels
|
2014-07-09 04:15:41 -05:00 |
|
Andrew C
|
2effdbb92c
|
Linux - update linux_mount
|
2014-07-08 21:32:47 -05:00 |
|
Andrew C
|
76bd415c0b
|
Linux - switch all code to vm_name
|
2014-07-08 05:31:12 -05:00 |
|
Andrew C
|
6e82f35788
|
Linux - add new ELF API caps and linux_plthook
|
2014-07-07 23:04:18 -05:00 |
|
Andrew C
|
652d7e1ed1
|
Linux - add linux_elfs and new linux ELF APIs
|
2014-07-05 22:15:06 -05:00 |
|
Andrew C
|
55a6e1325a
|
Linux - make kernel module symbol resolution support both 32 and 64 bit
|
2014-06-04 14:46:09 -05:00 |
|
atcuno
|
05e51abdd8
|
Linux - add linux.py from book vm
|
2014-03-15 20:34:37 -05:00 |
|
iMHLv2
|
ac76aecdc1
|
add some linux APIs (get_environment, etc)
https://github.com/iMHLv2/voldb/commit/a77f29ed052e9f30c5bafecb1bd2e5862
dc99ae6
|
2014-01-17 20:26:56 -06:00 |
|
iMHLv2
|
79042c90a0
|
Add new generic-elf api, update vboxelf to work with it, add linux_library_list
https://github.com/iMHLv2/voldb/commit/04477c868e28307995fde709a6ad54395
b006366
|
2014-01-17 19:28:20 -06:00 |
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
atcuno
|
93affe0392
|
Linux - make system map parser skip corrupt lines
|
2013-11-15 14:22:25 +00:00 |
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
atcuno
|
c02298dd35
|
Linux - update ifconfig to understand virtual addresses
|
2013-09-30 06:40:19 +00:00 |
|
atcuno
|
936fc9dd29
|
Linux - make Linux timestamps UTC
|
2013-09-26 03:17:22 +00:00 |
|
atcuno
|
8a5018e4fc
|
Linux - check for paged out command line args before reading
|
2013-09-24 17:51:58 +00:00 |
|
iMHLv2
|
d566437cc4
|
fix an exception in linux_netstat on a missing inet_sock.inet_dport. reported by Edwin Smulders. at the same time, create some APIs for linux's inet_sock object. fixes issue #434
|
2013-07-17 14:30:28 +00:00 |
|
iMHLv2
|
65fe680332
|
add the functions is_executable, is_readable and is_writable to the class LinuxPermissionFlags. patch by Edwin Smulders
|
2013-07-16 13:44:51 +00:00 |
|
iMHLv2
|
6a4dfbf869
|
move the linux command line function to the object class rather than the plugin
|
2013-07-03 19:03:08 +00:00 |
|
iMHLv2
|
86bea0b847
|
share the iterfind() function between windows, linux, and mac by placing it in the commonly accessible utils.py file
|
2013-04-09 19:07:36 +00:00 |
|
awalters
|
7438e8c783
|
Fixes issue 281 based on jsylve's updated patch. The arch values are not being used for address space selection. They are being used for architecture specific characteristics found in plugins. This is a first attempt at addressing the issue. We may revisit if problems arise.
|
2013-04-09 17:48:58 +00:00 |
|
iMHLv2
|
e25cc64037
|
the vm_area_struct overlay was in the wrong place
|
2013-04-02 12:19:19 +00:00 |
|
iMHLv2
|
d15e9e252e
|
yet another attempt to fix the negative numbers in vm_area_struct for linux when using proc_maps
|
2013-04-02 11:24:23 +00:00 |
|
iMHLv2
|
e336e8e940
|
add an optional parameter to the linux search_process_memory() API named heap_only which when set to True only searches the process main heap segment for the specified strings
|
2013-04-02 02:13:05 +00:00 |
|
atcuno
|
60375d9c20
|
Linux - overlay vm area member to always be unsigned
|
2013-03-30 00:10:14 +00:00 |
|
iMHLv2
|
3fe19d1eb0
|
patching linux_check_tty plugin. fixes issue #386
|
2013-03-29 22:26:39 +00:00 |
|
iMHLv2
|
5dd17f9560
|
include the reason why mem_map_ptr and related symbols aren't in some profiles (NUMA) and let users know we dont yet support NUMA on linux
|
2013-03-29 21:18:41 +00:00 |
|