 iMHLv2
|
f606ffd282
|
add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369
|
2013-02-20 02:56:19 +00:00 |
|
|
iMHLv2
|
0cc8f8e4df
|
move the linux_common.get_partial_path() function to a dentry object class method
|
2013-02-19 20:52:38 +00:00 |
|
|
iMHLv2
|
4f7e22430b
|
remove the linux_common.S_ISREG and linux_common.S_ISDIR functions. replace them with an inode object class that has is_dir() and is_reg() methods
|
2013-02-19 20:05:32 +00:00 |
|
|
iMHLv2
|
300739da35
|
remove the deprecated walk_list_head() function from linux common
|
2013-02-19 19:54:45 +00:00 |
|
|
iMHLv2
|
49d57f9ae0
|
move online_cpus, get_per_cpu_symbol, and walk_per_cpu_var from AbstractLinuxCommand into linux_cpuinfo
|
2013-02-19 18:04:31 +00:00 |
|
|
iMHLv2
|
8ed0c4bdbc
|
move the linux get_task_start_time() API out of AbstractLinuxCommand - put it in the task_struct object class
|
2013-02-19 17:58:44 +00:00 |
|
|
iMHLv2
|
885087f009
|
remove the unnecessary AbstractLinuxCommand.get_profile_symbol(). plugins now call directly to the API
|
2013-02-19 17:44:04 +00:00 |
|
|
iMHLv2
|
0af575492f
|
replace all the calls to self.get_profile_symbol() from linux plugins, use self.addr_space.profile.get_symbol() instead
|
2013-02-19 17:42:25 +00:00 |
|
|
atcuno
|
74a915194d
|
Linux - bugfix - update calculation of task start time to support 2.6.18 centos
|
2012-09-16 21:50:47 +00:00 |
|
|
atcuno
|
48ff833f38
|
Linux - bugfix - make return values consistent in address_in_module
|
2012-09-12 18:28:50 +00:00 |
|
|
atcuno
|
cbdef36153
|
Linux - move radix tree and getting files into find_file and update tmpfs to use new code
|
2012-09-12 00:28:36 +00:00 |
|
|
mike.auty@gmail.com
|
e139eece1a
|
Linux - Fix an error in common.py and shrink a function slightly.
|
2012-09-10 20:45:52 +00:00 |
|
|
atcuno
|
30d782dbd8
|
Linux - remove unnecesary TODOs and change some to FUTURE
|
2012-09-10 20:12:35 +00:00 |
|
|
atcuno
|
fa98736e2a
|
Linux - further cleanup of common for verify_ops, change check_fop and check_afinfo to use
|
2012-09-10 19:40:59 +00:00 |
|
|
atcuno
|
add23cbc31
|
Linux - continue the cleanup of common, update pidhashtable and cpuinfo to reference new code locations
|
2012-09-10 19:12:19 +00:00 |
|
|
atcuno
|
60d3ac6ac4
|
Linux - make get_page_contents use zread
|
2012-09-10 18:52:26 +00:00 |
|
|
atcuno
|
84cab784ea
|
Linux - get rid of phys_addr_of_page for page overlay to_paddr
|
2012-09-10 18:11:53 +00:00 |
|
|
atcuno
|
2a3eb5b70c
|
Linux - remove old sparse code from common
|
2012-09-10 18:05:06 +00:00 |
|
|
atcuno
|
f1302f9573
|
Linux - be extra careful with unallocated processes start time
|
2012-09-10 17:35:05 +00:00 |
|
|
mike.auty@gmail.com
|
e017034023
|
Pylint, formatting and styles fixes for all linux plugins.
|
2012-09-10 15:06:57 +00:00 |
|
|
atcuno
|
dbf56330c6
|
Linux - update dentry cache with get_partial to common
|
2012-09-10 05:17:55 +00:00 |
|
|
atcuno
|
0ac69619fa
|
Linux - get rid of mask_number from common
|
2012-09-09 21:13:11 +00:00 |
|
|
atcuno
|
b8c8e3ceca
|
Linux - make each plugin get its own address space
|
2012-09-09 18:18:57 +00:00 |
|
|
atcuno
|
d9af237923
|
Linux - add check_fop plugin
|
2012-09-08 21:24:03 +00:00 |
|
|
mike.auty@gmail.com
|
2eb7603401
|
Move the get_profile_symbol docstring to the right place.
|
2012-09-08 21:06:14 +00:00 |
|
|
mike.auty@gmail.com
|
8da7cfd8ad
|
Slightly improve error checking on the linux profile attribute.
|
2012-09-08 21:05:58 +00:00 |
|
|
mike.auty@gmail.com
|
2cb70a7968
|
Ensure Linux commands don't start playing with address spaces until they're told to execute.
|
2012-09-08 19:37:53 +00:00 |
|
|
mike.auty@gmail.com
|
b639c07121
|
Pylint before applying a fix for issue 279.
|
2012-09-08 19:37:43 +00:00 |
|
|
atcuno
|
ad3d1e1375
|
Linux - commit pointer truncations, will be removed in 2.3
|
2012-09-03 21:48:22 +00:00 |
|
|
iMHLv2
|
6fdcd8f995
|
Linux - whitespace stuff in common.py
|
2012-09-02 23:23:37 +00:00 |
|
|
atcuno
|
638e100592
|
Linux - make path calculation more resilient to unallocated entries
|
2012-08-31 18:38:01 +00:00 |
|
|
atcuno
|
f7044c792f
|
Linux - update module.c and pslist/psaux to support 3.5 timekeeping structures
|
2012-08-26 17:46:16 +00:00 |
|
|
atcuno
|
160467981c
|
Linux - Add Joes kmem_cache SLAB support
|
2012-08-25 17:03:41 +00:00 |
|
|
atcuno
|
0e8df1e298
|
Linux - update page cache code to new symbol methods and to chopped 64 bit pointers
|
2012-08-25 16:57:16 +00:00 |
|
|
atcuno
|
c05d36859a
|
Linux - move page cache code out of tmpfs, add support for sparse_mem in page cache code
|
2012-08-25 16:32:32 +00:00 |
|
|
atcuno
|
73793e6147
|
Linux - move get_profile_symbol to get_symbol in AbstractLinuxProfile, close 329
|
2012-08-25 15:52:55 +00:00 |
|
|
atcuno
|
3899b1af08
|
Linux - update multicore cpuinfo for new symbols method
|
2012-08-25 02:54:58 +00:00 |
|
|
atcuno
|
0de05bf7a5
|
Linux - update cpuinfo to use new symbol method and to use new per_cpu method
|
2012-08-24 23:37:23 +00:00 |
|
|
atcuno
|
9427b366f0
|
Linux - update all plugins but cpuinfo to new symbol handling method
|
2012-08-24 23:21:08 +00:00 |
|
|
atcuno
|
8bef88e397
|
Linux - convert backend to new symbol handling method, update pslist to show how to use it
|
2012-08-24 22:50:19 +00:00 |
|
|
atcuno
|
880ba8b0f6
|
Linux - add 3.x fixes for mount and per_cpu vars, update 64bit vtypes to 8 byte longs
|
2012-08-18 18:26:13 +00:00 |
|
|
mike.auty@gmail.com
|
e5ae67f65a
|
Merge in most of linux-support.
|
2012-08-16 11:00:06 +00:00 |
|