iMHLv2 9d8837108a make sure to dereference sock.Next and conn.Next, otherwise it will appear as if multiple socket and connection objects have different members but the same offset since sock.obj_offset == sock.Next.obj_offset. Fixes Issue #244. Fixes Issue #258.

2012-05-16 16:37:50 +00:00

..

__init__.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

crashdump.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

domcachedump.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

hashdump.py

fix a NoneType is not iterable error in hashdump.py. after doing that, it was realized that a debug.error statement in HashDump.render_text was preventing the plugin from finishing so it was changed to debug.debug.

2012-04-02 16:16:19 +00:00

hive.py

Merge branch 'local/noregistry' into local/trunk

2012-03-08 23:39:19 +00:00

lsasecrets.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

modules.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

network.py

make sure to dereference sock.Next and conn.Next, otherwise it will appear as if multiple socket and connection objects have different members but the same offset since sock.obj_offset == sock.Next.obj_offset. Fixes Issue #244. Fixes Issue #258.

2012-05-16 16:37:50 +00:00

rawreg.py

add proper handling of BIG_DATA registry values, gleeda's patch. Fixes Issue #169

2011-12-13 14:58:48 +00:00

tasks.py

fix 1.5 year old bugs. this patch applies an overlay to x64 windows so that DebuggerDataList is an unsigned long long rather than an unsigned long which it currently inherits incorrectly from an x86 overlay. also remove the memory_model condition from the VistaWin7KPCR profile modification so that it applies to both x86 and x64 windows. currently it only applies to x86 thus leaving vista and win7 x64 having hard-coded KPCR like xp. finally, our backup method of finding KDBG in tasks.get_kdbg (the one that finds KDBG via KPCR) has been broken since about r622 in jan 2011. this could be a major source of bugs in the past, because since KDBG vol magic returns the first suggestion, if the first suggestion isn't correct, we'll use the backup method - but the backup method is basically hard-coded to fail ;-)

2012-04-10 02:05:00 +00:00

xpress.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00