iMHLv2 f606ffd282 add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

..

__init__.py

Move the Volatility-1.4_rc1 branch over to trunk.

2011-06-29 21:01:19 +00:00

amd64.py

add API functions to the address space for pointer masking. this is in favor of doing the bit mask in Pointer.__eq__ and Pointer.v() which is how volatility 2.2 did it. fixes issue #369

2013-02-20 02:56:19 +00:00

arm.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

crash.py

the last patch to finalize raw2dmp support for all address spaces. 1) fixed method of patching the kernel CONTEXT for when the KPCR does not fully land inside a BLOCKSIZE chunk 2) adjust the calculation for number of pages in the crash dump to better handle run-based address spaces 3) enable write support for crash

2013-02-10 20:04:42 +00:00

hibernate.py

remove Hiber's write() method, its a duplicate of BaseAddressSpace which Hiber inherits from anyway

2012-10-19 22:06:28 +00:00

hpak.py

a bug in the idt plugin prevented it from displaying the right interrupt handler address when special gdt selectors are set

2012-11-22 02:55:52 +00:00

ieee1394.py

Remove pointless inheritance on file address spaces, remove layered and offset properties.

2012-10-14 01:44:17 +00:00

intel.py

Merge 2.3-devel into trunk.

2012-10-13 21:31:29 +00:00

legacyintel.py

Commiting this string to hex patch on behalf of MHL. Fixes issue 238.

2012-04-04 19:17:54 +00:00

lime.py

remove big-endian lime magic from the AS assertion, replace it with a debug message. mem dumps from big-endian ARM won't work anyway because parse_lime only checks for the little-endian magic (not to mention everything else)

2012-10-20 05:03:16 +00:00

macho.py

Mac - update macho address space to not use add_types

2013-01-21 20:43:39 +00:00

standard.py

Ensure zread always returns the amount of data expected.

2012-10-14 23:10:43 +00:00

vboxelf.py

the virtualbox elf64 coredump runs include VGA and other MMIO device memory in addition to main physical memory. all ranges are reported by the vboxinfo plugin, but get_available_addresses() should only yield ranges containing main physical memory

2013-02-08 02:54:40 +00:00

vmware.py

fix get_available_pages() and get_available_addresses() in the vmware AS, although some may change again with the upcoming AS abstraction patches

2013-02-08 14:00:15 +00:00