Skip to content

Commit

Permalink
Fix typos and try setting back requirement change
Browse files Browse the repository at this point in the history
  • Loading branch information
ikelos committed Feb 9, 2025
1 parent fbb9627 commit 444376c
Show file tree
Hide file tree
Showing 11 changed files with 19 additions and 19 deletions.
2 changes: 1 addition & 1 deletion volatility3/framework/configuration/requirements.py
Original file line number Diff line number Diff line change
Expand Up @@ -638,12 +638,12 @@ def __init__(
self.add_requirement(
TranslationLayerRequirement(name="layer_name", architectures=architectures)
)
self.add_requirement(SymbolTableRequirement(name="symbol_table_name"))

@classmethod
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
return [
IntRequirement(name="offset"),
SymbolTableRequirement(name="symbol_table_name"),
]

def unsatisfied(
Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/bigpools.py
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ def list_big_pools(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down
12 changes: 6 additions & 6 deletions volatility3/framework/plugins/windows/callbacks.py
Original file line number Diff line number Diff line change
Expand Up @@ -364,7 +364,7 @@ def list_notify_routines(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down Expand Up @@ -425,7 +425,7 @@ def _list_registry_callbacks_legacy(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
full_type_name = (
Expand Down Expand Up @@ -476,7 +476,7 @@ def _list_registry_callbacks_new(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
full_type_name = callback_table_name + constants.BANG + "_CM_CALLBACK_ENTRY"
Expand Down Expand Up @@ -521,7 +521,7 @@ def list_registry_callbacks(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down Expand Up @@ -581,7 +581,7 @@ def list_bugcheck_reason_callbacks(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down Expand Up @@ -649,7 +649,7 @@ def list_bugcheck_callbacks(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down
4 changes: 2 additions & 2 deletions volatility3/framework/plugins/windows/handles.py
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,7 @@ def get_type_map(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down Expand Up @@ -209,7 +209,7 @@ def find_cookie(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
return context.object(
symbol_table + constants.BANG + "unsigned int",
Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/modules.py
Original file line number Diff line number Diff line change
Expand Up @@ -250,7 +250,7 @@ def list_modules(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/pslist.py
Original file line number Diff line number Diff line change
Expand Up @@ -229,7 +229,7 @@ def list_processes(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/psscan.py
Original file line number Diff line number Diff line change
Expand Up @@ -197,7 +197,7 @@ def virtual_process_from_physical(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
tleoffset = ntkrnlmp.get_type("_ETHREAD").relative_child_offset(
Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/registry/hivelist.py
Original file line number Diff line number Diff line change
Expand Up @@ -218,7 +218,7 @@ def list_hive_objects(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)

Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/unloadedmodules.py
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@ def list_unloadedmodules(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
unloadedmodules_offset = ntkrnlmp.get_symbol("MmUnloadedDrivers").address
Expand Down
2 changes: 1 addition & 1 deletion volatility3/framework/plugins/windows/vadinfo.py
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@ def protect_values(
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
addr = ntkrnlmp.get_symbol("MmProtectToValue").address
Expand Down
6 changes: 3 additions & 3 deletions volatility3/framework/symbols/windows/extensions/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -843,7 +843,7 @@ def get_session_id(self) -> Union[int, interfaces.renderers.BaseAbsentValue]:
)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)

ntkrnlmp = self._context.module(
Expand Down Expand Up @@ -1040,7 +1040,7 @@ def get_sids(self) -> Iterable[str]:
)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
symbol_table = self.get_symbol_table_name()
ntkrnlmp = self._context.module(
Expand Down Expand Up @@ -1148,7 +1148,7 @@ def get_dpc(self):
)
if not kvo:
raise ValueError(
"Intel layer does not have an associatd kernel virtual offset, failing"
"Intel layer does not have an associated kernel virtual offset, failing"
)
ntkrnlmp = self._context.module(
symbol_table_name,
Expand Down

0 comments on commit 444376c

Please sign in to comment.