File tree Expand file tree Collapse file tree 1 file changed +9
-0
lines changed
volatility3/framework/symbols/linux/utilities Expand file tree Collapse file tree 1 file changed +9
-0
lines changed Original file line number Diff line number Diff line change 1+ import functools
2+
13from volatility3 import framework
24from volatility3 .framework import interfaces
35from volatility3 .framework .constants import linux as linux_constants
@@ -18,11 +20,18 @@ class Tainting(interfaces.configuration.VersionableInterface):
1820 framework .require_interface_version (* _required_framework_version )
1921
2022 @classmethod
23+ @functools .lru_cache
2124 def _get_kernel_taint_flags_list (
2225 cls ,
2326 context : interfaces .context .ContextInterface ,
2427 kernel_module_name : str ,
2528 ) -> Optional [List [interfaces .objects .ObjectInterface ]]:
29+ """Determine whether the kernel embeds taint flags definition
30+ in-memory or not.
31+
32+ Returns:
33+ A list of "taint_flag" kernel objects if taint_flags symbok exists
34+ """
2635 kernel = context .modules [kernel_module_name ]
2736 if kernel .has_symbol ("taint_flags" ):
2837 return list (kernel .object_from_symbol ("taint_flags" ))
You can’t perform that action at this time.
0 commit comments