Skip to content

Commit 0cd1520

Browse files
authored
Merge pull request #1551 from gcmoreira/linux_fix_pslist_task_credentials
linux: pslist: fix task credentials rendering
2 parents ec48f04 + b27f98f commit 0cd1520

File tree

1 file changed

+13
-4
lines changed

1 file changed

+13
-4
lines changed

volatility3/framework/plugins/linux/pslist.py

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -179,6 +179,10 @@ def _get_file_output(self, task: interfaces.objects.ObjectInterface) -> str:
179179
file_output = "VMA start matching task start_code not found"
180180
return file_output
181181

182+
@staticmethod
183+
def _format_cred(cred):
184+
return renderers.NotAvailableValue() if cred is None else cred
185+
182186
def _generator(
183187
self,
184188
pid_filter: Callable[[Any], bool],
@@ -212,16 +216,21 @@ def _generator(
212216

213217
task_fields = self.get_task_fields(task, decorate_comm)
214218

219+
task_uid = self._format_cred(task_fields.uid)
220+
task_gid = self._format_cred(task_fields.gid)
221+
task_euid = self._format_cred(task_fields.euid)
222+
task_egid = self._format_cred(task_fields.egid)
223+
215224
yield 0, (
216225
format_hints.Hex(task_fields.offset),
217226
task_fields.user_pid,
218227
task_fields.user_tid,
219228
task_fields.user_ppid,
220229
task_fields.name,
221-
task_fields.uid or renderers.NotAvailableValue(),
222-
task_fields.gid or renderers.NotAvailableValue(),
223-
task_fields.euid or renderers.NotAvailableValue(),
224-
task_fields.egid or renderers.NotAvailableValue(),
230+
task_uid,
231+
task_gid,
232+
task_euid,
233+
task_egid,
225234
task_fields.creation_time or renderers.NotAvailableValue(),
226235
file_output,
227236
)

0 commit comments

Comments
 (0)