Skip to content

Commit 25eaaff

Browse files
committed
Bring hidden module to expose dump option. Fix CodeQL found bug
1 parent e93df37 commit 25eaaff

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

volatility3/framework/plugins/linux/hidden_modules.py

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ class Hidden_modules(plugins.PluginInterface):
1919
"""Carves memory to find hidden kernel modules"""
2020

2121
_required_framework_version = (2, 10, 0)
22-
_version = (3, 0, 0)
22+
_version = (3, 0, 1)
2323

2424
@classmethod
2525
def get_hidden_modules(
@@ -72,6 +72,12 @@ def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]
7272
component=linux_utilities_modules.ModuleDisplayPlugin,
7373
version=(1, 0, 0),
7474
),
75+
requirements.BooleanRequirement(
76+
name="dump",
77+
description="Extract listed modules",
78+
default=False,
79+
optional=True,
80+
),
7581
]
7682

7783
@staticmethod

volatility3/framework/symbols/linux/utilities/module_extract.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -782,7 +782,7 @@ def extract_module(
782782
hasattr(module.sect_attrs, "nsections")
783783
except exceptions.InvalidAddressException:
784784
vollog.debug(f"module at offset {module.vol.offset:#x} is paged out.")
785-
return
785+
return None
786786

787787
# Gather sections
788788
updated_sections, strtab_index, symtab_index = cls._parse_sections(

0 commit comments

Comments
 (0)