We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent cbe071f commit dfd8a1fCopy full SHA for dfd8a1f
volatility3/framework/plugins/linux/hidden_modules.py
@@ -48,10 +48,12 @@ def get_modules_memory_boundaries(
48
"""
49
vmlinux = context.modules[vmlinux_module_name]
50
if vmlinux.has_symbol("mod_tree"):
51
+ # Kernel >= 5.19 58d208de3e8d87dbe196caf0b57cc58c7a3836ca
52
mod_tree = vmlinux.object_from_symbol("mod_tree")
53
modules_addr_min = mod_tree.addr_min
54
modules_addr_max = mod_tree.addr_max
55
elif vmlinux.has_symbol("module_addr_min"):
56
+ # 2.6.27 <= kernel < 5.19 3a642e99babe0617febb6f402e1e063479f489db
57
modules_addr_min = vmlinux.object_from_symbol("module_addr_min")
58
modules_addr_max = vmlinux.object_from_symbol("module_addr_max")
59
0 commit comments