Skip to content

Commit dfd8a1f

Browse files
committed
Linux: hidden_modules: Include kernel version and commit details
1 parent cbe071f commit dfd8a1f

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

volatility3/framework/plugins/linux/hidden_modules.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,10 +48,12 @@ def get_modules_memory_boundaries(
4848
"""
4949
vmlinux = context.modules[vmlinux_module_name]
5050
if vmlinux.has_symbol("mod_tree"):
51+
# Kernel >= 5.19 58d208de3e8d87dbe196caf0b57cc58c7a3836ca
5152
mod_tree = vmlinux.object_from_symbol("mod_tree")
5253
modules_addr_min = mod_tree.addr_min
5354
modules_addr_max = mod_tree.addr_max
5455
elif vmlinux.has_symbol("module_addr_min"):
56+
# 2.6.27 <= kernel < 5.19 3a642e99babe0617febb6f402e1e063479f489db
5557
modules_addr_min = vmlinux.object_from_symbol("module_addr_min")
5658
modules_addr_max = vmlinux.object_from_symbol("module_addr_max")
5759

0 commit comments

Comments
 (0)