The Volatility Framework
volatility.plugins.addrspaces.ieee1394.FirewireAddressSpace Class Reference

A physical layer address space that provides access via firewire. More...

Inheritance diagram for volatility.plugins.addrspaces.ieee1394.FirewireAddressSpace:
volatility.addrspace.BaseAddressSpace

Public Member Functions

def __init__ (self, base, config, kargs)
 
def intervals (self, start, size)
 Returns a list of intervals, from start of length size, that do not include the exclusions.
 
def read (self, offset, length)
 Reads a specified size in bytes from the current offset. More...
 
def zread (self, offset, length)
 Delegate padded reads to normal read, since errors reading the physical address should probably be reported back to the user.
 
def write (self, offset, data)
 Writes a specified size in bytes.
 
def get_address_range (self)
 Returns the size of the address range.
 
def get_available_addresses (self)
 Returns a list of available addresses.
 
- Public Member Functions inherited from volatility.addrspace.BaseAddressSpace
def __init__ (self, base, config, _args, _kwargs)
 base is the AS we will be stacking on top of, opts are options which we may use.
 
def get_config (self)
 Returns the config object used by the vm for use in other vms.
 
def is_valid_profile (self, profile)
 Determines whether a selected profile is compatible with this address space.
 
def as_assert
 Duplicate for the assert command (so that optimizations don't disable them) More...
 
def __eq__ (self, other)
 
def __ne__ (self, other)
 
def read (self, addr, length)
 Read some data from a certain offset.
 
def zread (self, addr, length)
 Read data from a certain offset padded with where data is not available.
 
def get_available_addresses (self)
 Return a generator of address ranges as (offset, size) covered by this AS sorted by offset. More...
 
def is_valid_address (self, _addr)
 Tell us if the address is valid.
 
def write (self, _addr, _buf)
 
def __getstate__ (self)
 Serialise this address space efficiently.
 
def __setstate__ (self, state)
 
def address_mask (cls, addr)
 Masks an address value for this address space.
 
def address_compare (cls, a, b)
 Compares two addresses, a and b, and return -1 if a is less than b, 0 if they're equal and 1 if a is greater than b.
 
def address_equality (cls, a, b)
 Compare two addresses and returns True if they're the same, or False if they're not.
 
def physical_space (self)
 Return the underlying physical layer, if there is one. More...
 

Public Attributes

 name
 
 size
 
- Public Attributes inherited from volatility.addrspace.BaseAddressSpace
 base
 
 name
 
 profile
 

Static Public Attributes

int order = 99
 We should be almost the AS of last resort.
 

Additional Inherited Members

- Static Public Member Functions inherited from volatility.addrspace.BaseAddressSpace
def register_options (config)
 

Detailed Description

A physical layer address space that provides access via firewire.

Member Function Documentation

def volatility.plugins.addrspaces.ieee1394.FirewireAddressSpace.read (   self,
  offset,
  length 
)

Reads a specified size in bytes from the current offset.

Fills any excluded holes with zeros (so in that sense, similar to zread)


The documentation for this class was generated from the following file: