 |
The Volatility Framework
|
|
|
The Volatility Framework
|
|
An array of objects of the same size. More...
Public Member Functions | |
| def | __init__ (self, theType, offset, vm, parent=None, count=1, targetType=None, target=None, name=None, kwargs) |
| def | __getstate__ (self) |
| def | size (self) |
| def | __iter__ (self) |
| def | __repr__ (self) |
| def | d (self) |
| def | __eq__ (self, other) |
| def | __getitem__ (self, pos) |
| def | __setitem__ (self, pos, value) |
 Public Member Functions inherited from volatility.obj.BaseObject | |
| def | __init__ (self, theType, offset, vm, native_vm=None, parent=None, name=None, kwargs) |
| def | obj_type (self) |
| def | obj_vm (self) |
| def | obj_offset (self) |
| def | obj_parent (self) |
| def | obj_name (self) |
| def | obj_native_vm (self) |
| def | set_native_vm (self, native_vm) |
| Sets the native_vm. | |
| def | rebase (self, offset) |
| def | proxied (self, attr) |
| def | newattr (self, attr, value) |
| Sets a new attribute after the object has been created. | |
| def | write (self, value) |
| Function for writing the object back to disk. | |
| def | __getattr__ (self, attr) |
| This is only useful for proper methods (not ones that start with __ ) | |
| def | __setattr__ (self, attr, value) |
| def | __nonzero__ (self) |
| This method is called when we test the truth value of an Object. More... | |
| def | __eq__ (self, other) |
| def | __ne__ (self, other) |
| def | __hash__ (self) |
| def | m (self, memname) |
| def | is_valid (self) |
| def | dereference (self) |
| def | dereference_as (self, derefType, kwargs) |
| def | cast (self, castString) |
| def | v (self) |
| Do the actual reading and decoding of this member. | |
| def | __format__ (self, formatspec) |
| def | __str__ (self) |
| def | __repr__ (self) |
| def | d (self) |
| Display diagnostic information. | |
| def | __getstate__ (self) |
| This controls how we pickle and unpickle the objects. | |
| def | __setstate__ (self, state) |
Public Attributes | |
| count | |
| Instantiate the first object on the offset: | |
| original_offset | |
| target | |
| current | |
| This method is better than the iter/next method as it is reentrant. More... | |
| Public Attributes inherited from volatility.obj.BaseObject | |
| obj_offset | |
| obj_vm | |
An array of objects of the same size.
| volatility.obj.Array.current |
This method is better than the iter/next method as it is reentrant.
We don't want to stop on a NoneObject. Its entirely possible that this array contains a bunch of pointers and some of them may not be valid (or paged in). This should not stop us though we just return the invalid pointers to our callers. It's up to the callers to do what they want with the array.
1.8.9.1