volatility icon indicating copy to clipboard operation
volatility copied to clipboard

Fix kernel version control for proc_dir_entry

Open liamnesson0111 opened this issue 5 years ago • 0 comments

The struct proc_dir_entry is used in the plugin linux_check_fop. The struct was defined in module.c only in kernel versions greater than 3.13, causing an error when running linux_check_fop on systems with older kernel versions. I noticed that this struct hasn't changed at all between kernel versions 3.10 and 3.13, so we can make this plugin support more versions with this fix. This change is relatively significant because many distributions are shipped with a 3.10.~ kernel (CentOS 7 and RHEL 7, among others).

liamnesson0111 avatar Nov 23 '20 11:11 liamnesson0111