Comments (6)
Ok, this is most likely caused because the ModuleRegistry will register any
class present in a module once the module's been sourced. This means that the
line:
from volatility.plugins.filescan import FileScan, MutantScan,
DriverScan, PoolScanDriver
puts those classes directly into your module's namespace, causing them to be
re-registered and causing the clash.
Could you please try the following instead:
import volatility.plugins.filescan as filescan
class DriverIRP(filescan.DriverScan):
and let us know whether that works?
Original comment by [email protected]
on 29 Sep 2010 at 2:22
from volatility.
Original comment by [email protected]
on 29 Sep 2010 at 2:22
- Changed state: Accepted
from volatility.
Yep, that solves the problem - thanks. Another thing, which I can enter
separately if you like (but I figure you might be aware of it) is that plugins
in the contrib directory aren't registering. For example the
contrib/plugins/verinfo.py doesn't show up for me using Rev 483.
Original comment by [email protected]
on 29 Sep 2010 at 2:37
from volatility.
Ok, cool. I think I might leave the bug open a little longer to discuss
whether we should fix this, or whether we're happy telling people they can't
use from...import lines. Scudette, what's your take on this?
Also, would this go away if we changed the dynamic namespaces to path-based
namespaces? My guess is that it won't, in which case we still need to make
this design decision.
Lastly, you're quite right, the contrib plugins won't register, that's by
design. If you want the (highly unsupported, since it's currently just my
horrible verinfo) contrib plugins registered, you'll need to add them using
either --plugins or setting it permanently in ~/.volatilityrc.
Original comment by [email protected]
on 29 Sep 2010 at 2:46
- Added labels: Priority-Low
- Removed labels: Priority-Medium
from volatility.
I dont expect the issue will go away if we change the import mechanism. This is
a feature not a bug!
We could remove the restriction on registering the same module twice and that
would make it go away.
Original comment by [email protected]
on 29 Sep 2010 at 3:06
from volatility.
No, I definitely don't want to remove that restriction. We'd end up with
duplicates, or worse, only let one of them win, and then we'd have to decide
which one. So it sounds like we're going to simply enforce that plugins
authors cannot directly import into their plugins namespace.
I've updated the wiki page on Plugins, and am now marking this as WontFix.
Original comment by [email protected]
on 29 Sep 2010 at 4:01
- Changed state: WontFix
from volatility.
Related Issues (20)
- python tools/mac/convert.py converted-10.9.4.64bit.dwarfdump > 10.9.4.64bit.vtypes results in KeyError: 'AT_data_member_location' HOT 3
- Volatility 2.4 fails to decompress win8 hiberfil.sys HOT 2
- Cannot run the 'make' command HOT 19
- Unable to obtain password hashes HOT 1
- KiFastSystemCall I want to know where is next step? HOT 2
- Error when I make profile in Window 8 Pro (64 bits) HOT 1
- Except psscan no other cmds are working HOT 1
- Getting several "no such option" errors HOT 1
- Volatility was functioning, now errors out HOT 1
- Running VF from Jython HOT 2
- Failed to import volatility.plugins.overlays.linux.linux (ValueError: too many values to unpack) HOT 2
- File new issues on github: https://github.com/volatilityfoundation/volatility/issues HOT 17
- yarascan fails to ececute grep expression (attached) HOT 4
- imageinfo takes forever HOT 1
- How to know the device is using by how many processes in the computer system ? HOT 1
- Error adding new plugin in 2.3.1 HOT 2
- Cant run volatility command Pslist from Eclipse(python IDE) HOT 1
- "This command does not support the profile" Error HOT 1
- Volatility Standalone for Windows incorrectly states profile is invalid HOT 2
- Volatility /tools/linux 'make' not working
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from volatility.