*1f:ddlZddlmZmZddlmZddlmZddlm Z ddl m Z ej e ZGddejZdS) N) exceptions renderers) requirements)plugins)utility)pslistc8eZdZdZdZedZdZdZdS)Envarsz0Lists processes with their environment variablesrrctjddddgtjdtjdtjd d t d gS) Nkernelz Linux kernelIntel32Intel64)name description architecturesrr )rpluginversionpidzFilter on specific process IDsT)rr element_typeoptional)rModuleRequirementPluginRequirementrPsListListRequirementint)clss \/home/panchajanya/Development/work/volatility3/volatility3/framework/plugins/linux/envars.pyget_requirementszEnvars.get_requirementsst  **()4     *fmY     (<       c #K|D]k}|j}tj|j} |jj}n8#t j$r&td|d|dd}YnwxYw |j }n8#t j$r&td|d|dd}YwxYw|r| }|"td|d|d |j j |}|j j |j jz } d| cxkrd ks(ntd |d|d | d E ||j j| } nT#t j$rBtd|d|dt!|j jd| d YwxYw| d} | dD]} | dd\} } nK#t($r>td|d|dt!|j jdYvwxYwd|||| | ffVmdS)zAGenerates a listing of processes along with environment variablesz#Unable to read parent pid for task  z, setting ppid to 0.rzUnable to access mm for task z; it is likely a kernel thread, will not extract any envars.Nz+Unable to construct process layer for task z, will not extract any envars.i zTask z appears to have envars of size zD bytes which fails the sanity checking, will not extract any envars.zUnable to read full envars for z starting at virtual offset z for z$ bytes, will not extract any envars.=zUnable to extract envars for z', they don't appear to be '=' separated)rrarray_to_stringcommparentrInvalidAddressExceptionvollogdebugmmadd_process_layercontextlayersenv_end env_startreadhexrstripsplitdecode ValueError)selftaskstaskrrppidr-proc_layer_name proc_layer envars_size envar_data envar_pairkeyvalues r _generatorzEnvars._generator)s@ =@ =D(C*4955D {5    Z#ZZZZZ   W5    {C{{${{{  % ="&"8"8":":"*LLpcppDppp!\0A #go0AA K////4////LL^^^d^^K^^^!+1BK!P!PJJ!9LLq#qqqqbefjfmfwbxbxqq@KqqqH (..w77 ","2"27";";==J!%/%6%6%8%8%>%>sA%F%F UU%!!! dCdd$dddghlhohydzdzddd! ! sD$U;<<<<rbs 77777777<<<<<<444444111111,,,,,,  8 $ $i i i i i W $i i i i i r!