# fddlZddlmZddlmZmZmZddlmZddl m Z ddl m Z ej eZGddejjZdS) N)List) renderers interfaces exceptions) requirements)utility) format_hintsc eZdZdZdZdZedeej j fdZ ee dfdej jded ed e d ef d Zd ZdZdS)IOMemz?Generates an output similar to /proc/iomem on a running system.)rr)rr returnc6tjddgdgS)Nkernelz Linux kernel)Intel32Intel64AArch64)name description architectures)rModuleRequirement)clss [/home/panchajanya/Development/work/volatility3/volatility3/framework/plugins/linux/iomem.pyget_requirementszIOMem.get_requirementss2  **???     rcontextvmlinux_module_nameresource_offsetseendepthc#K|j|} |d|d}n5#tj$r#td|ddYdSwxYw t j|jd}nG#tj$r5td |dd tj }YnwxYw||vr$td |dd |d dS| ||||j |j ffV|jdkr'||||j||dzEd{V|jdkr&||||j||Ed{VdSdS)aRecursively parse from a root resource to find details about all related resources. Args: context: The context to retrieve required elements (layers, symbol tables) from vmlinux_module_name: The name of the kernel module on which to operate resource_offset: The offset to the resource to be parsed seen: The set of resource offsets that have already been parsed depth: How deep into the resource structure we are Yields: Each row of output resourceT)absolutez$Unable to create resource object at z#xz[. This resource, its sibling, and any of it's children and will be missing from the output.Nz8Unable to follow pointer to name for resource object at z, replaced with UnreadableValuezThe resource object at z 'z' has already been processed, this should not normally occur. No further results from related resources will be displayed to protect against infinite loops.rr )modulesobjectrInvalidAddressExceptionvollogwarningrpointer_to_stringrrUnreadableValueaddstartendchildparse_resourcesibling) rrrrrr vmlinuxr"rs rr0zIOMem.parse_resourcesL*/"56 ~~j/D~QQHH1    NN]\]]]   44   /,X]C@@DD1 / / / NN0?a000   ,..DDD  / d " " NN?/d?????    4 HH_ % % %dHNHL99999 >Q  ))#          q ))#            ! s"*.AA A;;AB?>B?c#RK|jd}|jj|} |d}n#tj$rd}YnwxYw|S||j||D]8\}\}}}||tj|tj|ffV7dSdS)zGenerates an output similar to /proc/iomem on a running system Args: None Yields: Each row of output using the parse_resource function riomem_resourceN) configrr%get_absolute_symbol_addressr SymbolErrorr0r Hex)selfrr2iomem_root_offsetr rr-r.s r _generatorzIOMem._generatorms#k(3,&':; % ' C CDT U U  % % % % $    %  (-1-@-@ 13D.. T T))eSdL$4U$;$;\=Mc=R=RSSSSSS ) ( T Ts9A  A cf|jd}|jj|}|dst d|dst ddt fdtjfdtjfg}tj || S) Nrr4zThis plugin requires the iomem_resource symbol. This symbol is not present in the supplied symbol table. This means you are either analyzing an unsupported kernel version or that your symbol table is corrupt.r"zThis plugin requires the resource type. This type is not present in the supplied symbol table. This means you are either analyzing an unsupported kernel version or that your symbol table is corrupt.NameStartEnd) r5rr% has_symbol TypeErrorhas_typestrr r8rTreeGridr;)r9rr2columnss rrunz IOMem.runs"k(3,&':;!!"233 c   ++ Y  SM l& ' L$ %  !'4??+<+<===rN)__name__ __module__ __qualname____doc___required_framework_version_version classmethodrr configurationRequirementInterfacersetrContextInterfacerCintr0r;rFrrr r sII"+H j&>&S!T   [  CEE KK#4K!K K  K  KKK[KZTTT:>>>>>rr )loggingtypingrvolatility3.frameworkrrr#volatility3.framework.configurationrvolatility3.framework.objectsrvolatility3.framework.renderersr getLoggerrGr(pluginsPluginInterfacer rSrrr]sCCCCCCCCCC<<<<<<111111888888  8 $ $R>R>R>R>R>J  .R>R>R>R>R>r