Updates for linux-3.15 (failed creating profile)

[GoogleCodeExporter]

I had a quick stab at linux-3.15.3 and couldn't get a profile creation working, 
so I had to patch module.c

Please have a look, patch provided.

Original issue reported on code.google.com by me.kalin@gmail.com on 3 Jul 2014 at 6:13

Attachments:

• volatility-3.15.patch

[GoogleCodeExporter]

Original comment by michael.hale@gmail.com on 5 Jul 2014 at 2:27

[GoogleCodeExporter]

Hello,

With the created profile can linux_find_file correctly recover files from 
memory (meaning has actually data and not just all zeroes?)

Original comment by atc...@gmail.com on 5 Jul 2014 at 2:33

[GoogleCodeExporter]

I am travelling now, will be able to test on Tue-Wed.

When I submitted the patch, I tried just a few commands (I remember 
linux_ifconfig, linux_bash and linux_psaux) and they seemed to work.

Kalin.

Original comment by me.kalin@gmail.com on 5 Jul 2014 at 3:14

[GoogleCodeExporter]

The radix tree is only relevant to the file recovery code, so please check 
trying to recover files with linux_find_file 

Original comment by atc...@gmail.com on 10 Jul 2014 at 4:30

[GoogleCodeExporter]

followed up via email

Original comment by michael.hale@gmail.com on 24 Jul 2014 at 12:39

• Changed state: Done