search

Stan1989 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

some strange entries in linux_pidhashtable #385

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
some strange entries in linux_pidhashtable 

http://pastebin.com/MWNyZJtr

0x00008800104a0750                      0               1413567809      Tue, 28 
Aug 2012 00:11:43 +0000
0x000088000fa8c4d0                      0               4294936576      Tue, 28 
Aug 2012 00:11:43 +0000
0x0000880017bf48d0                      340652376       1413567809      Fri, 26 
Feb 267594112 19:57:42 +0000
0x000088000f8fa4d0 (??????             0               1413567809      Fri, 16 
Mar 1945 21:19:34 +0000

Original issue reported on code.google.com by michael.hale@gmail.com on 22 Feb 2013 at 7:17

GoogleCodeExporter commented 9 years ago 
Fixed in r3207

The issue was that the code auto instantiates a task_struct when finding the 
beginning of a task chain, but this is only valid if the function is recursed 
into (this was really obvious with some debug prints). So I fixed it to check 
the validity of the task struct before yielding it.

Original comment by atc...@gmail.com on 29 Mar 2013 at 6:51

GoogleCodeExporter commented 9 years ago

Original comment by atc...@gmail.com on 29 Mar 2013 at 6:51