search

Stan1989 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

malware.threads doesn't output Fs register #395

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. python vol.py -f <image> threads

What is the expected output? What do you see instead?
No Fs segment register information is printed out

What version of the product are you using? On what operating system?
Volatility r3202

Please provide any additional information below.
Segment register information is pulled from _KTRAP_FRAME's. Current 
malware.threads code is not access ing trapframe.SegFs and so printing out the 
Fs register data.

Original issue reported on code.google.com by carl.pulley on 29 Mar 2013 at 8:09

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision r3203.

Original comment by michael.hale@gmail.com on 29 Mar 2013 at 12:05