tking2 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 1 forks source link

linux centos 6.3 process gid patch #377

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
centos 6.3 x64 2.6.32.x kernel the task_struct.cred.gid member is no longer an 
int, its an anonymous union with a member named 'counter'

this patch allows us to print the proper gid for this OS without changing the 
behavior of how gids appear on other profiles. 

Original issue reported on code.google.com by michael.hale@gmail.com on 4 Feb 2013 at 3:10

Attachments:

GoogleCodeExporter commented 9 years ago
This issue was closed by revision r3042.

Original comment by michael.hale@gmail.com on 4 Feb 2013 at 11:28