Older
-
-
-
r218
(adding new windows kernel base address
) committed by bdpayne
- adding new windows kernel base address
adding new windows kernel base address
-
r217
(added check for xen 3.4.0
) committed by bdpayne
- added check for xen 3.4.0
added check for xen 3.4.0
-
r216
(added check for new xen version 3.4.0
) committed by bdpayne
- added check for new xen version 3.4.0
added check for new xen version 3.4.0
-
-
r214
(fixed dependency problem with the build process
) committed by bdpayne
- fixed dependency problem with the build process
fixed dependency problem with the build process
-
r213
(some additional wish list items
) committed by bdpayne
- some additional wish list items
some additional wish list items
-
r212
(some future planning
) committed by bdpayne
- some future planning
-
r211
(fixing the ENABLE_XEN problem, users of XA will no longer ne...) committed by bdpayne
- fixing the ENABLE_XEN problem, users of XA will no longer need to #define ENABLE_XEN in their code
fixing the ENABLE_XEN problem, users of XA will no longer need to #define ENABLE_XEN in their code
-
r210
(this use of AC_OUTPUT with arguments is deprecated, this cha...) committed by bdpayne
- this use of AC_OUTPUT with arguments is deprecated, this change lets autoconf work in the currently
recommended way
this use of AC_OUTPUT with arguments is deprecated, this change lets autoconf work in the currently
recommended way
-
r209
(following convention of other functions, xa_access_user_va_r...) committed by bdpayne
- following convention of other functions, xa_access_user_va_range should get the kernel cr3 value
from the current context
following convention of other functions, xa_access_user_va_range should get the kernel cr3 value
from the current context
-
r208
(removed hard coded PROT_READ for user space cache hit
) committed by bdpayne
- removed hard coded PROT_READ for user space cache hit
removed hard coded PROT_READ for user space cache hit
-
r207
(fixed bug introduced by the linux user address space fix ear...) committed by bdpayne
- fixed bug introduced by the linux user address space fix earlier today, the v2p translation needs to
happen before the cache update
fixed bug introduced by the linux user address space fix earlier today, the v2p translation needs to
happen before the cache update
-
r206
(fixed issue with accessing linux user space addresses
) committed by bdpayne
- fixed issue with accessing linux user space addresses
fixed issue with accessing linux user space addresses
-
r205
(Added example filesystem that exposes Xen guest memory as a ...) committed by mooyix
- Added example filesystem that exposes Xen guest memory as a regular file (like /dev/mem)
Added example filesystem that exposes Xen guest memory as a regular file (like /dev/mem)
-
issue 9
(documentation doesn't like xen-devel as a dependency) Status changed by bdpayne
-
-
r204
(updated documentation to include mention of xen-devel depend...) committed by bdpayne
- updated documentation to include mention of xen-devel dependency for pre-package xen installations
updated documentation to include mention of xen-devel dependency for pre-package xen installations
-
issue 6
(module list example accesses string incorrectly) Status changed by bdpayne
-
-
r203
(updated module-list to parse _UNICODE_STRING struct properly...) committed by bdpayne
- updated module-list to parse _UNICODE_STRING struct properly
update process-list to have name offset that matches my dev machine
updated module-list to parse _UNICODE_STRING struct properly
update process-list to have name offset that matches my dev machine
-
-
issue 9
(documentation doesn't like xen-devel as a dependency) reported by bdpayne
-
-
issue 8
(xa_linux_get_taskaddr could not find task struct) Status changed by bdpayne
-
-
-
r201
(fixed typo in path
) committed by mooyix
- fixed typo in path
-
r200
(as long as we have the right cr3 value, kernel / user doesn'...) committed by bdpayne
- as long as we have the right cr3 value, kernel / user doesn't matter for page table lookups
as long as we have the right cr3 value, kernel / user doesn't matter for page table lookups
-
r199
(Fixed incorrect multiplier when setting memory size.
) committed by mooyix
- Fixed incorrect multiplier when setting memory size.
Fixed incorrect multiplier when setting memory size.
-
r198
(fixed bug introduced with yesterday's patch. pv domains mak...) committed by bdpayne
- fixed bug introduced with yesterday's patch. pv domains make a distincton between machine and
physical addresses, hvm do not.
fixed bug introduced with yesterday's patch. pv domains make a distincton between machine and
physical addresses, hvm do not.
-
-
r197
(fixed bugs associated with accessing user memory and getting...) committed by bdpayne
- fixed bugs associated with accessing user memory and getting peb on windows
fixed bugs associated with accessing user memory and getting peb on windows
-
r196
(useful description of the pe format
) committed by bdpayne
- useful description of the pe format
useful description of the pe format
-
-
r195
(added pe parsing capability, now we don't need a windows sys...) committed by bdpayne
- added pe parsing capability, now we don't need a windows sysmap file and the exports are pulled
straight from memory as needed. also more robust kernel base address detection that is much faster
in the worst case
added pe parsing capability, now we don't need a windows sysmap file and the exports are pulled
straight from memory as needed. also more robust kernel base address detection that is much faster
in the worst case
-
r194
(updated to know about xen 3.3.1 and 3.2.3
) committed by bdpayne
- updated to know about xen 3.3.1 and 3.2.3
updated to know about xen 3.3.1 and 3.2.3
-
issue 6
(module list example accesses string incorrectly) reported by bdpayne
-
-
-
r192
(minor fix in kpgd discovery for windows, should reduce the n...) committed by bdpayne
- minor fix in kpgd discovery for windows, should reduce the number of times that this must fall back
to an exaustive search
minor fix in kpgd discovery for windows, should reduce the number of times that this must fall back
to an exaustive search
-
-
r191
(Allows for the specification of the Windows kernel
base addr...) committed by hajime.inoue
- Allows for the specification of the Windows kernel
base address, the ntoskrnl offset, in the configuration
file. Previously, this was always calculated at runtime.
If this is specified in the configuration file, as
ntoskrnl = <OFFSET>;
This calculation is now skipped. If it is not specified,
the calculation proceeds as before.
Allows for the specification of the Windows kernel
base address, the ntoskrnl offset, in the configuration
file. Previously, this was always calculated at runtime.
If this is specified in the configuration file, as
ntoskrnl = <OFFSET>;
This calculation is now skipped. If it is not specified,
the calculation proceeds as before.
-
r190
(Changed most of the error reports to print to stderr
instead...) committed by hajime.inoue
- Changed most of the error reports to print to stderr
instead of stdout.
Changed most of the error reports to print to stderr
instead of stdout.
-
r189
(Changed the default parser from yacc to bison. Changed the
...) committed by hajime.inoue
- Changed the default parser from yacc to bison. Changed the
flags config/Makefile.am to use yacc flags. It's possible
that if bison isn't found the flags in Makefile.am will be
incorrect. Need to check this.
Changed the default parser from yacc to bison. Changed the
flags config/Makefile.am to use yacc flags. It's possible
that if bison isn't found the flags in Makefile.am will be
incorrect. Need to check this.
-
r188
(Added XA_OS_UNKNOWN as a third OS type.
) committed by hajime.inoue
- Added XA_OS_UNKNOWN as a third OS type.
Added XA_OS_UNKNOWN as a third OS type.
-
r187
(updated version numbers for devel line to continue
) committed by bdpayne
- updated version numbers for devel line to continue
updated version numbers for devel line to continue
-
r186
(tagging 0.5 release
) committed by bdpayne
- tagging 0.5 release
-
-
r185
(updated version number in source for release
) committed by bdpayne
- updated version number in source for release
updated version number in source for release
-
r184
(updated readme to include a note about using the volatility ...) committed by bdpayne
- updated readme to include a note about using the volatility patch
updated readme to include a note about using the volatility patch
-
r183
(this patch allows volatility to work with pyxa
) committed by bdpayne
- this patch allows volatility to work with pyxa
this patch allows volatility to work with pyxa
-
r182
(a few more minor issues
) committed by bdpayne
- a few more minor issues
-
r181
(fixed off by one in version constant numbering
) committed by bdpayne
- fixed off by one in version constant numbering
fixed off by one in version constant numbering
|