Example #1
0
File: arm.py Project: zf-w11/rekall
    def vtop(self, vaddr):
        """Translates virtual addresses into physical offsets.

        The function should return either None (no valid mapping)
        or the offset in physical memory where the address maps.

        This function is simply a wrapper around describe_vtop() which does all
        the hard work. You probably never need to override it.
        """
        vaddr = int(vaddr)

        collection = self.describe_vtop(
            vaddr, intel.PhysicalAddressDescriptorCollector(self.session))

        return collection.physical_address
Example #2
0
    def ResolveProtoPTE(self, pte_value, vaddr):
        collection = intel.PhysicalAddressDescriptorCollector(self.session)
        self._describe_proto_pte(collection, 0, pte_value, vaddr)

        return collection.physical_address
Example #3
0
 def _get_phys_addr_from_pte(self, vaddr, pte_value):
     """Gets the final physical address from the PTE value."""
     collection = intel.PhysicalAddressDescriptorCollector(self.session)
     self._describe_pte(collection, None, pte_value, vaddr)
     return collection.physical_address