linux-rootkit

commit cb80ddba5dc8f9aed91116762f1e82a5646aeae3
parent 37542745350eba3c4f698c17415ca039c6fa3a64
Author: Tizian Leonhardt <tizianleonhardt@web.de>
Date:   Sat, 23 Jan 2021 19:33:04 +0100

Dict now contains list of ranges

Diffstat:
M
mem_forensics/memcheck-gdb.py
 | 
7
+++++--

1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/mem_forensics/memcheck-gdb.py b/mem_forensics/memcheck-gdb.py
@@ -591,7 +591,7 @@ class RkCheckFunctions(gdb.Command):
     symbols = None
     headers = None
 
-    #Key: symbol, value: range for exclude bytes
+    #Key: symbol, value: list of ranges for exclude bytes
     altinstr_dict = {}
     paravirt_dict = {}
 
@@ -667,7 +667,10 @@ class RkCheckFunctions(gdb.Command):
             else:
                 value = range(replacementlen)
 
-            self.altinstr_dict[key] = value
+            if key in self.altinstr_dict:
+                self.altinstr_dict[key].append(value)
+            else:
+                self.altinstr_dict[key] = [value]
 
             i = i + alt_instr_sz