From df310c0d92cc274ef6bc49d97decaacca31f0553 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sat, 1 Feb 2025 12:27:49 +0000 Subject: [PATCH] Manually revert 74a834b This should resolve the issue experienced #1590 was trying to resolve. --- volatility3/framework/symbols/linux/extensions/__init__.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/volatility3/framework/symbols/linux/extensions/__init__.py b/volatility3/framework/symbols/linux/extensions/__init__.py index 7103a2068..c24b495d8 100644 --- a/volatility3/framework/symbols/linux/extensions/__init__.py +++ b/volatility3/framework/symbols/linux/extensions/__init__.py @@ -1574,9 +1574,7 @@ def _is_kernel_prior_to_struct_mount(self) -> bool: 'True' if the kernel lacks the 'mount' struct, typically indicating kernel < 3.3. """ - return (not self._context.symbol_space.has_type("mount")) and self.has_member( - "mnt_parent" - ) + return self.has_member("mnt_parent") def is_equal(self, vfsmount_ptr) -> bool: """Helper to make sure it is comparing two pointers to 'vfsmount'.