Apply black to force the actions to rerun and hopefully not queue forever

Author: ikelos

volatility3/framework/constants/linux/__init__.py

@@ -321,6 +321,7 @@ class ELF_CLASS(IntEnum):
 
 class PT_FLAGS(Flag):
     "PTrace flags"
+
     PT_PTRACED = 0x00001
     PT_SEIZED = 0x10000
 

volatility3/framework/layers/codecs/__init__.py

@@ -2,7 +2,4 @@
 # which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
 #
 
-"""Codecs used for encoding or decoding data should live here
-
-
-"""
+"""Codecs used for encoding or decoding data should live here"""

volatility3/framework/layers/qemu.py

@@ -104,7 +104,7 @@ def _check_header(
         cls, base_layer: interfaces.layers.DataLayerInterface, name: str = ""
     ):
         header = base_layer.read(0, 8)
-        if header[:4] != b"\x51\x45\x56\x4D":
+        if header[:4] != b"\x51\x45\x56\x4d":
             raise exceptions.LayerException(name, "No QEMU magic bytes")
         if header[4:] != b"\x00\x00\x00\x03":
             raise exceptions.LayerException(name, "Unsupported QEMU version found")

volatility3/framework/layers/vmware.py

@@ -61,10 +61,10 @@ def _read_header(self) -> None:
         data = meta_layer.read(0, header_size)
         magic, unknown, groupCount = struct.unpack(self.header_structure, data)
         if magic not in [
-            b"\xD0\xBE\xD2\xBE",
-            b"\xD1\xBA\xD1\xBA",
-            b"\xD2\xBE\xD2\xBE",
-            b"\xD3\xBE\xD3\xBE",
+            b"\xd0\xbe\xd2\xbe",
+            b"\xd1\xba\xd1\xba",
+            b"\xd2\xbe\xd2\xbe",
+            b"\xd3\xbe\xd3\xbe",
         ]:
             raise VmwareFormatException(
                 self.name, f"Wrong magic bytes for Vmware layer: {repr(magic)}"

volatility3/framework/plugins/windows/malfind.py

@@ -169,7 +169,7 @@ def _generator(self, procs):
         # set refined criteria to know when to add to "Notes" column
         refined_criteria = {
             b"MZ": "MZ header",
-            b"\x55\x8B": "PE header",
+            b"\x55\x8b": "PE header",
             b"\x55\x48": "Function prologue",
             b"\x55\x89": "Function prologue",
         }

volatility3/framework/plugins/windows/mbrscan.py

@@ -72,7 +72,7 @@ def _generator(self) -> Iterator[Tuple]:
         partition_table_object = symbol_table + constants.BANG + "PARTITION_TABLE"
 
         # Define Signature and Data Length
-        mbr_signature = b"\x55\xAA"
+        mbr_signature = b"\x55\xaa"
         mbr_length = 0x200
         bootcode_length = 0x1B8
 

volatility3/framework/plugins/windows/shimcachemem.py

@@ -157,7 +157,7 @@ def find_shimcache_win_xp(
                     continue
 
                 try:
-                    if proc_layer.read(vad.get_start(), 4) != b"\xEF\xBE\xAD\xDE":
+                    if proc_layer.read(vad.get_start(), 4) != b"\xef\xbe\xad\xde":
                         if pid == 624:
                             vollog.debug("VAD magic bytes don't match DEADBEEF")
                         continue

volatility3/framework/symbols/windows/pdbconv.py

@@ -488,7 +488,7 @@ def name_strip(self, name):
         """Strips unnecessary components from the start of a symbol name."""
         new_name = name
 
-        if new_name[:1] in ["_", "@", "\u007F"]:
+        if new_name[:1] in ["_", "@", "\u007f"]:
             new_name = new_name[1:]
 
         name_array = new_name.split("@")