Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -172,7 +172,7 @@ winevt-analysis = "0.3"
winevt-carver = "0.1"

# Memory forensic crates (path dependencies into sibling workspace)
memf-core = "0.2.3"
memf-core = "0.2.4"
memf-format = "0.3"
memf-symbols = "0.2.3"
memf-linux = "0.3.1"
Expand Down
31 changes: 4 additions & 27 deletions crates/issen-mem/src/dispatch.rs
Original file line number Diff line number Diff line change
Expand Up @@ -1905,29 +1905,6 @@ mod tests {
let _ = dispatch_windows_modules(&reader);
}

/// `SyntheticPhysMem` reports no physical ranges, and the trait derives
/// `total_size()` by summing them — so it is zero, and any physical scan
/// traverses `(0, 0)` and sees nothing. A provider that advertises its extent
/// is therefore required to exercise a scan path at all. memf-windows carries
/// an identical private wrapper for its own tests; memf-core exporting one
/// would let both drop it.
struct RangedMem {
inner: memf_core::test_builders::SyntheticPhysMem,
ranges: Vec<memf_format::PhysicalRange>,
}

impl memf_format::PhysicalMemoryProvider for RangedMem {
fn read_phys(&self, addr: u64, buf: &mut [u8]) -> memf_format::Result<usize> {
self.inner.read_phys(addr, buf)
}
fn ranges(&self) -> &[memf_format::PhysicalRange] {
&self.ranges
}
fn format_name(&self) -> &str {
"Synthetic(ranged)"
}
}

/// A reader whose build number *is* resolvable, with no TCP endpoints in it.
///
/// `memf_windows::network::nt_build_number` falls back to scanning raw memory
Expand All @@ -1947,13 +1924,13 @@ mod tests {
let (cr3, mem) = PageTableBuilder::new()
.write_phys(0x0004_0000, &page)
.build();
let ranged = RangedMem {
inner: mem,
ranges: vec![memf_format::PhysicalRange {
let ranged = memf_core::test_builders::RangedPhysMem::with_ranges(
mem,
vec![memf_format::PhysicalRange {
start: 0,
end: 1024 * 1024,
}],
};
);
let provider: Box<dyn PhysicalMemoryProvider> = Box::new(ranged);
let vas = VirtualAddressSpace::new(provider, cr3, TranslationMode::X86_64FourLevel);

Expand Down
4 changes: 2 additions & 2 deletions supply-chain/imports.lock
Original file line number Diff line number Diff line change
Expand Up @@ -133,8 +133,8 @@ user-login = "h4x0r"
user-name = "Albert Hui"

[[publisher.memf-core]]
version = "0.2.3"
when = "2026-07-23"
version = "0.2.4"
when = "2026-08-04"
user-id = 347968
user-login = "h4x0r"
user-name = "Albert Hui"
Expand Down
Loading