diff --git a/volatility3/framework/plugins/linux/pidhashtable.py b/volatility3/framework/plugins/linux/pidhashtable.py index edafe97e0..d00fb2ad2 100644 --- a/volatility3/framework/plugins/linux/pidhashtable.py +++ b/volatility3/framework/plugins/linux/pidhashtable.py @@ -236,7 +236,7 @@ class PIDHashTable(plugins.PluginInterface): self, decorate_comm: bool = False ) -> interfaces.objects.ObjectInterface: for task in self.get_tasks(): - offset, pid, tid, ppid, name = pslist.PsList.get_task_fields( + offset, pid, tid, ppid, name, _ = pslist.PsList.get_task_fields( task, decorate_comm ) fields = format_hints.Hex(offset), pid, tid, ppid, name diff --git a/volatility3/framework/plugins/linux/pstree.py b/volatility3/framework/plugins/linux/pstree.py index efe5223df..0eb9779a4 100644 --- a/volatility3/framework/plugins/linux/pstree.py +++ b/volatility3/framework/plugins/linux/pstree.py @@ -103,7 +103,7 @@ class PsTree(interfaces.plugins.PluginInterface): row = pslist.PsList.get_task_fields(task, decorate_comm) # update the first element, the offset, in the row tuple to use format_hints.Hex # as a simple int is returned from get_task_fields. - row = (format_hints.Hex(row[0]),) + row[1:] + row = (format_hints.Hex(row[0]),) + row[1:-1] tid = task.pid yield (self._levels[tid] - 1, row)