mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-12 20:57:39 +02:00
Break properly in all paths. Help callers to ensure always lower case module name matching.
This commit is contained in:
@@ -380,7 +380,7 @@ class PESymbols(interfaces.plugins.PluginInterface):
|
||||
Returns:
|
||||
str: the bsae file name of the full path
|
||||
"""
|
||||
return ntpath.basename(filepath)
|
||||
return ntpath.basename(filepath).lower()
|
||||
|
||||
@staticmethod
|
||||
def addresses_for_process_symbols(
|
||||
@@ -717,11 +717,12 @@ class PESymbols(interfaces.plugins.PluginInterface):
|
||||
del remaining[symbol_key][value_index]
|
||||
|
||||
# everything was resolved, stop this resolver
|
||||
if not remaining:
|
||||
if not remaining[symbol_key]:
|
||||
break
|
||||
|
||||
# stop all resolving
|
||||
if not remaining:
|
||||
if not remaining[symbol_key]:
|
||||
del remaining[symbol_key]
|
||||
break
|
||||
|
||||
return found, remaining
|
||||
|
||||
Reference in New Issue
Block a user