Merge pull request #580 from volatilityfoundation/issues/large-page-fix

Layers: Fix bug where PAT flag is treated as address
2026-09-28 12:34:53 +02:00 · 2021-11-03 19:20:38 +00:00
parent bcdec8a480 2a7831466c
commit 23453f5d8c
1 changed files with 3 additions and 0 deletions
@@ -135,6 +135,9 @@ class Intel(linear.LinearlyMappedLayer):
                                                              "Page Fault at entry " + hex(entry) + " in table " + name)
            # Check if we're a large page
            if large_page and (entry & (1 << 7)):
+                # Mask off the PAT bit
+                if entry & (1 << 12):
+                    entry -= (1 << 12)
                # We're a large page, the rest is finished below
                # If we want to implement PSE-36, it would need to be done here
                break