From 23b14b772a2c31a228649bc4a5ae1cf01bb3fce3 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sat, 9 Nov 2019 00:17:07 +0000 Subject: [PATCH] Poolscanner: Fix error in index checking. --- volatility/framework/plugins/windows/poolscanner.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/framework/plugins/windows/poolscanner.py b/volatility/framework/plugins/windows/poolscanner.py index dda48d9f1..0a6516801 100644 --- a/volatility/framework/plugins/windows/poolscanner.py +++ b/volatility/framework/plugins/windows/poolscanner.py @@ -94,10 +94,10 @@ class PoolHeaderScanner(interfaces.layers.ScannerInterface): if constraint.index is not None: if constraint.index[0]: - if header.index < constraint.index[0]: + if header.PoolIndex < constraint.index[0]: continue if constraint.index[1]: - if header.index > constraint.index[1]: + if header.PoolIndex > constraint.index[1]: continue except exceptions.InvalidAddressException: # The tested object's header doesn't point to valid addresses, ignore it