From 2b001fad4db0cb6e4c2500fe42e295279eb7a5e9 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Tue, 26 Feb 2019 23:02:34 +0000 Subject: [PATCH] Make sure we get 4 ints, not 8 shorts. --- volatility/framework/symbols/mac/extensions/__init__.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/framework/symbols/mac/extensions/__init__.py b/volatility/framework/symbols/mac/extensions/__init__.py index 5852b5fec..d98ac6f50 100644 --- a/volatility/framework/symbols/mac/extensions/__init__.py +++ b/volatility/framework/symbols/mac/extensions/__init__.py @@ -367,10 +367,10 @@ class inpcb(objects.Struct): return [lip, lport, rip, rport] def get_ipv6_info(self): - lip = self.inp_dependladdr.inp6_local.member(attr = '__u6_addr').member(attr = '__u6_addr16') + lip = self.inp_dependladdr.inp6_local.member(attr = '__u6_addr').member(attr = '__u6_addr32') lport = self.inp_lport - rip = self.inp_dependfaddr.inp6_foreign.member(attr = '__u6_addr').member(attr = '__u6_addr16') + rip = self.inp_dependfaddr.inp6_foreign.member(attr = '__u6_addr').member(attr = '__u6_addr32') rport = self.inp_fport return [lip, lport, rip, rport]