From 4308245499aa0e15951dd2a1e181e28d367c3915 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 20 Dec 2018 15:40:53 +0000 Subject: [PATCH] Revert "prevent double shifting of ASLR slides" This reverts commit 2655fd1666a38e455b809e9c795cf62e60582fea. --- volatility/framework/automagic/linux.py | 2 +- volatility/framework/automagic/mac.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/framework/automagic/linux.py b/volatility/framework/automagic/linux.py index 906bb7eb7..6c4e238bc 100644 --- a/volatility/framework/automagic/linux.py +++ b/volatility/framework/automagic/linux.py @@ -278,7 +278,7 @@ class LinuxUtilities(object): aslr_layer = sym_layer.config['memory_layer'] _, aslr_shift = cls.find_aslr(context, symbol_table, aslr_layer) - symbols.mask_symbol_table(sym_table, sym_layer.address_mask, aslr_shift) + symbols.mask_symbol_table(sym_table, sym_layer.address_mask, aslr_shift) @classmethod def find_aslr(cls, diff --git a/volatility/framework/automagic/mac.py b/volatility/framework/automagic/mac.py index 807ee1348..7eeac10a6 100644 --- a/volatility/framework/automagic/mac.py +++ b/volatility/framework/automagic/mac.py @@ -143,7 +143,7 @@ class MacUtilities(object): aslr_layer = sym_layer.config['memory_layer'] aslr_shift = cls.find_aslr(context, symbol_table, aslr_layer) - symbols.mask_symbol_table(sym_table, sym_layer.address_mask, aslr_shift) + symbols.mask_symbol_table(sym_table, sym_layer.address_mask, aslr_shift) @classmethod def _scan_generator(cls, context, layer_name, progress_callback):