WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-25 23:52:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

EPROCESS: Fix is_valid check missing cast.

Browse Source
This commit is contained in:
Mike Auty
2019-11-09 15:56:19 +00:00
parent 23b14b772a
commit 60eda0a52b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+1 -1
View File
@@ -696,7 +696,7 @@ class EPROCESS(generic.GenericIntelProcess, ExecutiveObject):
return False
# check for all 0s besides the PCID entries
if self.Pcb.DirectoryTableBase & ~0xfff == 0:
if self.Pcb.DirectoryTableBase.cast("unsigned long long") & ~0xfff == 0:
return False
## TODO: we can also add the thread Flink and Blink tests if necessary