From 62bd41980bd722d2e4458b578090e69abbe95ff2 Mon Sep 17 00:00:00 2001
From: David McDonald <dgmcdona@uno.edu>
Date: Mon, 14 Apr 2025 11:41:00 -0500
Subject: [PATCH] Shimcache: Use `self.Path.vol.count` instead of hardcoded
 value

---
 volatility3/framework/symbols/windows/extensions/shimcache.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/symbols/windows/extensions/shimcache.py b/volatility3/framework/symbols/windows/extensions/shimcache.py
index a80ecc0ea..2e7c68fa9 100644
--- a/volatility3/framework/symbols/windows/extensions/shimcache.py
+++ b/volatility3/framework/symbols/windows/extensions/shimcache.py
@@ -136,7 +136,7 @@ class SHIM_CACHE_ENTRY(objects.StructType):
                 self._context,
                 self.Path.vol.layer_name,
                 self.Path.vol.offset,
-                520,
+                self.Path.vol.count,
                 encoding="utf-16le",
             )