mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-03 03:28:43 +02:00
fix the handling of TypeInfo after 9b488f8
This commit is contained in:
@@ -488,9 +488,9 @@ class _OBJECT_HEADER(objects.Struct):
|
||||
# windows 7 and later have a TypeIndex, but windows 10
|
||||
# further encodes the index value with nt1!ObHeaderCookie
|
||||
try:
|
||||
type_index = ((self.vol.offset >> 8) ^ cookie ^ ord(self.TypeIndex)) & 0xFF
|
||||
type_index = ((self.vol.offset >> 8) ^ cookie ^ int(self.TypeIndex)) & 0xFF
|
||||
except AttributeError:
|
||||
type_index = ord(self.TypeIndex)
|
||||
type_index = int(self.TypeIndex)
|
||||
|
||||
return type_map.get(type_index)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user