From 7ae0d654c260fef1dd5368c8cd28b29370f29368 Mon Sep 17 00:00:00 2001 From: Michael Ligh Date: Mon, 11 Jun 2018 21:23:36 -0500 Subject: [PATCH] pass native_types to KdbgIntermedSymbols.create() instead of table_mapping --- volatility/plugins/windows/info.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/plugins/windows/info.py b/volatility/plugins/windows/info.py index f473cd5d9..8a4ab9a92 100644 --- a/volatility/plugins/windows/info.py +++ b/volatility/plugins/windows/info.py @@ -37,13 +37,13 @@ class Info(plugins.PluginInterface): virtual_layer_name = self.config["primary"] virtual_layer = self.context.memory[virtual_layer_name] - table_mapping = {"nt_symbols": self.config["nt_symbols"]} + native_types = self.context.symbol_space[self.config["nt_symbols"]].natives kdbg_table_name = KdbgIntermedSymbols.create(self.context, self.config_path, "windows", "kdbg", - table_mapping=table_mapping) + native_types = native_types) pe_table_name = PEIntermedSymbols.create(self.context, self.config_path,