From 53397117ef5c049df7f5a3fb1e8e01c6cc781a28 Mon Sep 17 00:00:00 2001 From: iMHLv2 Date: Wed, 6 Jan 2021 10:30:01 -0600 Subject: [PATCH 1/2] remove unnecessary and unused imports from the windows extensions init file --- volatility/framework/symbols/windows/extensions/__init__.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/volatility/framework/symbols/windows/extensions/__init__.py b/volatility/framework/symbols/windows/extensions/__init__.py index 9352b04d3..dd7684de4 100755 --- a/volatility/framework/symbols/windows/extensions/__init__.py +++ b/volatility/framework/symbols/windows/extensions/__init__.py @@ -6,9 +6,8 @@ import collections.abc import datetime import functools import logging -import struct import math -from typing import Iterable, Iterator, Optional, Union, Dict, Tuple, List +from typing import Iterable, Iterator, Optional, Union, Tuple, List from volatility.framework import constants, exceptions, interfaces, objects, renderers, symbols from volatility.framework.layers import intel From e1032623fed1268875089180d02c9261628e934a Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 6 Jan 2021 19:28:24 +0000 Subject: [PATCH 2/2] Layers: Ensure intel PAE reports pae in the metadata --- volatility/framework/layers/intel.py | 1 + 1 file changed, 1 insertion(+) diff --git a/volatility/framework/layers/intel.py b/volatility/framework/layers/intel.py index cc5aa98aa..86bf26de7 100644 --- a/volatility/framework/layers/intel.py +++ b/volatility/framework/layers/intel.py @@ -247,6 +247,7 @@ class IntelPAE(Intel): _maxphyaddr = 40 _maxvirtaddr = 32 _structure = [('page directory pointer', 2, False), ('page directory', 9, True), ('page table', 9, True)] + _direct_metadata = collections.ChainMap({'pae', True}, Intel._direct_metadata) class Intel32e(Intel):