WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added Comment/TODO for transition state issue

Browse Source 
See https://github.com/volatilityfoundation/volatility3/pull/475
This commit is contained in:
Frank Block
2021-03-11 23:55:37 +01:00
committed by GitHub
parent 3e04b347cd
commit 9c1603e372
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/windows/extensions/__init__.py
+5 -1
View File
@@ -972,8 +972,12 @@ class CONTROL_AREA(objects.StructType):
# If the entry is not a valid physical address then see if it is in transition.
elif mmpte.u.Trans.Transition == 1:
# Strips the bit flag in 'PageFrameNumber' for pages in transition state
# TODO: Fix appropriately in a future release.
# Currently just a temprorary workaround to deal with custom bit flag
# in the PFN field for pages in transition state.
# See https://github.com/volatilityfoundation/volatility3/pull/475
physoffset = (mmpte.u.Trans.PageFrameNumber & (( 1 << 33 ) - 1 ) ) << 12
yield physoffset, file_offset, self.PAGE_SIZE
# Go to the next PTE entry