From adfc1f889a6f10eb6ac63dee20bfec44c9545658 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Mon, 6 Nov 2017 00:48:33 +0000 Subject: [PATCH] Add a comment about caching files that have been unzipped. --- volatility/framework/layers/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/volatility/framework/layers/__init__.py b/volatility/framework/layers/__init__.py index 6d0073bfa..d2a1dd392 100644 --- a/volatility/framework/layers/__init__.py +++ b/volatility/framework/layers/__init__.py @@ -40,6 +40,7 @@ class ResourceAccessor(object): parsed_url = urllib.parse.urlparse(url) if parsed_url.scheme == 'file': + # ZipExtFiles (files in zips) cannot seek, so must be cached in order to use and/or decompress curfile = urllib.request.urlopen(url, context = self._context) else: # TODO: find a way to check if we already have this file (look at http headers?)