diff --git a/volatility/framework/plugins/windows/vaddump.py b/volatility/framework/plugins/windows/vaddump.py index 4922637a7..36f9285f0 100644 --- a/volatility/framework/plugins/windows/vaddump.py +++ b/volatility/framework/plugins/windows/vaddump.py @@ -47,7 +47,7 @@ class VadDump(interfaces.plugins.PluginInterface): proc_layer = context.layers[layer_name] chunk_size = 1024 * 1024 * 10 offset = vad.get_start() - out_of_range = vad.get_start() + vad.get_end() + out_of_range = vad.get_end() # print("walking from {:x} to {:x} | {:x}".format(offset, out_of_range, out_of_range-offset)) while offset < out_of_range: to_read = min(chunk_size, out_of_range - offset)