From bf68fa8ce2d3997fe83b56e4056068047c94590a Mon Sep 17 00:00:00 2001 From: Abyss Watcher Date: Tue, 14 Nov 2023 17:09:36 +0100 Subject: [PATCH] use KSYM_NAME_LEN for symbol name length --- volatility3/framework/symbols/linux/extensions/__init__.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility3/framework/symbols/linux/extensions/__init__.py b/volatility3/framework/symbols/linux/extensions/__init__.py index 72e26f2fa..b0190e0f9 100644 --- a/volatility3/framework/symbols/linux/extensions/__init__.py +++ b/volatility3/framework/symbols/linux/extensions/__init__.py @@ -134,8 +134,8 @@ class module(generic.GenericIntelProcess): try: sym_offset = self.section_strtab + sym.st_name sym_name = self._context.layers[self.vol.layer_name].read( - sym_offset, sym.st_size - ) + sym_offset, 512 + ) # 512 is the value of KSYM_NAME_LEN except exceptions.PagedInvalidAddressException: continue