From c4fbaf248e2ddbc162224d81600e5736ddab85db Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sun, 16 Jul 2017 01:27:20 +0100 Subject: [PATCH] Max the number of hash buckets needed precise, and explicitly linked to the hash function. --- volatility/framework/layers/scanners/wumanber.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/layers/scanners/wumanber.py b/volatility/framework/layers/scanners/wumanber.py index 53fc6ea59..cf721b9a2 100644 --- a/volatility/framework/layers/scanners/wumanber.py +++ b/volatility/framework/layers/scanners/wumanber.py @@ -5,7 +5,7 @@ class WuManber(object): self.minimum_pattern_length = None self._block_size = block_size - self._maximum_hash = (1 << 14) # This depends on the hash function used + self._maximum_hash = self._hash_function([0xff, 0xff, 0xff]) + 1 # This depends on the hash function used self._patterns = [] self._shift = None # This gets generated by preprocess