From ce2b83fc343a2aa6cf4a9fa2e45199f1cbaa606c Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 23 Oct 2019 00:09:45 +0100 Subject: [PATCH] Add in support for sizing LF_ARGLISTs. Fixes issue #99. --- volatility/framework/symbols/windows/pdbconv.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/symbols/windows/pdbconv.py b/volatility/framework/symbols/windows/pdbconv.py index 14738335b..5da346806 100644 --- a/volatility/framework/symbols/windows/pdbconv.py +++ b/volatility/framework/symbols/windows/pdbconv.py @@ -629,7 +629,7 @@ class PdbReader: result = value.size elif leaf_type in [leaf_type.LF_ARRAY, leaf_type.LF_ARRAY_ST, leaf_type.LF_STRIDED_ARRAY]: result = value.size - elif leaf_type in [leaf_type.LF_MODIFIER, leaf_type.LF_ENUM]: + elif leaf_type in [leaf_type.LF_MODIFIER, leaf_type.LF_ENUM, leaf_type.LF_ARGLIST]: result = self.get_size_from_index(value.subtype_index) elif leaf_type in [leaf_type.LF_MEMBER]: result = self.get_size_from_index(value.field_type)