WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-10 19:57:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix a critical issue determining the names of windows kernel objects from the object header

Browse Source
This commit is contained in:
Analyst
2019-02-27 10:45:36 -06:00
parent 8baafaac7b
commit d4e12c982d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+1 -1
View File
@@ -520,7 +520,7 @@ class _OBJECT_HEADER(objects.Struct):
header_offset = self._context.object(
symbol_table_name + constants.BANG + "unsigned char",
layer_name = self.vol.native_layer_name,
offset = address + calculated_index)
offset = kvo + address + calculated_index)
header = self._context.object(
symbol_table_name + constants.BANG + "_OBJECT_HEADER_NAME_INFO",