diff --git a/volatility/framework/objects/__init__.py b/volatility/framework/objects/__init__.py index 8e6a7b09b..48ad5f734 100644 --- a/volatility/framework/objects/__init__.py +++ b/volatility/framework/objects/__init__.py @@ -138,6 +138,7 @@ class String(PrimitiveObject, str): layer_name = object_info.layer_name, offset = object_info.offset), **params) + # We don't truncate on "\x00" because the string decoder does that for us return value