From d7aefdce2836060a90783332e5843b747f96e353 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sun, 14 Feb 2016 02:50:37 +0000 Subject: [PATCH] Add a comment explaining why we don't truncate strings on \x00. --- volatility/framework/objects/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/volatility/framework/objects/__init__.py b/volatility/framework/objects/__init__.py index 8e6a7b09b..48ad5f734 100644 --- a/volatility/framework/objects/__init__.py +++ b/volatility/framework/objects/__init__.py @@ -138,6 +138,7 @@ class String(PrimitiveObject, str): layer_name = object_info.layer_name, offset = object_info.offset), **params) + # We don't truncate on "\x00" because the string decoder does that for us return value