WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-31 12:19:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

add debugging and parent chain walking

Browse Source
This commit is contained in:
iMHLv2
2020-07-17 10:22:07 -05:00
parent 0bae72f4f2
commit e8245289d2
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+10
View File
@@ -780,6 +780,16 @@ class VACB(objects.StructType):
def is_valid(self, shared_cache_map: interfaces.objects.ObjectInterface) -> bool:
"""Determine if the object is valid."""
#print("repr(self): {}".format(repr(self)))
#print("self.vol.offset: {0:#x}".format(self.vol.offset))
#print("shared_cache_map (parameter): {0:#x}".format(shared_cache_map.vol.offset))
#next_parent = self.vol.parent
#while next_parent is not None:
# print("repr(next_parent): {}".format(repr(next_parent)))
# print("next_parent.vol.offset: {0:#x}".format(next_parent.vol.offset))
# next_parent = next_parent.vol.parent
try:
layer = self._context.layers[self.vol.layer_name]