From f082c1c8cc9a17b08c0f33f7b3244b8b4e4dc629 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 26 Aug 2021 17:25:03 +0100 Subject: [PATCH] Objects: Fix up pointer caching to default to native layer --- volatility3/framework/objects/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/objects/__init__.py b/volatility3/framework/objects/__init__.py index eec0329d5..05d594b2f 100644 --- a/volatility3/framework/objects/__init__.py +++ b/volatility3/framework/objects/__init__.py @@ -323,7 +323,7 @@ class Pointer(Integer): # Cache clearing should be done by a cast (we can add a specific method to reset a pointer, # but hopefully it's not necessary) if layer_name is None: - layer_name = self.vol.layer_name + layer_name = self.vol.native_layer_name if self._cache.get(layer_name, None) is None: layer_name = layer_name or self.vol.native_layer_name mask = self._context.layers[layer_name].address_mask