WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-28 12:34:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'develop' into issue_1944_dtb_check

Browse Source
This commit is contained in:
ikelos
2026-03-08 20:34:16 +00:00
committed by GitHub
parent 55cd4d9759 d3a9481a31
commit fa732a337a
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/automagic/windows.py
+3 -4
View File
@@ -153,8 +153,7 @@ class DtbSelfRefPae(DtbSelfReferential):
# Mask off the page bits of top level page map
page_table_mask = b"\x00\xf0\xff\xff\xff\xff\xff\xff" * 4
page_table = data[
top_pae_page
- data_offset : top_pae_page
top_pae_page - data_offset : top_pae_page
- data_offset
+ (4 * self.ptr_size)
]
@@ -312,8 +311,8 @@ class WindowsIntelStacker(interfaces.automagic.StackerLayerInterface):
valid_pointers = 0
for _ in get_valid_page_table_pointers(page_table, ptr_size):
valid_pointers += 1
# 12 is an arbitrary constant
if valid_pointers >= 12:
# 10 is an arbitrary constant
if valid_pointers >= 10:
# Do not consume the entire generator to enhance performance
return False