diff --git a/volatility/framework/plugins/mac/tasks.py b/volatility/framework/plugins/mac/tasks.py index ddfad8e52..a3255605b 100644 --- a/volatility/framework/plugins/mac/tasks.py +++ b/volatility/framework/plugins/mac/tasks.py @@ -54,9 +54,6 @@ class Tasks(pslist.PsList): proc = task.bsd_info.dereference().cast("proc") except exceptions.PagedInvalidAddressException: continue - - if not filter_func(proc) and kernel_as.is_valid(proc.vol.offset, proc.vol.size): + + if kernel_as.is_valid(proc.vol.offset, proc.vol.size) and not filter_func(proc): yield proc - - -