Skip to content

Commit 16cde44

Browse files
authored
Merge pull request #1228 from volatilityfoundation/ldr_fix
Remove errant filter on ldrmodule checks
2 parents 2743e78 + a84a370 commit 16cde44

File tree

1 file changed

+1
-9
lines changed

1 file changed

+1
-9
lines changed

volatility3/framework/plugins/windows/ldrmodules.py

Lines changed: 1 addition & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -47,14 +47,6 @@ def _generator(self, procs):
4747
self.context, self.config_path, "windows", "pe", class_types=pe.class_types
4848
)
4949

50-
def filter_function(x: interfaces.objects.ObjectInterface) -> bool:
51-
try:
52-
return not (x.get_private_memory() == 0 and x.ControlArea)
53-
except AttributeError:
54-
return False
55-
56-
filter_func = filter_function
57-
5850
for proc in procs:
5951
proc_layer_name = proc.add_process_layer()
6052

@@ -69,7 +61,7 @@ def filter_function(x: interfaces.objects.ObjectInterface) -> bool:
6961

7062
# Build dictionary of mapped files, where the VAD start address is the key and value is the file name of the mapped file
7163
mapped_files = {}
72-
for vad in vadinfo.VadInfo.list_vads(proc, filter_func=filter_func):
64+
for vad in vadinfo.VadInfo.list_vads(proc):
7365
dos_header = self.context.object(
7466
pe_table_name + constants.BANG + "_IMAGE_DOS_HEADER",
7567
offset=vad.get_start(),

0 commit comments

Comments
 (0)