We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bf68fa8 commit 36327a4Copy full SHA for 36327a4
volatility3/framework/symbols/linux/extensions/__init__.py
@@ -139,12 +139,12 @@ def get_symbols(self):
139
except exceptions.PagedInvalidAddressException:
140
continue
141
142
- if sym_name:
+ # Stop at first null byte (strtab is a null terminated strings list)
143
+ sym_name = sym_name.split(b"\x00")[0].decode("latin-1")
144
+ if sym_name != "":
145
# Normalize sym_value
146
mask = self._context.layers[self.vol.layer_name].address_mask
147
sym_value = sym.st_value & mask
- # Stop at first null byte (strtab is a null terminated strings list)
- sym_name = sym_name.split(b"\x00")[0].decode("latin-1")
148
yield (sym_name, sym_value, sym_offset)
149
150
def get_symbol(self, wanted_sym_name):
0 commit comments