Skip to content

Commit

Permalink
Merge pull request #1228 from volatilityfoundation/ldr_fix
Browse files Browse the repository at this point in the history
Remove errant filter on ldrmodule checks
  • Loading branch information
ikelos authored Jul 30, 2024
2 parents 2743e78 + a84a370 commit 16cde44
Showing 1 changed file with 1 addition and 9 deletions.
10 changes: 1 addition & 9 deletions volatility3/framework/plugins/windows/ldrmodules.py
Original file line number Diff line number Diff line change
Expand Up @@ -47,14 +47,6 @@ def _generator(self, procs):
self.context, self.config_path, "windows", "pe", class_types=pe.class_types
)

def filter_function(x: interfaces.objects.ObjectInterface) -> bool:
try:
return not (x.get_private_memory() == 0 and x.ControlArea)
except AttributeError:
return False

filter_func = filter_function

for proc in procs:
proc_layer_name = proc.add_process_layer()

Expand All @@ -69,7 +61,7 @@ def filter_function(x: interfaces.objects.ObjectInterface) -> bool:

# Build dictionary of mapped files, where the VAD start address is the key and value is the file name of the mapped file
mapped_files = {}
for vad in vadinfo.VadInfo.list_vads(proc, filter_func=filter_func):
for vad in vadinfo.VadInfo.list_vads(proc):
dos_header = self.context.object(
pe_table_name + constants.BANG + "_IMAGE_DOS_HEADER",
offset=vad.get_start(),
Expand Down

0 comments on commit 16cde44

Please sign in to comment.