Skip to content
This repository was archived by the owner on May 16, 2025. It is now read-only.

Commit fa1c0b9

Browse files
committed
Mac - handle smear in shadow walking
1 parent 805a6a3 commit fa1c0b9

File tree

1 file changed

+4
-1
lines changed
  • volatility/plugins/overlays/mac

1 file changed

+4
-1
lines changed

volatility/plugins/overlays/mac/mac.py

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1595,8 +1595,11 @@ def get_vnode(self):
15951595
# find_vnode_object
15961596
vnode_object = map_obj.object.object()
15971597

1598-
while vnode_object.shadow.dereference() != None:
1598+
seen = set()
1599+
1600+
while vnode_object.shadow.dereference() != None and vnode_object.v() not in seen:
15991601
vnode_object = vnode_object.shadow.dereference()
1602+
seen.add(vnode_object.v())
16001603

16011604
ops = vnode_object.pager.mo_pager_ops.v()
16021605

0 commit comments

Comments
 (0)