Hiya,
Again, a little enhancement request. Currently pdbparse has the value
ARCH_PTR_SIZE hardcoded as 4 bytes (good for 32-bit systems). It would be
great to provide a command line parameter, or some ridiculously clever way of
figuring out whether a pdb file is for a 64-bit system, and altering the value
to match the size of a native pointer...
This was spawned from volatility issue 232 [1].
[1] http://code.google.com/p/volatility/issues/detail?id=232
Original issue reported on code.google.com by mike.auty@gmail.com on 13 Mar 2012 at 12:59
Original issue reported on code.google.com by
mike.auty@gmail.com
on 13 Mar 2012 at 12:59