When running the sockets plugin on an x86 Windows 7 RTM memory image, the
framework gets unresponsive and my whole system bogs down. I have to kill the
Volatility process to get control back.
Doing some digging, the framework is parsing a list of objects which it is
building into an array. On other images the size of this list/Array is
something like 0x1f. On the system in question the framework is attempting to
create an Array based on a list of size 0x1b4f0a0. I'm not sure where this
value is coming from, but it's my prime suspect as to what's going wrong.
I am using the /trunk code, r1340, on OS X, with Python 2.7.2.
Original issue reported on code.google.com by jessekornblum on 2 Feb 2012 at 1:39
Original issue reported on code.google.com by
jessekornblum
on 2 Feb 2012 at 1:39