search

ksanchezcld / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
1 stars 0 forks source link

CheckPoolType is backwards for vista/2008/7 paged vs non-paged pools #257

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Here is another rare but major bug, I believe, in CheckPoolType for 
Vista/2008/7. It causes pool scanners to find paged pools if you request 
non-paged pools, and non-paged pools if you request paged pools. Some of you 
may already have received details via email, but posting it here for record 
keeping.

Original issue reported on code.google.com by michael.hale@gmail.com on 16 May 2012 at 4:47

Attachments:

GoogleCodeExporter commented 9 years ago 
Patch looks good to me, code-wise.  Can't comment on functionality-wise, but 
the background research seems pretty conclusive...  5:)

Original comment by mike.auty@gmail.com on 16 May 2012 at 7:13

GoogleCodeExporter commented 9 years ago

Original comment by mike.auty@gmail.com on 16 May 2012 at 7:13

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision r1716.

Original comment by michael.hale@gmail.com on 17 May 2012 at 2:06