From 5ef5c027ec0a0cc9ff81798e64e8644fb370bcc5 Mon Sep 17 00:00:00 2001 From: Abyss Watcher Date: Mon, 10 Nov 2025 22:10:24 +0100 Subject: [PATCH] fix missing kernel_base increment in low stub scanner --- volatility3/framework/automagic/pdbscan.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/automagic/pdbscan.py b/volatility3/framework/automagic/pdbscan.py index 8e2233840e..c03db7582e 100644 --- a/volatility3/framework/automagic/pdbscan.py +++ b/volatility3/framework/automagic/pdbscan.py @@ -450,7 +450,7 @@ def method_low_stub_offset( while (kernel_base + 0x2000000) > kernel_hint: for i in range(0, 0x200000, 0x1000): valid_kernel = self.check_kernel_offset( - context, vlayer, kernel_base, progress_callback + context, vlayer, kernel_base + i, progress_callback ) if valid_kernel: return valid_kernel