Gustavo Moreira

It seems the PDB document table contains a hash that we can use to check integrity. https://github.com/dotnet/runtime/blob/main/docs/design/specs/PortablePdb-Metadata.md#document-table-0x30 ``` Document Table: 0x30 The Document table has the following columns: Name (Blob...

I have noticed this issue happens when multiple instances of Volatility3 run simultaneously, such as executing all Windows test cases at once in VSCode. Each instance attempts to fetch the...

Hm that's weird, now I'm even more curious why the test cases didn't fail. @ikelos Any idea? @ikelos and @arepi-nemui Anyway, this is why I thought that `if` is dead...

@ikelos Yeah, it makes sense. I think the line you suggested is the safest way to go with this. Could you change that or do you want me to create...

Regarding canonical addresses, the canonical prefix doesn't look right to me. ```python >>> hex(self._canonical_prefix) '0xffff000000000000' ``` Unless I'm missing something, it should be `0xffff800000000000`. From the Intel® 64 and IA-32...

@atcuno https://github.com/volatilityfoundation/volatility3/pull/1192#issuecomment-2227632581 the fix was merged 3 months ago.