We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b1a42d9 commit 3aa4af8Copy full SHA for 3aa4af8
volatility3/framework/symbols/windows/extensions/registry.py
@@ -133,8 +133,17 @@ def _skip_key_hive_entry_path(self, kcb_flags):
133
134
def get_full_key_name(self) -> str:
135
output = []
136
+ seen = set()
137
+
138
kcb = self.KeyControlBlock
139
while kcb.ParentKcb:
140
+ if kcb.ParentKcb.vol.offset in seen:
141
+ return ""
142
+ seen.add(kcb.ParentKcb.vol.offset)
143
144
+ if len(output) > 128:
145
146
147
if kcb.NameBlock.Name is None:
148
break
149
0 commit comments