for both xp and win7, there can be 32 bits heaps and 64 bit heaps

trolldbois · Jan 16, 2016 · 34f2c33 · 34f2c33
1 parent ea1adf9
commit 34f2c33
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scripts/haystack-find-heap.py b/scripts/haystack-find-heap.py
@@ -62,6 +62,7 @@ def main(argv):
             heap_not_at_start = ''
             for os, bits, offset in [('winxp', 32, 8), ('winxp', 64, 16),
                                      ('win7', 32, 100), ('win7', 64, 160)]:
+                #FIXME signature = m.read_bytes(addr+offset, 4)
                 signature = m.read_word(addr+offset)
                 if signature == 0xeeffeeff:
                     if addr != m.start: