Windows: update get_commit_charge with CommitCharge fix by BeanBagKing

eve-mem · Jan 31, 2025 · e9d1831 · e9d1831
1 parent 4e2227e
commit e9d1831
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/volatility3/framework/symbols/windows/extensions/__init__.py b/volatility3/framework/symbols/windows/extensions/__init__.py
@@ -262,7 +262,10 @@ def get_size(self) -> int:
     def get_commit_charge(self):
         """Get the VAD's commit charge (number of committed pages)"""
 
-        if self.has_member("u1") and self.u1.has_member("VadFlags1"):
+        if self.has_member("CommitCharge"):
+            return self.CommitCharge
+
+        elif self.has_member("u1") and self.u1.has_member("VadFlags1"):
             return self.u1.VadFlags1.CommitCharge
 
         elif self.has_member("u") and self.u.has_member("VadFlags"):