-
-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Process.memory_maps() does not return addresses above 32 bits on 64 bit builds #863
Comments
What platform are we talking about? Windows? |
Sorry about that, don't know how I left that off. Yes, Windows. I'm submitting a pull request now which has fixed the issue for me. |
Fine, looking forward to it. |
Here's the pull request: #864 |
Cool. I added comments to it. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Using the distributed x64 version of psutil and running against a 64 bit process with memory regions higher than 0xffffffff, all bits higher than 32 are truncated.
Example:
Running a 64 bit process under x64dbg, I have msctf.dll mapped in at 0x000007FEFF020000.
If I get the memory map for this process using memory_map, the entry corresponding to msctf.dll is shown with base address 0xFF020000, cutting off the highest 32 bits of the address.
The text was updated successfully, but these errors were encountered: