diff --git a/volatility3/framework/layers/intel.py b/volatility3/framework/layers/intel.py index d762b41a8..c30ae48a8 100644 --- a/volatility3/framework/layers/intel.py +++ b/volatility3/framework/layers/intel.py @@ -182,7 +182,7 @@ def _translate(self, offset: int) -> Tuple[int, int, str]: def _pte_pfn(self, entry: int) -> int: """Extracts the page frame number (PFN) from the page table entry (PTE) entry""" - return entry >> self.page_shift + return self._mask(entry, self._maxphyaddr - 1, 0) >> self.page_shift def _translate_entry(self, offset: int) -> Tuple[int, int]: """Translates a specific offset based on paging tables.