From 1aa1cfdb643ae7fa864aea6f405439390844fa44 Mon Sep 17 00:00:00 2001
From: Joey Schulze <joey@infodrom.org>
Date: Mon, 18 Jun 2007 07:50:55 +0000
Subject: [PATCH] Adjusted the search function to find the symbol associated
 with an address when EIP address resolving is enabled.

---
 ksym_mod.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ksym_mod.c b/ksym_mod.c
index 547422c..68cd6b6 100644
--- a/ksym_mod.c
+++ b/ksym_mod.c
@@ -516,7 +516,9 @@ extern char * LookupModuleSymbol(value, sym)
 			if ( mp->sym_array[nsym].value > value )
 			{
 			    if ( sym->size == 0 ||
-				 (mp->sym_array[nsym].value-last->value) < sym->size )
+				 (value - last->value) < sym->offset ||
+				 ( (sym->offset == (value - last->value)) &&
+				   (mp->sym_array[nsym].value-last->value) < sym->size ) )
 			    {
 				sym->offset = value - last->value;
 				sym->size = mp->sym_array[nsym].value - \