Skip to content

Commit 36327a4

Browse files
committed
check if symbol name is empty after strip
1 parent bf68fa8 commit 36327a4

File tree

1 file changed

+3
-3
lines changed
  • volatility3/framework/symbols/linux/extensions

1 file changed

+3
-3
lines changed

volatility3/framework/symbols/linux/extensions/__init__.py

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -139,12 +139,12 @@ def get_symbols(self):
139139
except exceptions.PagedInvalidAddressException:
140140
continue
141141

142-
if sym_name:
142+
# Stop at first null byte (strtab is a null terminated strings list)
143+
sym_name = sym_name.split(b"\x00")[0].decode("latin-1")
144+
if sym_name != "":
143145
# Normalize sym_value
144146
mask = self._context.layers[self.vol.layer_name].address_mask
145147
sym_value = sym.st_value & mask
146-
# Stop at first null byte (strtab is a null terminated strings list)
147-
sym_name = sym_name.split(b"\x00")[0].decode("latin-1")
148148
yield (sym_name, sym_value, sym_offset)
149149

150150
def get_symbol(self, wanted_sym_name):

0 commit comments

Comments
 (0)