Skip to content

Commit 3e6ea7b

Browse files
authored
Merge pull request #1290 from dgmcdona/dgmcdona/windows-unloadedmodules-traceback
Windows: unloadedmodules bugfix
2 parents b0a30c0 + e605bee commit 3e6ea7b

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

volatility3/framework/plugins/windows/unloadedmodules.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
from typing import List, Iterable
88

99
from volatility3.framework import constants
10-
from volatility3.framework import interfaces, symbols
10+
from volatility3.framework import interfaces, symbols, exceptions
1111
from volatility3.framework import renderers
1212
from volatility3.framework.configuration import requirements
1313
from volatility3.framework.interfaces import configuration
@@ -132,10 +132,15 @@ def _generator(self):
132132
kernel.symbol_table_name,
133133
unloadedmodule_table_name,
134134
):
135+
try:
136+
name = mod.Name.String
137+
except exceptions.InvalidAddressException:
138+
name = renderers.UnreadableValue()
139+
135140
yield (
136141
0,
137142
(
138-
mod.Name.String,
143+
name,
139144
format_hints.Hex(mod.StartAddress),
140145
format_hints.Hex(mod.EndAddress),
141146
conversion.wintime_to_datetime(mod.CurrentTime),

0 commit comments

Comments
 (0)