Skip to content

Commit 8694549

Browse files
committed
Volshell: display if embedded struct offest is unreadable in dt output
1 parent b1c1645 commit 8694549

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

volatility3/cli/volshell/generic.py

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -622,7 +622,12 @@ def _display_value(self, value: Any) -> str:
622622
elif isinstance(value, objects.Array):
623623
return repr([self._display_value(val) for val in value])
624624
else:
625-
return f"offset: {hex(value.vol.offset)}"
625+
if self.context.layers[self.current_layer].is_valid(
626+
value.vol.offset
627+
):
628+
return f"offset: {hex(value.vol.offset)}"
629+
else:
630+
return f"offset: {hex(value.vol.offset)} (unreadable)"
626631
else:
627632
# non volobject
628633
if value is None:

0 commit comments

Comments
 (0)