WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-11 04:07:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

refs #332 catch invalid address exceptions when reading DllBase

Browse Source
This commit is contained in:
iMHLv2
2020-10-07 23:16:14 +01:00
committed by ikelos
parent 7e63ed4815
commit 0d4075355a
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/verinfo.py
+8 -1
View File
@@ -139,6 +139,11 @@ class VerInfo(interfaces.plugins.PluginInterface):
except exceptions.InvalidAddressException:
BaseDllName = renderers.UnreadableValue()
try:
DllBase = format_hints.Hex(entry.DllBase)
except exceptions.InvalidAddressException:
DllBase = renderers.UnreadableValue()
try:
(major, minor, product, build) = self.get_version_information(self._context, pe_table_name,
proc_layer_name, entry.DllBase)
@@ -148,7 +153,9 @@ class VerInfo(interfaces.plugins.PluginInterface):
yield (0, (proc.UniqueProcessId,
proc.ImageFileName.cast("string",
max_length = proc.ImageFileName.vol.count,
errors = "replace"), format_hints.Hex(entry.DllBase), BaseDllName,
errors = "replace"),
DllBase,
BaseDllName,
major, minor, product, build))
def run(self):