From 15dc9ec4635170f70edcb8fb96c25251a3040d0c Mon Sep 17 00:00:00 2001
From: SolitudePy <47316655+SolitudePy@users.noreply.github.com>
Date: Wed, 25 Jun 2025 19:05:10 +0300
Subject: [PATCH] Plugins: precise exception handling in process_spoofing

---
 .../framework/plugins/linux/malware/process_spoofing.py     | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/volatility3/framework/plugins/linux/malware/process_spoofing.py b/volatility3/framework/plugins/linux/malware/process_spoofing.py
index 451889029..b14dd208c 100644
--- a/volatility3/framework/plugins/linux/malware/process_spoofing.py
+++ b/volatility3/framework/plugins/linux/malware/process_spoofing.py
@@ -237,8 +237,10 @@ class ProcessSpoofing(plugins.PluginInterface):
                     ),
                 )
 
-            except Exception as e:
-                vollog.debug(f"Error processing task at {task.vol.offset:#x}: {e}")
+            except (exceptions.InvalidAddressException, AttributeError) as e:
+                vollog.warning(
+                    f"Unable to process task PID {getattr(task, 'pid', 'unknown')} at {task.vol.offset:#x}: {e}"
+                )
                 continue
 
     def run(self):