From 23ccb4d4c8133603dd4d0394ab10f0d7170c1b27 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Mon, 17 Jul 2017 17:11:05 +0100 Subject: [PATCH] Fix the real root cause, files not containing a banner. --- volatility/framework/automagic/linux.py | 2 +- volatility/framework/automagic/linux_symbol_cache.py | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/volatility/framework/automagic/linux.py b/volatility/framework/automagic/linux.py index b5bbea84a..52b3db4b8 100644 --- a/volatility/framework/automagic/linux.py +++ b/volatility/framework/automagic/linux.py @@ -41,7 +41,7 @@ class LinuxSymbolFinder(interfaces.automagic.AutomagicInterface): if not self._linux_banners: return - mss = scanners.MultiStringScanner(list(self._linux_banners)) + mss = scanners.MultiStringScanner([x for x in self._linux_banners if x is not None]) layer = context.memory[layer_name] diff --git a/volatility/framework/automagic/linux_symbol_cache.py b/volatility/framework/automagic/linux_symbol_cache.py index ad01cbcd4..b59e92b7d 100644 --- a/volatility/framework/automagic/linux_symbol_cache.py +++ b/volatility/framework/automagic/linux_symbol_cache.py @@ -29,8 +29,6 @@ class LinuxSymbolCache(interfaces.automagic.AutomagicInterface): vollog.log(constants.LOGLEVEL_V, "Removing cached path {} for banner {}: files does not exist".format(path, banner)) linuxbanners[banner].remove(path) - # Rewrite it in case we found any files that were no logner present - cls.save_linux_banners(linuxbanners) return linuxbanners @classmethod