From 5ee09df080f4a0035ae2c95aaf7e35320c799c64 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Tue, 25 Feb 2025 09:59:05 +0000 Subject: [PATCH] Symbols: Restore previous protection for non-native missing types Fixes #1480 --- volatility3/framework/symbols/intermed.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/volatility3/framework/symbols/intermed.py b/volatility3/framework/symbols/intermed.py index cb0b67969..33035bc70 100644 --- a/volatility3/framework/symbols/intermed.py +++ b/volatility3/framework/symbols/intermed.py @@ -814,7 +814,12 @@ class Version8Format(Version7Format): type_definition = self._json_object["user_types"].get(type_name) if type_definition is None: # Fall back to the natives table - return self.natives.get_type(self.name + constants.BANG + type_name) + if type_name in self.natives.types: + return self.natives.get_type(self.name + constants.BANG + type_name) + else: + raise exceptions.SymbolError( + type_name, self.name, f"Unknown symbol: {type_name}" + ) members = self._process_fields(type_definition["fields"])