diff --git a/volatility3/framework/plugins/linux/kernel_tracing/perf_events.py b/volatility3/framework/plugins/linux/kernel_tracing/perf_events.py index 2136de2d8..9f5995d55 100644 --- a/volatility3/framework/plugins/linux/kernel_tracing/perf_events.py +++ b/volatility3/framework/plugins/linux/kernel_tracing/perf_events.py @@ -67,7 +67,11 @@ class PerfEvents(plugins.PluginInterface): # if the names are smeared then bail try: event_name = utility.pointer_to_string(event.pmu.name, count=64) - full_name = utility.array_to_string(event.prog.aux.ksym.name, count=512) + try: + full_name = utility.array_to_string(event.prog.aux.ksym.name, count=512) + except AttributeError: + full_name = renderers.NotApplicableValue() + program_name = utility.array_to_string(event.prog.aux.name) except exceptions.InvalidAddressException: continue