From 6265fc4e2db9fc5c471c4b2dc2c1743a5aa07dec Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 31 Aug 2017 01:04:01 +0100 Subject: [PATCH] Catch errors if the stacker didn't manage to stack correctly. --- volatility/framework/automagic/linux.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/volatility/framework/automagic/linux.py b/volatility/framework/automagic/linux.py index 96aac661e..1aeef86ab 100644 --- a/volatility/framework/automagic/linux.py +++ b/volatility/framework/automagic/linux.py @@ -32,8 +32,11 @@ class LinuxSymbolFinder(interfaces.automagic.AutomagicInterface): tl_path == path): # TODO: Find the physical layer properly, not just for Intel physical_path = interfaces.configuration.path_join(tl_sub_path, "memory_layer") - self._banner_scan(context, path, requirement, context.config[physical_path], - progress_callback) + # Ensure the stackers succeeded + if context.config.get(physical_path, None): + self._banner_scan(context, path, requirement, context.config[physical_path], + progress_callback) + break def _banner_scan(self, context, config_path, requirement, layer_name, progress_callback = None): """Accepts a context, config_path and SymbolRequirement, with a constructed layer_name