From efbc410c4d3507f84f304e3385e3b9473b3fd1be Mon Sep 17 00:00:00 2001 From: Andrew Case Date: Fri, 31 Jan 2025 21:43:32 +0000 Subject: [PATCH] Add missing pointer validation check in mountinfo --- volatility3/framework/plugins/linux/mountinfo.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/linux/mountinfo.py b/volatility3/framework/plugins/linux/mountinfo.py index 47d8705c8..c56ced489 100644 --- a/volatility3/framework/plugins/linux/mountinfo.py +++ b/volatility3/framework/plugins/linux/mountinfo.py @@ -93,11 +93,14 @@ class MountInfo(plugins.PluginInterface): return None mnt_root_path = mnt_root.path() - superblock = mnt.get_mnt_sb() mnt_id: int = mnt.mnt_id parent_id: int = mnt.mnt_parent.mnt_id + superblock = mnt.get_mnt_sb() + if not (superblock and superblock.is_readable()): + return None + st_dev = f"{superblock.major}:{superblock.minor}" mnt_opts: List[str] = []