Merge pull request #1720 from volatilityfoundation/fix_check_syscall

Prevent backtrace on corrupt system call table entry
2026-09-08 18:57:38 +02:00 · 2025-03-17 21:28:31 +00:00
parent a1229f902e f697287784
commit 7bdeddf050
1 changed files with 5 additions and 2 deletions
@@ -172,8 +172,11 @@ class Check_syscall(plugins.PluginInterface):
                count=tblsz,
            )

-            for i, call_addr in enumerate(table):
-                if not call_addr:
+            for i in range(len(table)):
+                try:
+                    call_addr = table[i]
+                except exceptions.InvalidAddressException:
+                    vollog.debug(f"Failed to get system call table entry at index {i}")
                    continue

                symbols = list(vmlinux.get_symbols_by_absolute_location(call_addr))