From 81653dba6d2fba68c0efba4044cca2e82f8a13ef Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Fri, 17 Jan 2020 01:14:09 +0000 Subject: [PATCH] Registry: Ignore errors if ignore_errors is set. --- volatility/framework/layers/registry.py | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/volatility/framework/layers/registry.py b/volatility/framework/layers/registry.py index bba76652f..abe02b0d3 100644 --- a/volatility/framework/layers/registry.py +++ b/volatility/framework/layers/registry.py @@ -216,8 +216,13 @@ class RegistryHive(linear.LinearlyMappedLayer): # Return the translated offset without checking bounds within the HBIN. The check runs into # issues when pages are swapped on large HBINs, and did not seem to find any errors on single page # HBINs while dramatically slowing performance. - translated_offset = self._translate(offset) - response = [(offset, translated_offset, length, self._base_layer)] + try: + translated_offset = self._translate(offset) + response = [(offset, translated_offset, length, self._base_layer)] + except exceptions.LayerException: + if not ignore_errors: + raise + response = [] return response @property