From 86ef99f57a76763c3e35b99fb950a5ab2193f0a3 Mon Sep 17 00:00:00 2001
From: Andrew Case <andrew@dfir.org>
Date: Wed, 5 Mar 2025 23:10:27 +0000
Subject: [PATCH] Properly decode values from ELF files even with partial smear

---
 volatility3/framework/symbols/linux/extensions/elf.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/symbols/linux/extensions/elf.py b/volatility3/framework/symbols/linux/extensions/elf.py
index 89a421402..f2bfa89bd 100644
--- a/volatility3/framework/symbols/linux/extensions/elf.py
+++ b/volatility3/framework/symbols/linux/extensions/elf.py
@@ -446,7 +446,7 @@ class elf_linkmap(objects.StructType):
         idx = buf.find(b"\x00")
         if idx != -1:
             buf = buf[:idx]
-        return buf.decode()
+        return buf.decode("utf-8", errors="ignore")
 
 
 class_types = {