From 8e10f4e3d181e0ad89c062989b798972d139eda7 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 2 Oct 2019 00:06:25 +0100 Subject: [PATCH] Clarify handles error message. --- volatility/framework/plugins/windows/handles.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/volatility/framework/plugins/windows/handles.py b/volatility/framework/plugins/windows/handles.py index e2d1ae161..79e4dbbe8 100644 --- a/volatility/framework/plugins/windows/handles.py +++ b/volatility/framework/plugins/windows/handles.py @@ -83,7 +83,8 @@ class Handles(interfaces.plugins.PluginInterface): # is this the right thing to raise here? if magic == None: - raise AttributeError("Unable to find the SAR value for decoding handle table pointers") + raise AttributeError( + "Unable to find the SAR value for decoding handle table pointers (Is capstone installed?)") offset = self._decode_pointer(handle_table_entry.LowValue, magic) # print("LowValue: {0:#x} Magic: {1:#x} Offset: {2:#x}".format(handle_table_entry.InfoTable, magic, offset))