From 99417cdfcc87d93d82b7288d8ee06ec4e06ada07 Mon Sep 17 00:00:00 2001
From: Mike Auty <mike.auty@gmail.com>
Date: Sat, 11 Mar 2023 14:17:37 +0000
Subject: [PATCH] Linux: Psscan check parent pointer is valid

---
 volatility3/framework/plugins/linux/psscan.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/volatility3/framework/plugins/linux/psscan.py b/volatility3/framework/plugins/linux/psscan.py
index f4bfd347e..ca9d30586 100644
--- a/volatility3/framework/plugins/linux/psscan.py
+++ b/volatility3/framework/plugins/linux/psscan.py
@@ -52,7 +52,10 @@ class PsScan(interfaces.plugins.PluginInterface):
         """
         pid = task.tgid
         tid = task.pid
-        ppid = task.parent.tgid if task.parent else 0
+        ppid = 0
+
+        if task.parent.is_readable():
+            ppid = task.parent.tgid
         name = utility.array_to_string(task.comm)
         exit_state = DescExitStateEnum(task.exit_state).name