diff --git a/volatility3/framework/symbols/linux/__init__.py b/volatility3/framework/symbols/linux/__init__.py index d66d350b1..dbea14d47 100644 --- a/volatility3/framework/symbols/linux/__init__.py +++ b/volatility3/framework/symbols/linux/__init__.py @@ -207,7 +207,7 @@ class LinuxUtilities(interfaces.configuration.VersionableInterface): # path would be /foo/bar/baz, but bar is missing due to smear the results # returned here will show /foo//baz. Note the // for the missing dname. return f" {path}" - print(path, inode.i_nlink) + if inode and inode.is_readable() and inode.is_valid() and inode.i_nlink == 0: path += LinuxUtilities.deleted return path