From c29f384f55bd114f45c7210d251ca9fdb8cf1ab2 Mon Sep 17 00:00:00 2001
From: AsafEitani <asaf.e@sygnia.co>
Date: Sun, 30 Aug 2020 16:47:37 +0300
Subject: [PATCH] changed config['dump'] to config.get('dump')

The config['dump'] caused some trouble in dlllist.
---
 volatility/framework/plugins/windows/malfind.py           | 2 +-
 volatility/framework/plugins/windows/memmap.py            | 2 +-
 volatility/framework/plugins/windows/modscan.py           | 2 +-
 volatility/framework/plugins/windows/modules.py           | 2 +-
 volatility/framework/plugins/windows/pslist.py            | 2 +-
 volatility/framework/plugins/windows/registry/hivelist.py | 2 +-
 volatility/framework/plugins/windows/vadinfo.py           | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/volatility/framework/plugins/windows/malfind.py b/volatility/framework/plugins/windows/malfind.py
index d1ccd7242..515a3020e 100644
--- a/volatility/framework/plugins/windows/malfind.py
+++ b/volatility/framework/plugins/windows/malfind.py
@@ -132,7 +132,7 @@ class Malfind(interfaces.plugins.PluginInterface):
                 disasm = interfaces.renderers.Disassembly(data, vad.get_start(), architecture)
 
                 dumped = False
-                if self.config['dump']:
+                if self.config.get('dump'):
                     filedata = vadinfo.VadInfo.vad_dump(self.context, proc, vad)
                     if filedata:
                         try:
diff --git a/volatility/framework/plugins/windows/memmap.py b/volatility/framework/plugins/windows/memmap.py
index 5c91538f2..95e5fff0a 100644
--- a/volatility/framework/plugins/windows/memmap.py
+++ b/volatility/framework/plugins/windows/memmap.py
@@ -52,7 +52,7 @@ class Memmap(interfaces.plugins.PluginInterface):
                 offset, size, mapped_offset, mapped_size, maplayer = mapval
 
                 dumped = False
-                if self.config['dump']:
+                if self.config.get('dump'):
                     try:
                         data = proc_layer.read(offset, size, pad = True)
                         filedata.data.write(data)
diff --git a/volatility/framework/plugins/windows/modscan.py b/volatility/framework/plugins/windows/modscan.py
index c20527b7a..9bfd55d27 100644
--- a/volatility/framework/plugins/windows/modscan.py
+++ b/volatility/framework/plugins/windows/modscan.py
@@ -75,7 +75,7 @@ class ModScan(interfaces.plugins.PluginInterface):
                 FullDllName = ""
 
             dumped = False
-            if self.config['dump']:
+            if self.config.get('dump'):
                 filedata = dlllist.DllList.dump_pe(self.context, pe_table_name, mod)
                 if filedata:
                     self.produce_file(filedata)
diff --git a/volatility/framework/plugins/windows/modules.py b/volatility/framework/plugins/windows/modules.py
index 1165328fc..830f85044 100644
--- a/volatility/framework/plugins/windows/modules.py
+++ b/volatility/framework/plugins/windows/modules.py
@@ -56,7 +56,7 @@ class Modules(interfaces.plugins.PluginInterface):
                 FullDllName = ""
 
             dumped = False
-            if self.config['dump']:
+            if self.config.get('dump'):
                 filedata = dlllist.DllList.dump_pe(self.context, pe_table_name, mod)
                 if filedata:
                     self.produce_file(filedata)
diff --git a/volatility/framework/plugins/windows/pslist.py b/volatility/framework/plugins/windows/pslist.py
index 069eab8f7..71842dbe1 100644
--- a/volatility/framework/plugins/windows/pslist.py
+++ b/volatility/framework/plugins/windows/pslist.py
@@ -184,7 +184,7 @@ class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
                 (_, _, offset, _, _) = list(memory.mapping(offset = proc.vol.offset, length = 0))[0]
 
             dumped = False
-            if self.config['dump']:
+            if self.config.get('dump'):
                 filedata = self.process_dump(self.context, self.config['nt_symbols'], pe_table_name, proc)
                 if filedata:
                     dumped = True
diff --git a/volatility/framework/plugins/windows/registry/hivelist.py b/volatility/framework/plugins/windows/registry/hivelist.py
index 9ec5d43ce..d6935b622 100644
--- a/volatility/framework/plugins/windows/registry/hivelist.py
+++ b/volatility/framework/plugins/windows/registry/hivelist.py
@@ -71,7 +71,7 @@ class HiveList(interfaces.plugins.PluginInterface):
                                                   filter_string = self.config.get('filter', None)):
 
             dumped = False
-            if self.config['dump']:
+            if self.config.get('dump'):
                 # Construct the hive
                 hive = next(self.list_hives(self.context,
                                             self.config_path,
diff --git a/volatility/framework/plugins/windows/vadinfo.py b/volatility/framework/plugins/windows/vadinfo.py
index 132401988..84a5c8da7 100644
--- a/volatility/framework/plugins/windows/vadinfo.py
+++ b/volatility/framework/plugins/windows/vadinfo.py
@@ -163,7 +163,7 @@ class VadInfo(interfaces.plugins.PluginInterface):
             for vad in self.list_vads(proc, filter_func = filter_func):
 
                 dumped = False
-                if self.config['dump']:
+                if self.config.get('dump'):
                     filedata = self.vad_dump(self.context, proc, vad)
                     self.produce_file(filedata)
                     dumped = True