From d5bdf9633dc365a2c5d80facdcc82cb3caff3849 Mon Sep 17 00:00:00 2001 From: Michael Ligh Date: Tue, 7 Apr 2020 09:22:52 -0500 Subject: [PATCH] refs #204 fix modscan, _LDR_DATA_TABLE_ENTRY is not an executive object and doesn't have an object_type --- volatility/framework/plugins/windows/poolscanner.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/plugins/windows/poolscanner.py b/volatility/framework/plugins/windows/poolscanner.py index 7701e074a..317dd0d83 100644 --- a/volatility/framework/plugins/windows/poolscanner.py +++ b/volatility/framework/plugins/windows/poolscanner.py @@ -370,7 +370,7 @@ class PoolScanner(plugins.PluginInterface): vollog.log(constants.LOGLEVEL_VVV, "Cannot create an instance of {}".format(constraint.type_name)) continue - if not constraint.skip_type_test: + if constraint.object_type is not None and not constraint.skip_type_test: try: if mem_object.get_object_header().get_object_type(type_map, cookie) != constraint.object_type: continue