From f78820faf7fb6bdaf76d1bb6ab725cc09930394b Mon Sep 17 00:00:00 2001 From: cesare Date: Tue, 25 Aug 2020 12:49:56 +0200 Subject: [PATCH] - version added - "proc_id" moved into try/except and default value added --- volatility/framework/plugins/windows/cmdline.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/volatility/framework/plugins/windows/cmdline.py b/volatility/framework/plugins/windows/cmdline.py index 643b99161..7798abc4f 100644 --- a/volatility/framework/plugins/windows/cmdline.py +++ b/volatility/framework/plugins/windows/cmdline.py @@ -15,6 +15,8 @@ vollog = logging.getLogger(__name__) class CmdLine(interfaces.plugins.PluginInterface): """Lists process command line arguments.""" + _version = (1, 0, 0) + @classmethod def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: # Since we're calling the plugin, make sure we have the plugin's requirements @@ -59,9 +61,10 @@ class CmdLine(interfaces.plugins.PluginInterface): for proc in procs: process_name = utility.array_to_string(proc.ImageFileName) - proc_id = proc.UniqueProcessId + proc_id = "Unknown" try: + proc_id = proc.UniqueProcessId result_text = self.get_cmdline(self.context, self.config["nt_symbols"], proc) except exceptions.SwappedInvalidAddressException as exp: