From fb4dd924ceaffa04fd39dd3a86009f110748cd85 Mon Sep 17 00:00:00 2001 From: David McDonald Date: Fri, 11 Oct 2024 10:15:43 -0500 Subject: [PATCH] Linux: Netfilter - fix traceback on missing module name When the module name can't be found, `None` ends up in this field, causing a traceback when rendering. This fixes it by replacing `None` with `renderers.NotAvailableValue()`. This occurred in the context of a netfilter hook from a hidden module. --- volatility3/framework/plugins/linux/netfilter.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/linux/netfilter.py b/volatility3/framework/plugins/linux/netfilter.py index d392a8371..f576c073c 100644 --- a/volatility3/framework/plugins/linux/netfilter.py +++ b/volatility3/framework/plugins/linux/netfilter.py @@ -714,7 +714,7 @@ class Netfilter(interfaces.plugins.PluginInterface): hook_name, priority, format_hints.Hex(hook_func), - module_name, + module_name or renderers.NotAvailableValue(), str(hooked), )