From fbeab3608c0e63fa32746f0d96b2c05c28a55f09 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 8 Aug 2019 01:09:56 +0100 Subject: [PATCH] Make we raise if the _POOL_HEADER type doesn't exist. --- volatility/framework/plugins/windows/poolscanner.py | 1 + 1 file changed, 1 insertion(+) diff --git a/volatility/framework/plugins/windows/poolscanner.py b/volatility/framework/plugins/windows/poolscanner.py index aba7f6fd2..9e9eaf5f6 100644 --- a/volatility/framework/plugins/windows/poolscanner.py +++ b/volatility/framework/plugins/windows/poolscanner.py @@ -396,6 +396,7 @@ class PoolScanner(plugins.PluginInterface): # Setup the pool header and offset differential try: module = context.module(symbol_table, layer_name, offset = 0) + module.get_type("_POOL_HEADER") except exceptions.SymbolError: # We have to manually load a symbol table