From fdb386d7148d2549c44e28b7aa315fefa4478486 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sat, 29 Apr 2017 15:03:20 +0100 Subject: [PATCH] Return more information when particular types cannot be looked up. --- volatility/framework/symbols/__init__.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/volatility/framework/symbols/__init__.py b/volatility/framework/symbols/__init__.py index 5d29c2156..c6eded6ef 100644 --- a/volatility/framework/symbols/__init__.py +++ b/volatility/framework/symbols/__init__.py @@ -115,7 +115,10 @@ class SymbolSpace(interfaces.symbols.SymbolSpaceInterface): component_name = name_array[1] try: return getattr(self._dict[table_name], get_function)(component_name) - except (exceptions.SymbolError, KeyError): + except KeyError as e: + vollog.debug('Type {} references missing Type/Symbol/Enum: {}'.format(name, e)) + return self._UnresolvedTemplate(name) + except exceptions.SymbolError: return self._UnresolvedTemplate(name) raise exceptions.SymbolError("Malformed name: {}".format(name))