Merge pull request #1290 from dgmcdona/dgmcdona/windows-unloadedmodul…

…es-traceback Windows: unloadedmodules bugfix
volatilityfoundation · Oct 22, 2024 · 3e6ea7b · 3e6ea7b
2 parents b0a30c0 + e605bee
commit 3e6ea7b
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/volatility3/framework/plugins/windows/unloadedmodules.py b/volatility3/framework/plugins/windows/unloadedmodules.py
@@ -7,7 +7,7 @@
 from typing import List, Iterable
 
 from volatility3.framework import constants
-from volatility3.framework import interfaces, symbols
+from volatility3.framework import interfaces, symbols, exceptions
 from volatility3.framework import renderers
 from volatility3.framework.configuration import requirements
 from volatility3.framework.interfaces import configuration
@@ -132,10 +132,15 @@ def _generator(self):
             kernel.symbol_table_name,
             unloadedmodule_table_name,
         ):
+            try:
+                name = mod.Name.String
+            except exceptions.InvalidAddressException:
+                name = renderers.UnreadableValue()
+
             yield (
                 0,
                 (
-                    mod.Name.String,
+                    name,
                     format_hints.Hex(mod.StartAddress),
                     format_hints.Hex(mod.EndAddress),
                     conversion.wintime_to_datetime(mod.CurrentTime),