admin/volatilityfoundation-volatility
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility synced 2026-06-08 18:04:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix a UnicodeEncodeError when dlldump prints module names

Browse Source
This commit is contained in:
iMHLv2
2012-07-07 23:24:27 +00:00
parent ecd60b4767
commit 8bd862b2aa
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/dlldump.py
+2 -2
View File
@@ -96,7 +96,7 @@ class DLLDump(procdump.ProcExeDump):
if ps_ad.is_valid_address(mod_base):
process_offset = ps_ad.vtop(proc.obj_offset)
dump_file = "module.{0}.{1:x}.{2:x}.dll".format(proc.UniqueProcessId, process_offset, mod_base)
outfd.write("Dumping {0}, Process: {1}, Base: {2:8x} output: {3}\n".format(mod_name, proc.ImageFileName, mod_base, dump_file))
outfd.write("Dumping {0}, Process: {1}, Base: {2:8x} output: {3}\n".format(str(mod_name or ''), proc.ImageFileName, mod_base, dump_file))
of = open(os.path.join(self._config.DUMP_DIR, dump_file), 'wb')
try:
for chunk in self.get_image(outfd, ps_ad, mod_base):
@@ -110,4 +110,4 @@ class DLLDump(procdump.ProcExeDump):
outfd.write("You can use -u to disable this check.\n")
of.close()
else:
outfd.write("Cannot dump {0}@{1}: ImageBase at {2:8x} is paged\n".format(proc.ImageFileName, mod_name, mod_base))
outfd.write("Cannot dump {0}@{1}: ImageBase at {2:8x} is paged\n".format(proc.ImageFileName, str(mod_name or ''), mod_base))