diff --git a/volatility/plugins/linux/check_idt.py b/volatility/plugins/linux/check_idt.py index 7a92ff32..e8d9a7e3 100644 --- a/volatility/plugins/linux/check_idt.py +++ b/volatility/plugins/linux/check_idt.py @@ -63,7 +63,7 @@ class linux_check_idt(linux_common.AbstractLinuxCommand): idt_addr = ent.Address - if not idt_addr in sym_addrs: + if idt_addr != 0 and not idt_addr in sym_addrs: yield(i, idt_addr, 1) else: yield(i, idt_addr, 0)