Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ┌─(~/Development/work/volatility3)──────────────(panchajanya@archlinux:pts/0)─┐
- └─(11:04:33 on aarch64-support ✹ ✭)──> python vol.py -f ram6a3.lime linux.pslist.PsList ──(Wed,Apr03)─┘
- Volatility 3 Framework 2.5.2
- ERROR volatility3.framework.automagic.linux: Type LinuxStacker1!long unsigned int references missing Type/Symbol/Enum: 'long unsigned int'
- Traceback (most recent call last):
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 151, in _weak_resolve
- return getattr(self._dict[table_name], get_function)(component_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/intermed.py", line 60, in _delegate_function
- return getattr(self._delegate, name)(*args, **kwargs)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/intermed.py", line 792, in get_type
- return self.natives.get_type(self.name + constants.BANG + type_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/native.py", line 83, in get_type
- _native_type, native_format = self._native_dictionary[type_name]
- ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
- KeyError: 'long unsigned int'
- During handling of the above exception, another exception occurred:
- Traceback (most recent call last):
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 95, in stack
- layer = linux_arch_stacker(
- ^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 135, in intel_stacker
- kaslr_shift, aslr_shift = cls.find_aslr(
- ^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 371, in find_aslr
- init_task.files.cast("long unsigned int")
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/interfaces/objects.py", line 178, in cast
- object_template = self._context.symbol_space.get_type(new_type_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 206, in get_type
- self._resolved[type_name] = self._weak_resolve(SymbolType.TYPE, type_name) # type: ignore
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 153, in _weak_resolve
- raise exceptions.SymbolError(
- volatility3.framework.exceptions.SymbolError: Type LinuxStacker1!long unsigned int references missing Type/Symbol/Enum: 'long unsigned int'
- ERROR volatility3.framework.automagic.linux: Type LinuxStacker1!long unsigned int references missing Type/Symbol/Enum: 'long unsigned int'
- Traceback (most recent call last):
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 151, in _weak_resolve
- return getattr(self._dict[table_name], get_function)(component_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/intermed.py", line 60, in _delegate_function
- return getattr(self._delegate, name)(*args, **kwargs)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/intermed.py", line 792, in get_type
- return self.natives.get_type(self.name + constants.BANG + type_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/native.py", line 83, in get_type
- _native_type, native_format = self._native_dictionary[type_name]
- ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
- KeyError: 'long unsigned int'
- During handling of the above exception, another exception occurred:
- Traceback (most recent call last):
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 95, in stack
- layer = linux_arch_stacker(
- ^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 188, in aarch64_stacker
- kaslr_shift, aslr_shift = cls.find_aslr(
- ^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/linux.py", line 371, in find_aslr
- init_task.files.cast("long unsigned int")
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/interfaces/objects.py", line 178, in cast
- object_template = self._context.symbol_space.get_type(new_type_name)
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 206, in get_type
- self._resolved[type_name] = self._weak_resolve(SymbolType.TYPE, type_name) # type: ignore
- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- File "/home/panchajanya/Development/work/volatility3/volatility3/framework/symbols/__init__.py", line 153, in _weak_resolve
- raise exceptions.SymbolError(
- volatility3.framework.exceptions.SymbolError: Type LinuxStacker1!long unsigned int references missing Type/Symbol/Enum: 'long unsigned int'
- Progress: 100.00 Stacking attempts finished
- Unsatisfied requirement plugins.PsList.kernel.layer_name:
- Unsatisfied requirement plugins.PsList.kernel.symbol_table_name:
- A translation layer requirement was not fulfilled. Please verify that:
- A file was provided to create this layer (by -f, --single-location or by config)
- The file exists and is readable
- The file is a valid memory image and was acquired cleanly
- A symbol table requirement was not fulfilled. Please verify that:
- The associated translation layer requirement was fulfilled
- You have the correct symbol file for the requirement
- The symbol file is under the correct directory or zip file
- The symbol file is named appropriately or contains the correct banner
- Unable to validate the plugin requirements: ['plugins.PsList.kernel.layer_name', 'plugins.PsList.kernel.symbol_table_name']
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement