Leor3961 / volatility

Automatically exported from code.google.com/p/volatility
0 stars 0 forks source link

vadinfo command issue with vad.Flags #24

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Hey guys, 

I'm getting this error using vadinfo on XP SP2 and SP3 samples. 

$ python volatility.py vadinfo -f mem.vmem
Volatile Systems Volatility Framework 1.4_rc1
************************************************************************
Pid:      4
VAD node @823c4200 Start 00010000 End 00033fff Tag Vad 
Traceback (most recent call last):
  File "volatility.py", line 138, in <module>
    main()
  File "volatility.py", line 129, in main
    command.execute()
  File "/Users/user/Desktop/Volatility-1.4_rc1/volatility/commands.py", line 96, in execute
    func(outfd, data)
  File "/Users/user/Desktop/Volatility-1.4_rc1/plugins/internal/vadinfo.py", line 49, in render_text
    self.write_vad_short(outfd, vad)
  File "/Users/user/Desktop/Volatility-1.4_rc1/plugins/internal/vadinfo.py", line 65, in write_vad_short
    outfd.write("Flags: {0}\n".format(vad.Flags))
  File "/Users/user/Desktop/Volatility-1.4_rc1/volatility/obj.py", line 773, in __getattribute__
    return self.m(attr)
  File "/Users/user/Desktop/Volatility-1.4_rc1/volatility/obj.py", line 758, in m
    parent = self, name = attr)
  File "/Users/user/Desktop/Volatility-1.4_rc1/volatility/obj.py", line 280, in Object
    **kwargs)
  File "/Users/user/Desktop/Volatility-1.4_rc1/plugins/overlays/Basic.py", line 88, in __init__
    obj.NativeType.__init__(self, targetType, offset, vm, parent, **args)
TypeError: __init__() got multiple values for keyword argument 'theType'

Original issue reported on code.google.com by michael.hale@gmail.com on 27 Aug 2010 at 7:22

GoogleCodeExporter commented 8 years ago
Yep, you're quire right.  Since we made the Object wrapper hand in all 
variables by keyword (rather than the first two by position), it's now 
important that all object have the correct signature in their __init__ 
functions (and a couple in the basic overlay didn't).  This should now be fixed 
in r404 (hopefully the revision is found).  5;)

Original comment by mike.auty@gmail.com on 27 Aug 2010 at 7:49