search

Nicebear / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

Volatility Profile Creation Error for Mac OS x 10.9.3 x64 #506

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
 I have encountered an error when trying to create the vtypes file for Mac OS X 10.9.3. The dwarfdump file was successfully converted to the Linux style output, however when attempting to create the vtypes file from this file the following error messages are received:

$ python tools/mac/convert.py converted-10.9.3.dwarfdump > 10.9.3.vtypes

Traceback (most recent call last):
  File "tools/mac/convert.py", line 659, in <module>
    main()
  File "tools/mac/convert.py", line 656, in main
    parse_dwarf()     
  File "tools/mac/convert.py", line 390, in parse_dwarf
    parser.feed_line(line)
  File "tools/mac/convert.py", line 125, in feed_line
    self.process_statement(**parsed)
  File "tools/mac/convert.py", line 263, in process_statement
    off = int(data['AT_data_member_location'])
KeyError: 'AT_data_member_location'

Original issue reported on code.google.com by freebs...@gmail.com on 27 Jun 2014 at 7:13

GoogleCodeExporter commented 8 years ago 
Followed up via email.

Original comment by michael.hale@gmail.com on 29 Jun 2014 at 5:17