search

log2timeline / plaso

Super timeline all the things
https://plaso.readthedocs.io
Apache License 2.0
1.73k stars 352 forks source link

No name attribute in value for the shutdown plugin #59

Closed kiddinn closed 9 years ago

kiddinn commented 9 years ago

2014-11-21 16:12:09,441 WARNING PID:12103 [winreg] Unable to process file: type: OS location: /xp-tdungan-c-drive.E01 type: EWF type: TSK, inode: 3324, location: /WINDOWS/system32/config/system.sav

with error: 'NoneType' object has no attribute 'name'. 2014-11-21 16:12:09,441 ERROR PID:12103 'NoneType' object has no attribute 'name' Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/plaso/engine/worker.py", line 123, in _ParseFileEntryWithParser parser_object.Parse(self._parser_context, file_entry) File "/usr/lib/python2.7/dist-packages/plaso/parsers/winreg.py", line 328, in Parse codepage=parser_context.codepage, parser_chain=parser_chain) File "/usr/lib/python2.7/dist-packages/plaso/parsers/winreg_plugins/interface.py", line 206, in Process parser_chain=parser_chain, **kwargs) File "/usr/lib/python2.7/dist-packages/plaso/parsers/winreg_plugins/shutdown.py", line 58, in GetEntries text_dict['Description'] = shutdown_value.name

kiddinn commented 9 years ago

fixed in db9b2638809a47bb8fa55708c38f574b4392e25d