trietptm / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
1 stars 2 forks source link

UnicodeEncodeError #476

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
C:\>v hashdump -f converted.raw --profile="VistaSP2x86" -y 0x8bc23420 -s 0x93ff
438 > hash.txt
Volatility Foundation Volatility Framework 2.3
Traceback (most recent call last):
  File "<string>", line 184, in <module>
  File "<string>", line 175, in main
  File "C:\volatility\build\pyi.win32\pyinstaller\out00-PYZ.pyz\volatility.comm
nds", line 113, in execute
  File "C:\volatility\volatility\plugins\registry\lsadump.py", line 98, in rend
r_text
  File "C:\volatility\build\pyi.win32\pyinstaller\out00-PYZ.pyz\volatility.win3
.hashdump", line 323, in dump_hashes
UnicodeEncodeError: 'ascii' codec can't encode character u'\xe9' in position 5:
ordinal not in range(128)

On a french system

Original issue reported on code.google.com by Autolycu...@gmail.com on 6 Feb 2014 at 8:42

GoogleCodeExporter commented 9 years ago
The same with 2.3.1

C:\>v231 hashdump -f converted.raw --profile="VistaSP2x86" -y 0x8bc23420 -s 0x93
fff438 > hash.txt
Volatility Foundation Volatility Framework 2.3.1
Traceback (most recent call last):
  File "<string>", line 184, in <module>
  File "<string>", line 175, in main
  File "C:\volatility\build\pyi.win32\pyinstaller\out00-PYZ.pyz\volatility.comma
nds", line 122, in execute
  File "C:\volatility\volatility\plugins\registry\lsadump.py", line 98, in rende
r_text
  File "C:\volatility\build\pyi.win32\pyinstaller\out00-PYZ.pyz\volatility.win32
.hashdump", line 323, in dump_hashes
UnicodeEncodeError: 'ascii' codec can't encode character u'\xe9' in position 5:
ordinal not in range(128)

Original comment by Autolycu...@gmail.com on 6 Feb 2014 at 9:02

GoogleCodeExporter commented 9 years ago
Hi its a "é" that cause the problem

Original comment by Autolycu...@gmail.com on 6 Feb 2014 at 9:57

GoogleCodeExporter commented 9 years ago
Caracter «é» in UTF-8, its 0xC3A9.
caracter «é» in ISO-8859-1, its 0xE9.

Original comment by Autolycu...@gmail.com on 6 Feb 2014 at 9:58

GoogleCodeExporter commented 9 years ago
Hi, do i make something wrong, i have no answer

Original comment by Autolycu...@gmail.com on 22 Feb 2014 at 10:01

GoogleCodeExporter commented 9 years ago
can i use this method to resolve?

http://code.google.com/p/volatility/source/detail?r=3538

Original comment by Autolycu...@gmail.com on 28 Feb 2014 at 2:47

GoogleCodeExporter commented 9 years ago
Hello, sorry for the delay getting back to you. There's a similar issue 
described here: 

https://code.google.com/p/volatility/issues/detail?id=168#c1

In particular, Volatility has a problem parsing certain unicode characters. 
There's a temporary fix in the issue I linked to above, and we'll keep you 
informed of when we can provide a more permanent fix. 

Original comment by michael.hale@gmail.com on 7 Mar 2014 at 4:25

GoogleCodeExporter commented 9 years ago
merging this issue into issue 168.

Original comment by jamie.l...@gmail.com on 7 Mar 2014 at 4:29

GoogleCodeExporter commented 9 years ago
Hello,

no problem with the delay, i was just wondering if I made something wrong :)

Ok i try the fix and report if it's working

Original comment by Autolycu...@gmail.com on 10 Mar 2014 at 1:43

GoogleCodeExporter commented 9 years ago
i feel very stupid, i know i have to fix in 
http://code.google.com/p/volatility/source/browse/trunk/volatility/win32/hashdum
p.py between line 320 and 324, but i didn't find wich code i have to apply

Original comment by Autolycu...@gmail.com on 11 Mar 2014 at 10:40

GoogleCodeExporter commented 9 years ago
Ok, the problem is with "get_user_name(user)", so I replace it with "dummy", 
and the rest is ok,

Original comment by Autolycu...@gmail.com on 12 Mar 2014 at 6:58