search

tthtlc / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

*** Failed to import volatility.plugins.overlays.linux.linux (ValueError: need more than 2 values to unpack) #461

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
> What steps will reproduce the problem?

1. Create profile for some android and put them in current directory
2. vol.py --plugins=. --info 2>&1 | head | vol.py.info

> What is the expected output? What do you see instead?

recognized new profile

> What version of the product are you using? On what operating system?

1. Linux Ubuntu 12.04
2. Python 2.7.3

> Please provide any additional information below.

Original issue reported on code.google.com by vitaly.v...@gmail.com on 14 Nov 2013 at 4:18

Attachments:

GoogleCodeExporter commented 9 years ago

Original comment by jamie.l...@gmail.com on 14 Nov 2013 at 9:14

GoogleCodeExporter commented 9 years ago 
Can you copy/paste the steps you used to create the profile?

Original comment by atc...@gmail.com on 14 Nov 2013 at 9:17

GoogleCodeExporter commented 9 years ago 
see attached file

Original comment by vitaly.v...@gmail.com on 15 Nov 2013 at 11:03

Attachments:

GoogleCodeExporter commented 9 years ago 
could you move the profile under volatility/plugins/overlays/linux and then get 
rid of the --plugins option and run again? 

Also, is it possible to send me your profile?

Original comment by atc...@gmail.com on 15 Nov 2013 at 2:05

GoogleCodeExporter commented 9 years ago 
> could you move the profile under volatility/plugins/overlays/linux and then 
get rid of the --plugins option and run again? 

I have got same result.

> Also, is it possible to send me your profile?

Under first post there is attached android.zip. It's my profile.

Original comment by vitaly.v...@gmail.com on 15 Nov 2013 at 2:08

GoogleCodeExporter commented 9 years ago 
It seems your nm is producing corrupt lines (no address information). I updated 
our parsing code to skip these lines:

http://code.google.com/p/volatility/source/detail?r=3554

Can you please svn update, run 'make clean' (assuming on Linux/Mac), and run 
vol again?

Original comment by atc...@gmail.com on 15 Nov 2013 at 2:23

GoogleCodeExporter commented 9 years ago 
Thanks,

now vol see my profiles without problems

\\wbr Vitaly Ch

Original comment by vitaly.v...@gmail.com on 15 Nov 2013 at 2:51

GoogleCodeExporter commented 9 years ago 
Great, thanks for the quick reply!

Original comment by atc...@gmail.com on 15 Nov 2013 at 2:52