{"action":"closed","issue":{"url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/105","labels_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/105/labels{/name}","comments_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/105/comments","events_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/105/events","html_url":"https://github.com/volatilityfoundation/volatility/issues/105","id":45847699,"number":105,"title":"linux_apihooks: TypeError: hex() argument can't be converted to hex","user":{"login":"fpusersuggest","id":6614719,"avatar_url":"https://avatars.githubusercontent.com/u/6614719?v=3","gravatar_id":"","url":"https://api.github.com/users/fpusersuggest","html_url":"https://github.com/fpusersuggest","followers_url":"https://api.github.com/users/fpusersuggest/followers","following_url":"https://api.github.com/users/fpusersuggest/following{/other_user}","gists_url":"https://api.github.com/users/fpusersuggest/gists{/gist_id}","starred_url":"https://api.github.com/users/fpusersuggest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fpusersuggest/subscriptions","organizations_url":"https://api.github.com/users/fpusersuggest/orgs","repos_url":"https://api.github.com/users/fpusersuggest/repos","events_url":"https://api.github.com/users/fpusersuggest/events{/privacy}","received_events_url":"https://api.github.com/users/fpusersuggest/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/volatilityfoundation/volatility/labels/linux/mac","name":"linux/mac","color":"5319e7"}],"state":"closed","locked":false,"assignee":{"login":"atcuno","id":414569,"avatar_url":"https://avatars.githubusercontent.com/u/414569?v=3","gravatar_id":"","url":"https://api.github.com/users/atcuno","html_url":"https://github.com/atcuno","followers_url":"https://api.github.com/users/atcuno/followers","following_url":"https://api.github.com/users/atcuno/following{/other_user}","gists_url":"https://api.github.com/users/atcuno/gists{/gist_id}","starred_url":"https://api.github.com/users/atcuno/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/atcuno/subscriptions","organizations_url":"https://api.github.com/users/atcuno/orgs","repos_url":"https://api.github.com/users/atcuno/repos","events_url":"https://api.github.com/users/atcuno/events{/privacy}","received_events_url":"https://api.github.com/users/atcuno/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2014-10-15T09:44:44Z","updated_at":"2015-07-06T16:29:27Z","closed_at":"2015-07-06T16:29:27Z","body":"Hi, after the last closed issue about linux_apihooks I have new error:\r\n\r\n\r\n\r\n    $ ./vol.py linux_apihooks\r\n    Volatility Foundation Volatility Framework 2.4\r\n    Pid     Name             Hook VMA                                 Hook Symbol              Hooked Address Type  Hook Address Hook Library\r\n    ------- ---------------- ---------------------------------------- ------------------------ -------------- ----- ------------ ------------\r\n    Traceback (most recent call last):\r\n      File \"./vol.py\", line 192, in <module>\r\n        main()\r\n      File \"./vol.py\", line 183, in main\r\n        command.execute()\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/linux/common.py\", line 62, in execute\r\n        commands.Command.execute(self, *args, **kwargs)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/commands.py\", line 127, in execute\r\n        func(outfd, data)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/linux/apihooks.py\", line 55, in render_text\r\n        for hook_desc, sym_name, addr, hook_type, hook_addr, hookfuncdesc in task.apihook_info():\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/overlays/linux/linux.py\", line 1371, in apihook_info\r\n        is_hooked = self._is_api_hooked(addr, elf.obj_vm)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/overlays/linux/linux.py\", line 1296, in _is_api_hooked\r\n        data = proc_as.read(sym_addr, 24)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/addrspace.py\", line 276, in read\r\n        return self._read(addr, length, False)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/addrspace.py\", line 243, in _read\r\n        paddr = self.translate(position)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/addrspace.py\", line 371, in translate\r\n        return self.vtop(vaddr)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/addrspaces/intel.py\", line 130, in vtop\r\n        pgd = self.get_pgd(vaddr)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/addrspaces/intel.py\", line 109, in get_pgd\r\n        return self.read_long_phys(pgd_entry)\r\n      File \"/home/user/VOLATILITY/volatility/volatility/plugins/addrspaces/intel.py\", line 148, in read_long_phys\r\n        return obj.NoneObject(\"Unable to read_long_phys at \" + hex(addr))\r\n    TypeError: hex() argument can't be converted to hex\r\n    "}}