handles backtrace

[volatilityfoundation]

handles backtrace

[gleeda]

problem is an invalid character in object_type (encoded in utf8 so it wouldn't fail below):

0xfffffadf99d28fe0    468             0x29e0           0x100003 � 

There are a couple of things we can do, like:

diff --git a/volatility/plugins/overlays/windows/windows.py b/volatility/plugins/overlays/windows/windows.py
index 96d2ce0..0374bb9 100644
--- a/volatility/plugins/overlays/windows/windows.py
+++ b/volatility/plugins/overlays/windows/windows.py
@@ -846,7 +846,7 @@ class _OBJECT_HEADER(obj.CType):
         """Return the object's type as a string"""
         type_obj = obj.Object("_OBJECT_TYPE", self.Type, self.obj_native_vm)

-        return type_obj.Name.v()
+        return str(type_obj.Name or '') 

     def is_valid(self):
         if not obj.CType.is_valid(self):

or

diff --git a/volatility/plugins/overlays/windows/windows.py b/volatility/plugins/overlays/windows/windows.py
index 96d2ce0..0374bb9 100644
--- a/volatility/plugins/overlays/windows/windows.py
+++ b/volatility/plugins/overlays/windows/windows.py
@@ -846,7 +846,7 @@ class _OBJECT_HEADER(obj.CType):
         """Return the object's type as a string"""
         type_obj = obj.Object("_OBJECT_TYPE", self.Type, self.obj_native_vm)

-        return type_obj.Name.v()
+        return type_obj.Name.v().encode("ascii", "replace")

     def is_valid(self):
         if not obj.CType.is_valid(self):

They both give off: "?" instead of the offending character.... which do we prefer? The first method is used in a lot of other places.