volatility
volatility copied to clipboard
MacOS convert.py dwarfdump failure - State machine broken! level 0!
Unfortunately convert.py is failing to work on a MacOS 10.15.1 (19B77a) system. I am able to capture the dwarfdump just fine, but I have this issue when attempting to use convert.py against it:
converting file State machine broken! level 0! /Library/Developer/KDKs/KDK_10.15.1_19B77a.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/DWARF/kernel: file format Mach-O 64-bit x86-64
any help ? I'm also seeing same error. Thanks
I'll throw my hat in the ring too - I cannot convert the dwarfdump from macOS 10.15.6 - I get the same error as @snoozesecurity