volatility icon indicating copy to clipboard operation
volatility copied to clipboard

MacOS convert.py dwarfdump failure - State machine broken! level 0!

Open snoozesecurity opened this issue 4 years ago • 2 comments

Unfortunately convert.py is failing to work on a MacOS 10.15.1 (19B77a) system. I am able to capture the dwarfdump just fine, but I have this issue when attempting to use convert.py against it:

converting file State machine broken! level 0! /Library/Developer/KDKs/KDK_10.15.1_19B77a.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/DWARF/kernel: file format Mach-O 64-bit x86-64

snoozesecurity avatar Apr 16 '20 03:04 snoozesecurity

any help ? I'm also seeing same error. Thanks

siftuser avatar Dec 05 '20 10:12 siftuser

I'll throw my hat in the ring too - I cannot convert the dwarfdump from macOS 10.15.6 - I get the same error as @snoozesecurity

dmoore44 avatar Apr 26 '21 02:04 dmoore44