Skip to content

changed PROCESSOR_ARCHITECTURE(enum.Enum).AARCH64 = 12#50

Open
mbKaleb wants to merge 1 commit into
skelsec:mainfrom
mbKaleb:fix-processor-architecture-enum-aarch64
Open

changed PROCESSOR_ARCHITECTURE(enum.Enum).AARCH64 = 12#50
mbKaleb wants to merge 1 commit into
skelsec:mainfrom
mbKaleb:fix-processor-architecture-enum-aarch64

Conversation

@mbKaleb

@mbKaleb mbKaleb commented Jul 6, 2026

Copy link
Copy Markdown

Problem

The PROCESSOR_ARCHITECTURE enum in minidump/streams/SystemInfoStream.py defines:

AARCH64 = 0x8003 #ARM64

This value is incorrect. Windows reports ARM64 processor architecture as 12, not 0x8003. As a result, parsing any minidump captured on a Windows-on-ARM system (e.g. Windows 11 ARM64, including under emulation via QEMU/UTM on Apple Silicon) fails with:

ValueError: 12 is not a valid PROCESSOR_ARCHITECTURE

This happens during MINIDUMP_SYSTEM_INFO.parse(), before any actual thread/module/memory data can be read — so the entire dump becomes unparseable, not just the sysinfo section.

Fix

One-line change:

AARCH64 = 12 #ARM64

References

Win32_Processor class — Architecture property, Microsoft Learn — confirms ARM64 = 12.

Testing

Reproduced and fixed against a real minidump captured from a deadlocked Java process running inside a Windows 11 ARM64 VM (QEMU/UTM on Apple Silicon). Before the fix: minidump --all raised ValueError immediately. After the fix: parses successfully, including --sysinfo, --threads, and --all.

minidump-output

@mbKaleb
mbKaleb force-pushed the fix-processor-architecture-enum-aarch64 branch from 4afd73c to 82b2c0f Compare July 6, 2026 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant