cape: linux: handle no environ

capa/features/extractors/cape/models.py

@@ -324,8 +324,8 @@ class Process(FlexibleModel):
     # module_path: str
     # first_seen: str
     calls: list[Call]
-    environ: dict[str, str]
     threads: list[int] | None = None  # this can be None for CAPE for Linux, which doesn't track threads.
+    environ: dict[str, str] = Field(default_factory=dict)  # type: ignore
 
 
 """

capa/features/extractors/cape/process.py

@@ -49,6 +49,9 @@ def extract_environ_strings(ph: ProcessHandle) -> Iterator[tuple[Feature, Addres
     """
     process: Process = ph.inner
 
+    if not process.environ:
+        return
+
     for value in (value for value in process.environ.values() if value):
         yield String(value), ph.address