mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-13 05:07:38 +02:00
code review
This commit is contained in:
@@ -212,8 +212,7 @@ class KernelPDBScanner(interfaces.automagic.AutomagicInterface):
|
||||
start = start_scan_address,
|
||||
page_size = vlayer.page_size,
|
||||
pdb_names = kernel_pdb_names,
|
||||
progress_callback = progress_callback,
|
||||
maximum_invalid_count = constants.windows.PE_MAX_EXTRACTION_SIZE // 0x1000)
|
||||
progress_callback = progress_callback)
|
||||
for kernel in kernels:
|
||||
valid_kernel = test_kernel(physical_layer_name, virtual_layer_name, kernel)
|
||||
if valid_kernel is not None:
|
||||
|
||||
@@ -264,6 +264,14 @@ class PDBUtility(interfaces.configuration.VersionableInterface):
|
||||
|
||||
The UI should always provide the user an opportunity to specify the
|
||||
appropriate types and PDB values themselves
|
||||
Args:
|
||||
layer_name: The layer name to scan
|
||||
page_size: Size of page constant
|
||||
pdb_names: List of pdb names to scan
|
||||
progress_callback: Means of providing the user with feedback during long processes
|
||||
start: Start address to start scanning from the pdb_names
|
||||
end: Minimum address to scan the pdb_names
|
||||
maximum_invalid_count: Amount of pages that can be invalid during scanning before aborting signature search
|
||||
"""
|
||||
min_pfn = 0
|
||||
|
||||
|
||||
Reference in New Issue
Block a user