WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Comment and Pydoc changes

Browse Source
This commit is contained in:
Frank Gomulka
2021-09-19 16:04:17 -04:00
parent 54203e0253
commit 3919c909bc
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/windows/extensions/pool.py
+3 -4
View File
@@ -25,16 +25,15 @@ class POOL_HEADER(objects.StructType):
"""Carve an object or data structure from a kernel pool allocation
Args:
type_name: the data structure type name
native_layer_name: the name of the layer where the data originally lived
object_type: the object type (executive kernel objects only)
constraint: a PoolConstraint object used to get the pool allocation header object
use_top_down: for delineating how a windows version finds the size of the object body
kernel_symbol_table: in case objects of a different symbol table are scanned for
native_layer_name: the name of the layer where the data originally lived
Returns:
An object as found from a POOL_HEADER
"""
# TODO: I wasn't quite sure what to do with these values, so I just set them here for now.
type_name = constraint.type_name
executive = constraint.object_type is not None