From 3919c909bc07fae0b40b4ec35b44fbc10081c992 Mon Sep 17 00:00:00 2001 From: Frank Gomulka Date: Thu, 15 Jul 2021 15:35:00 -0400 Subject: [PATCH] Comment and Pydoc changes --- volatility3/framework/symbols/windows/extensions/pool.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/volatility3/framework/symbols/windows/extensions/pool.py b/volatility3/framework/symbols/windows/extensions/pool.py index 667acc739..5353fc30b 100644 --- a/volatility3/framework/symbols/windows/extensions/pool.py +++ b/volatility3/framework/symbols/windows/extensions/pool.py @@ -25,16 +25,15 @@ class POOL_HEADER(objects.StructType): """Carve an object or data structure from a kernel pool allocation Args: - type_name: the data structure type name - native_layer_name: the name of the layer where the data originally lived - object_type: the object type (executive kernel objects only) + constraint: a PoolConstraint object used to get the pool allocation header object + use_top_down: for delineating how a windows version finds the size of the object body kernel_symbol_table: in case objects of a different symbol table are scanned for + native_layer_name: the name of the layer where the data originally lived Returns: An object as found from a POOL_HEADER """ - # TODO: I wasn't quite sure what to do with these values, so I just set them here for now. type_name = constraint.type_name executive = constraint.object_type is not None