Address feedback

volatility3/framework/plugins/windows/orphan_kernel_threads.py

@@ -1,4 +1,4 @@
-# This file is Copyright 2019 Volatility Foundation and licensed under the Volatility Software License 1.0
+# This file is Copyright 2024 Volatility Foundation and licensed under the Volatility Software License 1.0
 # which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
 #
 
@@ -48,8 +48,9 @@ class Threads(thrdscan.ThrdScan):
         """Yields thread objects of kernel threads that do not map to a module
 
         Args:
-            kernel
-
+            cls
+            context: the context to operate upon
+            module_name: name of the module to use for scanning
         Returns:
             A generator of thread objects of orphaned threads
         """
@@ -61,6 +62,7 @@ class Threads(thrdscan.ThrdScan):
             context, layer_name, symbol_table
         )
 
+        # FIXME - use a proper constant once established
         # used to filter out smeared pointers
         if symbols.symbol_table_is_64bit(context, symbol_table):
             kernel_start = 0xFFFFF80000000000

volatility3/framework/plugins/windows/thrdscan.py

@@ -48,8 +48,7 @@ class ThrdScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface)
 
         Args:
             context: The context to retrieve required elements (layers, symbol tables) from
-            layer_name: The name of the layer on which to operate
-            symbol_table: The name of the table containing the kernel symbols
+            module_name: Name of the module to use for scanning
 
         Returns:
               A list of _ETHREAD objects found by scanning memory for the "Thre" / "Thr\\xE5" pool signatures