diff --git a/volatility/framework/interfaces/objects.py b/volatility/framework/interfaces/objects.py index b62ef95cd..150f99078 100644 --- a/volatility/framework/interfaces/objects.py +++ b/volatility/framework/interfaces/objects.py @@ -93,7 +93,10 @@ class ObjectInterface(validity.ValidityRoutines, metaclass = ABCMeta): """Writes the new value into the format at the offset the object currently resides at""" def cast(self, new_type_name, **additional): - """Returns a new object at the offset and from the layer that the current object inhabits""" + """Returns a new object at the offset and from the layer that the current object inhabits + + .. note:: If new type name does not include a symbol table, the symbol table for the current object is used + """ # TODO: Carefully consider the implications of casting and how it should work if constants.BANG not in new_type_name: symbol_table = self.vol['type_name'].split(constants.BANG)[0] diff --git a/volatility/framework/objects/__init__.py b/volatility/framework/objects/__init__.py index 32a4e41d0..884651588 100644 --- a/volatility/framework/objects/__init__.py +++ b/volatility/framework/objects/__init__.py @@ -110,8 +110,10 @@ class Bytes(PrimitiveObject, bytes): class String(PrimitiveObject, str): """Primitive Object that handles string values - length: specifies the maximum possible length that the string could hold within memory - (note: for multibyte characters, this will not be the maximum length of the string) + :param max_length: specifies the maximum possible length that the string could hold within memory + (for multibyte characters, this will not be the maximum length of the string) + :type max_length: int + """ _struct_type = str