mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-17 20:35:40 +02:00
extend _fix_sym_table's docstring
This commit is contained in:
@@ -925,6 +925,15 @@ class ModuleExtract(interfaces.configuration.VersionableInterface):
|
||||
module: extensions.module,
|
||||
) -> Optional[bytes]:
|
||||
"""
|
||||
Args:
|
||||
context: The context on which to operate.
|
||||
vmlinux_name: The name of the kernel module.
|
||||
original_sections: Dict of module section addresses and names.
|
||||
section_sizes: Dict of module section addresses and sizes.
|
||||
sym_type_name: ELF symbol type name (should be one of "Elf64_Sym" or "Elf32_Sym").
|
||||
st_fmt: "struct"-like unpack format string (should be one of "<Q" or "<I").
|
||||
module: The Linux "module" object we're currently parsing.
|
||||
|
||||
This function implements the most painful part of the reconstruction
|
||||
|
||||
The symbols in .symtab are broken/mangled during loading.
|
||||
|
||||
Reference in New Issue
Block a user