add a comment about the pool header class type matching the kernel

2026-09-02 05:08:48 +02:00 · 2020-08-22 22:27:46 +01:00
parent 09ca2ecb40
commit f0bc947bba
1 changed files with 1 additions and 0 deletions
@@ -448,6 +448,7 @@ class PoolScanner(plugins.PluginInterface):
            else:
                pool_header_json_filename = "poolheader-x86"

+            # set the class_type to match the normal WindowsKernelIntermedSymbols
            is_vista_or_later = cls.is_vista_or_later(context, symbol_table)
            if is_vista_or_later:
                class_type = extensions.pool.POOL_HEADER_VISTA