Skip to content

Commit 26d15a3

Browse files
committed
code review
1 parent afb17df commit 26d15a3

File tree

2 files changed

+9
-2
lines changed

2 files changed

+9
-2
lines changed

volatility3/framework/automagic/pdbscan.py

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -212,8 +212,7 @@ def _method_layer_pdb_scan(self,
212212
start = start_scan_address,
213213
page_size = vlayer.page_size,
214214
pdb_names = kernel_pdb_names,
215-
progress_callback = progress_callback,
216-
maximum_invalid_count = constants.windows.PE_MAX_EXTRACTION_SIZE // 0x1000)
215+
progress_callback = progress_callback)
217216
for kernel in kernels:
218217
valid_kernel = test_kernel(physical_layer_name, virtual_layer_name, kernel)
219218
if valid_kernel is not None:

volatility3/framework/symbols/windows/pdbutil.py

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -264,6 +264,14 @@ def pdbname_scan(cls,
264264
265265
The UI should always provide the user an opportunity to specify the
266266
appropriate types and PDB values themselves
267+
Args:
268+
layer_name: The layer name to scan
269+
page_size: Size of page constant
270+
pdb_names: List of pdb names to scan
271+
progress_callback: Means of providing the user with feedback during long processes
272+
start: Start address to start scanning from the pdb_names
273+
end: Minimum address to scan the pdb_names
274+
maximum_invalid_count: Amount of pages that can be invalid during scanning before aborting signature search
267275
"""
268276
min_pfn = 0
269277

0 commit comments

Comments
 (0)