Skip to content

Commit 276e695

Browse files
committed
Linux: update maple tree extension comment around the seen set.
1 parent 7fe086f commit 276e695

File tree

1 file changed

+7
-2
lines changed
  • volatility3/framework/symbols/linux/extensions

1 file changed

+7
-2
lines changed

volatility3/framework/symbols/linux/extensions/__init__.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -314,8 +314,13 @@ def _parse_maple_tree_node(
314314
):
315315
"""Recursively parse Maple Tree Nodes and yield all non empty slots"""
316316

317-
# create seen set if it does not exist, e.g. on the first call into
318-
# this recursive function.
317+
# Create seen set if it does not exist, e.g. on the first call into this recursive function. This
318+
# must be None or an existing set of addresses for MTEs that have already been processed or that
319+
# should otherwise be ignored. If parsing from the root node for example this should be None on the
320+
# first call. If you needed to parse all nodes downwards from part of the tree this should still be
321+
# None. If however you wanted to parse from a node, but ignore some parts of the tree below it then
322+
# this could be populated with the addresses of the nodes you wish to ignore.
323+
319324
if seen == None:
320325
seen = set()
321326

0 commit comments

Comments
 (0)