X ff7dZddlZddlZddlZddlmZmZmZmZddl m Z ddl m Z m Z ddlmZddlmZddlmZej(eZGd d e j.j0Zd ee j4j6d eefd Zy)aPThis module attempts to automatically stack layers. This automagic module fulfills :class:`~volatility3.framework.interfaces.configuration.TranslationLayerRequirement` that are not already fulfilled, by attempting to stack as many layers on top of each other as possible. The base/lowest layer is derived from the "automagic.general.single_location" configuration path. Layers are then attempting in likely height order, and once a layer successfully stacks on top of the existing layers, it is removed from the possible choices list (so no layer type can exist twice in the layer stack). N)ListOptionalTupleType) framework) interfaces constants)construct_layers) requirements)physicalceZdZdZdZdfd Z ddejjde dejjd e jdeee f d Zdejjde dejjd e jddf d Ze ddejjd e d eeej(j*d e jfdZdeeej(j*fdZedejjde dejjdee deee e ff dZedeejjfdZxZS) LayerStackeraBuilds up layers in a single stack. This class mimics the volatility 2 style of stacking address spaces. It builds up various layers based on separate :class:`~volatility3.framework.interfaces.automagic.StackerLayerInterface` classes. These classes are built up based on a `stack_order` class variable each has. This has a high priority to provide other automagic modules as complete a context/configuration tree as possible. Upon completion it will re-call the :class:`~volatility3.framework.automagic.construct_layers.ConstructionMagic`, so that any stacked layers are actually constructed and added to the context. returnNc2t||i|d|_yN)super__init___cached)selfargskwargs __class__s Y/home/panchajanya/Development/work/volatility3/volatility3/framework/automagic/stacker.pyrzLayerStacker.__init__*s $)&) context config_path requirementprogress_callbackctjtjd|j ||sy|j |j |j }|r#tjd|t|S|jr|jjdds td|j||||| |ddy)z)Runs the automagic over the configurable.volatility3.framework.layersNz5Unable to run LayerStacker, unsatisfied requirement: single_locationzBUnable to run LayerStacker, single_location parameter not provideddzStacking attempts finished)r import_filessysmodules unsatisfiedrrvolloginfolistconfigget ValueErrorstack)rrrrrr's r__call__zLayerStacker.__call__.s s{{+IJK&&w <&&t||T5E5EF  KKG }U  $ ${{$++//2CT"JT  7K6GH  ( c#? @rc|jr^|j\}}|j||||g}|r1|\}} |jj||||j|<yd|_|j } |jj dd} |j jd} tjj|d| } | | jtjj| d<tj| | | }| j||j| | |j|}||j| |||}|r|\}}|jj|| j |j!t#j$|tjj|j&d}|||||jj |d|jj)|f|_t*j-d|j.t*j-d|y) awStacks the various layers and attaches these to a specific requirement. Args: context: Context on which to operate config_path: Configuration path under which to store stacking data requirement: Requirement that should have layers stacked on it progress_callback: Function to provide callback progress Nr" FileLayerr.locationConstructionMagicz physical_layer maximum_address: zStacked layers: )rfind_suitable_requirementsr+mergecloner,layersfree_layer_namer configuration path_joinr r1 add_layer stack_layercreate_stackers_listbuild_configurationr r3rbranchr(debugmaximum_address)rrrrrtop_layer_name subconfigresultappropriate_config_path layer_name new_contextr2current_layer_namecurrent_config_pathphysical_layerstacked_layerspathlayer constructors rr.zLayerStacker.stackPsL" <<(, %NI44kN3CF6<3'$$% '~~11$=w~~?T?T@    .~/M/M.N O   ''789r initial_layer stack_setc :d}|g}|6ttjtjj }|D]?}t |tjj r(td|jd|rd}d}d} |D]} | } tjtjd| j| j|||}|r[|jj|tjtjd|j d| jnd}|r1| r/|j g|z}|j }d}|j5| |r|S#t"$r} t$j&j)| j+d } tjtj,d t/| tjtj0d j3| Yd} ~ d} ~ wwxYw) aStacks as many possible layers on top of the initial layer as can be done. WARNING: This modifies the context provided and may pollute it with unnecessary layers Recommended use is to: 1. Pass in context.clone() instead of context 2. When provided the layer list, choose the desired layer 3. Build the configuration using layer.build_configuration() 4. Merge the configuration into the original context with context.config.merge() 5. Call Construction magic to reconstruct the layers from just the configuration Args: context: The context on which to operate initial_layer: The name of the initial layer within the context stack_set: A list of StackerLayerInterface objects in the order they should be stacked progress_callback: A function to report progress during the process Returns: A list of layer names that exist in the provided context, stacked in order (highest to lowest) TNzStacker z- is not a descendent of StackerLayerInterfaceFzAttempting to stack using zStacked z using )chainzException during stacking:  )r*rclass_subclassesr automagicStackerLayerInterface issubclass TypeError__name__r(logr LOGLEVEL_VVr.r7r;name Exception tracebackTracebackExceptionfrom_exceptionformat LOGLEVEL_VVVstr LOGLEVEL_VVVVjoinremove) clsrrOrPrstackedrK stacker_item new_layer stacker_clsstackerexcp fulltraces rr<zLayerStacker.stack_layers8'  **:+?+?+U+UVI& LlJ,@,@,V,VW|4455bc  GIK( %-NJJ!--4[5I5I4JK!( g}FW XI 00; %11&y~~&6gk>R>R=ST ! 4 ["+..!1N!B )   -GH#! N ) < < K K!f4f(JJ!..5c$i[AJJy66 )8LMM NsBE44 H=BHHcttjtjj d}|j jdg}t|r+g}|D]"}|j|vs|j|$|}|S)z>Creates the list of stackers to use based on the config optionc|jSr stack_orderxs rz3LayerStacker.create_stackers_list..s !--rkeystackers) sortedrrTrrUrVr+r,lenrYappend)rrP stacker_listrDrls rr=z!LayerStacker.create_stackers_lists  & &z';';'Q'Q R' {{z26 | F$ +##|3MM'* +IrrKc8tjj||j}t |t j r|j||rj|jj|d}|D])}||j|<|j||r%||fcS|r||j|<n,|j|=n||jj|dfS|j jD]\}} |j||| |} | s| cSy)aLooks for translation layer requirements and attempts to apply the stacked layers to it. If it succeeds it returns the configuration path and layer name where the stacked nodes were spliced into the tree. Returns: A tuple of a configuration path and layer name for the top of the stacked layers or None if suitable requirements are not found N) rr9r:r\ isinstancer TranslationLayerRequirementr'r+r,itemsr4) rgrrrrKchild_config_pathoriginal_settingrFreq_namereqrDs rr4z'LayerStacker.find_suitable_requirementss# '44>> ))  k<#K#K L&&w <#*>>#5#56G#N "0=J8BGNN#45&227KH0*<<= $8HGNN#45'89('..*<*<=NPT*UUU(55;;= MHc33*CF   rcbtjdddtjdddgS)Nr"z+Specifies a base location on which to stackT)r\ descriptionoptionalrxzList of stackers)r URIRequirementListRequirement)rgs rget_requirementszLayerStacker.get_requirements-s=  ' '&I   ( (-?$   r)rNr)NN)rY __module__ __qualname____doc__priorityrrrContextInterfacercr9RequirementInterfacer ProgressCallbackrrr/r. classmethodrrUrVr<r=rr4r __classcell__)rs@rrrs H9= ##44   --BB  %55  $s)  DR:##44R:R: --BB R: %55 R:  R:h MQ8< L##44LLZ11GGHI L %55 LL\ d:''==> ?"&##44&& --BB & S & %S/ " &&P  j&>&>&S&S!T    rrpluginrcb|jjdd}tjtj dg}t tjtjjdD],}||jvr|j|j.|S)zVIdentifies the stackers that should be run, based on the plugin (and thus os) provided.r!c|jSrrqrss rruz$choose_os_stackers..Fs ammrrv)rsplitrr$r%r&ryrTrrUrVexclusion_listr{rY)rplugin_first_levelrDrls rchoose_os_stackersr<s**005a83;;'EFG F"":#7#7#M#MN #( !7!7 7  g&&' ( Mr)rloggingr%r^typingrrrr volatility3rvolatility3.frameworkrr volatility3.framework.automagicr #volatility3.framework.configurationr volatility3.framework.layersr getLoggerrYr(rUAutomagicInterfacerpluginsPluginInterfacercrrrrs ..!7<<1   8 $^ :''::^ B tJ$6$6$F$FGDQTIr