X f3! dZddlZddlmZmZddlmZddlmZmZm Z m Z m Z m Z m Z mZmZmZmZe ddefdefgZeZGd d e ZGd d e ZGddej.e ZGddeZGddeZedZeeeeeeeeeeejeeeefZ e eee fZ!eeegefZ"Gddee Z#y)a#All plugins output a TreeGrid object which must then be rendered (either by a GUI, or as text output, html output or in some other form. This module defines both the output format (:class:`TreeGrid`) and the renderer interface which can interact with a TreeGrid to produce suitable output. N)abstractmethodABCMeta)abc) AnyCallableClassVar GeneratorList NamedTupleOptionalTypeVarTypeTupleUnionColumnnametypec\eZdZdZddeeeddfdZedeefdZ ed dZ y) RendererzLClass that defines the interface that all output renderers must support.Noptionsreturncy)z5Accepts an options object to configure the renderers.N)selfrs \/home/panchajanya/Development/work/volatility3/volatility3/framework/interfaces/renderers.py__init__zRenderer.__init__&cy)z$Returns a list of rendering options.Nrrs rget_render_optionszRenderer.get_render_options*rrcy)zMTakes a grid object and renders it based on the object's preferences.Nr)rgrids rrenderzRenderer.render.rrN)r#TreeGridrN) __name__ __module__ __qualname____doc__r r RenderOptionrrr!r$rrrrr"s[Dl); <DD3D$633rr) metaclassc<eZdZUdZeed<edeedefdZ y) ColumnSortKeyT ascendingvaluesrcy)zOThe key function passed as a sort key to the TreeGrid's visit function.Nr)rr0s r__call__zColumnSortKey.__call__7rrN) r'r(r)r/bool__annotations__rr rr2rrrr.r.4s0IttCySrr.ceZdZdZeededfdZeedefdZ eede dfdZ eede fdZ ed ded edd fd Zy ) TreeNodecy)zInitializes the TreeNode.Nr)rpathtreegridparentr0s rrzTreeNode.__init__>rrr BaseTypescy)zSReturns the list of values from the particular node, based on column index.Nrr s rr0zTreeNode.valuesArrcy)zReturns a path identifying string. This should be seen as opaque by external classes, Parsing of path locations based on this string are not guaranteed to remain stable. Nrr s rr8z TreeNode.pathGrrcy)z-Returns the parent node of this node or None.Nrr s rr:zTreeNode.parentQrrcy)z*Return the path depth of the current node.Nrr s r path_depthzTreeNode.path_depthVrrr8addedNcy)zUpdates the path based on the addition or removal of a node higher up in the tree. This should only be called by the containing TreeGrid and expects to only be called for affected nodes. Nr)rr8rAs r path_changedzTreeNode.path_changed[rr)F)r'r(r)rpropertyrr r0strr8r r:intr@r3rCrrrr6r6=s([) c  <,<<9C99  T d  rr6ceZdZdZy)BaseAbsentValuezCClass that represents values which are not present for some reason.N)r'r(r)r*rrrrHrHesMrrHc 4eZdZdZgdZ d dedededdfdZy) DisassemblyzbA class to indicate that the bytes provided should be disassembled (based on the architecture))intelintel64armarm64dataoffset architecturerNc||_d|_||jvr||_t|ts t d||_y)NzOffset must be an integer type)rOrQpossible_architectures isinstancerF TypeErrorrP)rrOrPrQs rrzDisassembly.__init__osF   466 6 ,D &#&<= = r)rrL) r'r(r)r*rSbytesrFrErrrrrJrJis<#BAJ  #& :=   rrJ_Typec eZdZUdZeeeeeje fZ e e e d<dededdfdZeededefd Ze dd ed ed edeefd ZeedefdZeedeefdZededeefdZ edede e!dffdZ"edededefdZ#edefdZ$ededefdZ%e ddeed ed e&de'ddf dZ(y)r&aClass providing the interface for a TreeGrid (which contains TreeNodes) The structure of a TreeGrid is designed to maintain the structure of the tree in a single object. For this reason each TreeNode does not hold its children, they are managed by the top level object. This leaves the Nodes as simple data carries and prevents them being used to manipulate the tree as a whole. This is a data structure, and is not expected to be modified much once created. Carrying the children under the parent makes recursion easier, but then every node is its own little tree and must have all the supporting tree functions. It also allows for a node to be present in several different trees, and to create cycles. base_typescolumns generatorrNcy)aConstructs a TreeGrid object using a specific set of columns. The TreeGrid itself is a root element, that can have children but no values. The TreeGrid does *not* contain any information about formatting, these are up to the renderers and plugins. Args: columns: A list of column tuples made up of (name, type). generator: An iterable containing row for a tree grid, each row contains a indent level followed by the values for each column in order. Nr)rrZr[s rrzTreeGrid.__init__rrtextcy)z3Method used to sanitize column names for TreeNodes.Nr)r]s r sanitize_namezTreeGrid.sanitize_namerrfunctioninitial_accumulatorfail_on_errorscy)zPopulates the tree by consuming the TreeGrid's construction generator Func is called on every node, so can be used to create output on demand. This is equivalent to a one-time visit. Nr)rr`rarbs rpopulatezTreeGrid.populaterrcy)z_Indicates that population has completed and the tree may now be manipulated separately.Nrr s r populatedzTreeGrid.populatedrrcy)z;Returns the available columns and their ordering and types.Nrr s rrZzTreeGrid.columnsrrnodecy)z3Returns the subnodes of a particular node in order.Nrrrhs rchildrenzTreeGrid.childrenrr.cy)z\Returns the values for a particular node. The values returned are mutable, Nrrjs rr0zTreeGrid.valuesrr descendantcy)z?Returns true if descendent is a child, grandchild, etc of node.Nr)rrhrms r is_ancestorzTreeGrid.is_ancestorrrcy)z&Returns the maximum depth of the tree.Nrr s r max_depthzTreeGrid.max_depthrrc|jS)z,Returns the path depth of a particular node.)r@)rhs rr@zTreeGrid.path_depthsrsort_keycy)aVisits all the nodes in a tree, calling function on each one. function should have the signature function(node, accumulator) and return new_accumulator If accumulators are not needed, the function must still accept a second parameter. The order of that the nodes are visited is always depth first, however, the order children are traversed can be set based on a sort_key function which should accept a node's values and return something that can be sorted to receive the desired order (similar to the sort/sorted key). If node is None, then the root node is used. Args: node: The initial node to be visited function: The visitor to apply to the nodes under the initial node initial_accumulator: An accumulator that allows data to be transferred between one visitor call to the next sort_key: Information about the sort order of columns in order to determine the ordering of results Nr)rrhr`rarss rvisitzTreeGrid.visitrr)NNTr%))r'r(r)r*rFrEfloatrVdatetimerJrYrrr4 ColumnsTyper r staticmethodrr_VisitorSignaturerr3r ExceptionrdrDrfr rrZr6rkr;r0rorqr@rWr.rurrrr&r&s       #J    d  BCBCBB&*#'#  "  !    )     #4##JfJJBXB$x.BB 8 in(=  NNhN4NN5355c #'  x  # #       rr&)$r*rwrrr collectionstypingrrrr r r r r rrrrErr+rr.Sequencer6objectrHrJrWrFrvrVr;rxrzr&rrrrs'     H}vsm< = $g% s||w% PNfN&*  IIKK     5i() Xu-u45p vp r