X fddlZddlZddlmZmZmZmZmZmZddl m Z m Z m Z ddl mZddlmZej"eZGdde j(j*ZGdd ZGd d e j(j*Zy) N)AnyDictIOListOptionalUnion) constants exceptions interfaces) requirements) resourcesc(eZdZdZ ddej j dededede e ee fddf fd Z e defd Ze defd Zdd ed edefdZdded ededefdZdedefdZedeej.j0fdZxZS)BufferDataLayerz_A DataLayer class backed by a buffer in memory, designed for testing and swift data access.Ncontext config_pathnamebuffermetadatareturnc:t|||||||_y)Nrrrr)super__init___buffer)selfrrrrr __class__s W/home/panchajanya/Development/work/volatility3/volatility3/framework/layers/physical.pyrzBufferDataLayer.__init__s) 4(   c2t|jdz S)3Returns the largest available address in the space.)lenrrs rmaximum_addresszBufferDataLayer.maximum_address s4<< 1$$rcyz4Returns the smallest available address in the space.rr#s rminimum_addresszBufferDataLayer.minimum_address%roffsetlengthct|j|cxkxr|jkncxr.|j||zdz cxkxr|jkScS)+Returns whether the offset is valid or not.r!)boolr(r$rr*r+s ris_validzBufferDataLayer.is_valid*s]  F Bd.B.B B T$$!(;St?S?SS  S  raddresspadc|j||sT|}|j|cxkr|jkrnn|jdz}tj|j |d|j |||zS)zReads the data from the buffer.r!'Offset outside of the buffer boundaries)r0r(r$r InvalidAddressExceptionrr)rr1r+r2invalid_addresss rreadzBufferDataLayer.read1su}}Wf-%O##gE1E1EE"&"6"6":44 ?,U ||Gg&677rdatacj|jd||z|j|t|zdz|_y)z#Writes the data from to the buffer.N)rr")rr1r8s rwritezBufferDataLayer.write<s8 LL' "T )DLL3t99L9N,O O rc4tjdddgS)Nrz!The direct bytes to interact withF)r descriptionoptional)r BytesRequirementclss rget_requirementsz BufferDataLayer.get_requirementsBs%  ) )?   rNr!F)__name__ __module__ __qualname____doc__r rContextInterfacestrbytesrrrrpropertyintr$r(r.r0r7r: classmethodr configurationRequirementInterfacerA __classcell__rs@rrrs.2 ##44      4S>*   %%% s C   8C 8 84 8E 8 S   j&>&>&S&S!T  rrceZdZddZddZy) DummyLockNcyrBr'r#s r __enter__zDummyLock.__enter__O rcyrBr'rtypevalue tracebacks r__exit__zDummyLock.__exit__RrWrrN)rErFrGrVr]r'rrrTrTNs   rrTc eZdZdZ ddej j dededee ee fddf fd Z e defd Z e dee fd Ze defd Ze defd Zdd ededefdZdd edededefdZd ededdfdZde ee ffdZddZddZedeej:j<fdZxZ S) FileLayerz/a DataLayer backed by a file on the filesystem.Nrrrrrc|t|||||d|_|jd|_t j |_d|_d|_ d|_ t|_ tjtjj k(rt#j$|_ |j&}y)NrFlocation)rr_write_warningconfig _locationr ResourceAccessor _accessor_file__size_maximum_addressrT_lockr PARALLELISM Parallelism Threading threadingLock_file)rrrrr_rs rrzFileLayer.__init__Ys 4(  $Z0"335)- $( /37@{  I$9$9$C$C C")DJ JJrc|jS)z3Returns the location on which this Layer abstracts.)rer#s rrbzFileLayer.locationqs~~rcd}|jxs&|jj|j||_|jS)zeProperty to prevent the initializer storing an unserializable open file (for context cloning)rb)rhrgopenre)rmodes rrqzFileLayer._filevs8 kkNT^^%8%8%N {{rc|jr |jS|j5|jj}|jj dd|jj|_|jj ||j dz |_ddd|jS#1swY|jSxYw)r rr!N)rjrkrqtellseekri)rorigs rr$zFileLayer.maximum_addresss  (( ( ZZ 3::??$D JJOOAq !*DJ JJOOD !$(JJND !  3 $$$  3 $$$s BB>>Ccyr&r'r#s rr(zFileLayer.minimum_addressr)rr*r+c|dkr tdt|j|cxkxr|jkncxr.|j||zdz cxkxr|jkScS)r-rzLength must be positiver!) ValueErrorr.r(r$r/s rr0zFileLayer.is_validsp Q;67 7  F Bd.B.B B T$$!(;St?S?SS  S  rr2cF|j||sT|}|j|cxkr|jkrnn|jdz}tj|j |d|j 5|jj||jj|}dddt|krU|r|d|t|z zz }|Stj|j |t|zd|j zdz|S#1swYnxYw)z)Reads from the file at offset for length.r!r4Nz)Could not read sufficient bytes from the z file) r0r(r$r r5rrkrqr{r7r")rr*r+r2r6r8s rr7zFileLayer.reads }}VV,$O##fD0D0DD"&"6"6":44 ?,U  ZZ + JJOOF #::??6*D + t9v 6CI#566 !88IISY&?$))KgU   + +s 37DD r8cP|jjs6|js)d|_tj d|j y|j |t|sd|}|j|cxkr|jkrnn|jdz}tj|j |d|j zdz|j5|jj||jj|dddy#1swYyxYw)zfWrites to the file. This will technically allow writes beyond the extent of the file Tz"Try to write to unwritable layer: Nr!zData segment outside of the z file boundaries)rqwritablercvollogwarningrr0r"r(r$r r5rkr{r:)rr*r8r6s rr:zFileLayer.writes zz""$&&&*#!CDII;OP}}VSY/$O##fD0D0DD"&"6"6":44 .:=OO  ZZ # JJOOF # JJ  T " # # #s 7DD%c(d|_|jS)zDo not store the open _file_ attribute, our property will ensure the file is open when needed. This is necessary for multi-processing N)rh__dict__r#s r __getstate__zFileLayer.__getstate__s  }}rc8|jjy)zCloses the file handle.N)rqcloser#s rdestroyzFileLayer.destroys rc$|jyrB)rrYs rr]zFileLayer.__exit__s  rc2tjddgS)NrbF)rr=)r StringRequirementr?s rrAzFileLayer.get_requirementss..JOPPrrBrCrDr^)!rErFrGrHr rrIrJrrrrrLrbrrqrMr$r(r.r0rKr7r:rrr]rNrrOrPrArQrRs@rr`r`Vsk9.2 ##44  4S>*   0#r#w % % % s C  3$54#C#u##.d38nQj&>&>&S&S!TQQrr`)loggingrotypingrrrrrrvolatility3.frameworkr r r #volatility3.framework.configurationr volatility3.framework.layersr getLoggerrErlayersDataLayerInterfacerrTr`r'rrrsp77CC<2   8 $< j''::< ~  HQ !!44HQr