forked from Velocidex/velociraptor
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathscope.go
94 lines (76 loc) · 2.37 KB
/
scope.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
/*
Velociraptor - Dig Deeper
Copyright (C) 2019-2024 Rapid7 Inc.
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published
by the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
*/
// A cache which is stored in the VQL scope.
package vql
import (
"sync"
config_proto "www.velocidex.com/golang/velociraptor/config/proto"
"www.velocidex.com/golang/velociraptor/constants"
"www.velocidex.com/golang/velociraptor/utils"
"www.velocidex.com/golang/vfilter"
)
const (
CACHE_VAR = "$cache"
)
type ScopeCache struct {
cache map[string]interface{}
mu sync.Mutex
}
func (self *ScopeCache) Set(key string, value interface{}) {
self.mu.Lock()
defer self.mu.Unlock()
self.cache[key] = value
}
func getCache(scope vfilter.Scope) *ScopeCache {
any_obj, pres := scope.GetContext(CACHE_VAR)
if !pres {
return NewScopeCache()
}
cache, ok := any_obj.(*ScopeCache)
if !ok {
return NewScopeCache()
}
return cache
}
func CacheGet(scope vfilter.Scope, key string) interface{} {
cache := getCache(scope)
defer scope.SetContext(CACHE_VAR, cache)
cache.mu.Lock()
defer cache.mu.Unlock()
return cache.cache[key]
}
func CacheSet(scope vfilter.Scope, key string, value interface{}) {
cache := getCache(scope)
defer scope.SetContext(CACHE_VAR, cache)
cache.mu.Lock()
defer cache.mu.Unlock()
cache.cache[key] = value
}
// The server config is sensitive and so it is *not* stored in the
// scope vars and so can not be accessed by the VQL query
// directly. VQL plugins can access it via this method.
func GetServerConfig(scope vfilter.Scope) (*config_proto.Config, bool) {
config_any := CacheGet(scope, constants.SCOPE_SERVER_CONFIG)
if utils.IsNil(config_any) {
return nil, false
}
config, ok := config_any.(*config_proto.Config)
return config, ok
}
func NewScopeCache() *ScopeCache {
return &ScopeCache{
cache: make(map[string]interface{}),
}
}