Changeset 242

Timestamp:

04/12/07 11:33:15 (2 years ago)

Author:

kindlund

Message:

Fixed Registry code so that each Registry $object can be serialized to memory or disk.
The only gotcha, is that $object→closeFiles() must be called before calling any Storable function on it, since Storable can't serialize any open file handle.

Files:

• honeyclient/trunk/lib/HoneyClient/Agent/Integrity/Registry.pm (modified) (10 diffs)

honeyclient/trunk/lib/HoneyClient/Agent/Integrity/Registry.pm

@@ -87 +87 @@
-=head1 DESCRIPTION
-
-Agent
+Integrity
-the Windows OS registry hives for any changes that may occur, while
-instrumenting a target application.
@@ -102 +102 @@
-use warnings;
-use Carp ();
-
-# Traps signals, allowing END: blocks to perform cleanup.
-#use sigtrap qw(die untrapped normal-signals error-signals);
-
-# Include Global Configuration Processing Library
@@ -445 +442 @@
-    _checkpoint_parsers => { }, 
-
-    # A hashtable of file names, where the hash key is the file parser
-    # and the hash value is the file name.
-    # (For internal use only.)
-    _filenames => { },
-
-    # A hashtable of current key info objects, where the hash key is the
-    # file parser and the hash value is the info object.
@@ -487 +479 @@
-        $parser = $self->{_baseline_parsers}->{$hive};
-        if (defined($parser)) {
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-            }
-            delete($self->{_filenames}->{$parser});
-            delete($self->{_baseline_parsers}->{$hive});
-        }
-        $parser = $self->{_checkpoint_parsers}->{$hive};
-        if (defined($parser)) {
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-            }
-            delete($self->{_filenames}->{$parser});
-            delete($self->{_checkpoint_parsers}->{$hive});
-        }
@@ -547 +541 @@
-
-        $parser_collection->{$hive} = $parser;
-        $self->{_filenames}->{$parser} = $fname;
-    }
-}
@@ -618 +611 @@
-    if (!defined($self->{_currentKeys}->{$parser})) {
-        $LOG->fatal("Error: Unable to read registry keys from '" .
-self->{_filenames}->{$parser}
+parser->getFilename()
-        Carp::croak("Error: Unable to read registry keys from '" .
-self->{_filenames}->{$parser}
+parser->getFilename()
-    }
-
@@ -686 +679 @@
-
-    # Get the corresponding file names.
-elf->{_filenames}->{$src_parser}
-self->{_filenames}->{$tgt_parser}
+rc_parser->getFilename()
+tgt_parser->getFilename()
-
-    my $fname_tmp = tmpnam(); 
@@ -1470 +1463 @@
-        $before_parser = HoneyClient::Agent::Integrity::Registry::Parser->init(input_file   => $args{'before_file'},
-                                                                               index_groups => 1);
-        $self->{_filenames}->{$before_parser} = $args{'before_file'};
-    }
-
@@ -1480 +1472 @@
-        $after_parser = HoneyClient::Agent::Integrity::Registry::Parser->init(input_file   => $args{'after_file'},
-                                                                              index_groups => 1);
-        $self->{_filenames}->{$after_parser} = $args{'after_file'};
-    }
-
@@ -1561 +1552 @@
-    $LOG->debug(Dumper(\%args));
-
-
+
+
+
+
+
+
+
+
+
-}
-