/* * ModSecurity, http://www.modsecurity.org/ * Copyright (c) 2015 - 2023 Trustwave Holdings, Inc. (http://www.trustwave.com/) * * You may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * If any of the files related to licensing are missing or if you have any * other questions related to licensing please contact Trustwave Holdings, Inc. * directly using the email address security@modsecurity.org. * */ #include "src/collection/backend/in_memory-per_process.h" #include "src/collection/backend/collection_data.h" #ifdef __cplusplus #include #include #include #include #include #endif #include #include "modsecurity/variable_value.h" #include "src/utils/regex.h" #include "src/utils/string.h" namespace modsecurity { namespace collection { namespace backend { InMemoryPerProcess::InMemoryPerProcess(const std::string &name) : Collection(name) { this->reserve(1000); pthread_mutex_init(&m_lock, NULL); } InMemoryPerProcess::~InMemoryPerProcess() { this->clear(); pthread_mutex_destroy(&m_lock); } void InMemoryPerProcess::store(std::string key, std::string value) { pthread_mutex_lock(&m_lock); this->emplace(key, value); pthread_mutex_unlock(&m_lock); } bool InMemoryPerProcess::storeOrUpdateFirst(const std::string &key, const std::string &value) { if (updateFirst(key, value) == false) { store(key, value); } return true; } bool InMemoryPerProcess::updateFirst(const std::string &key, const std::string &value) { pthread_mutex_lock(&m_lock); auto range = this->equal_range(key); for (auto it = range.first; it != range.second; ++it) { it->second.setValue(value); pthread_mutex_unlock(&m_lock); return true; } pthread_mutex_unlock(&m_lock); return false; } void InMemoryPerProcess::del(const std::string& key) { pthread_mutex_lock(&m_lock); this->erase(key); pthread_mutex_unlock(&m_lock); } void InMemoryPerProcess::delIfExpired(const std::string& key) { pthread_mutex_lock(&m_lock); // Double check the status while within the mutex auto iter = this->find(key); if ((iter != this->end()) && (iter->second.isExpired())) { this->erase(key); } pthread_mutex_unlock(&m_lock); } void InMemoryPerProcess::setExpiry(const std::string& key, int32_t expiry_seconds) { pthread_mutex_lock(&m_lock); auto range = this->equal_range(key); for (auto it = range.first; it != range.second; ++it) { it->second.setExpiry(expiry_seconds); pthread_mutex_unlock(&m_lock); return; } // We allow an expiry value to be set for a key that has not (yet) had a value set. auto iter = this->emplace(key, CollectionData()); iter->second.setExpiry(expiry_seconds); pthread_mutex_unlock(&m_lock); } void InMemoryPerProcess::resolveSingleMatch(const std::string& var, std::vector *l) { std::list expiredVars; auto range = this->equal_range(var); for (auto it = range.first; it != range.second; ++it) { if (it->second.isExpired()) { expiredVars.push_back(it->first); } else if (it->second.hasValue() == false) { // No-op. A non-expired expiry exists for the key but there is no actual value } else { l->push_back(new VariableValue(&m_name, &it->first, &it->second.getValue())); } } for (const auto& expiredVar : expiredVars) { delIfExpired(expiredVar); } } void InMemoryPerProcess::resolveMultiMatches(const std::string& var, std::vector *l, variables::KeyExclusions &ke) { size_t keySize = var.size(); l->reserve(15); std::list expiredVars; if (keySize == 0) { for (auto &i : *this) { if (ke.toOmit(i.first)) { continue; } if (i.second.isExpired()) { expiredVars.push_back(i.first); } else if (i.second.hasValue() == false) { // No-op. A non-expired expiry exists for the key but there is no actual value } else { l->insert(l->begin(), new VariableValue(&m_name, &i.first, &i.second.getValue())); } } } else { auto range = this->equal_range(var); for (auto it = range.first; it != range.second; ++it) { if (ke.toOmit(var)) { continue; } if (it->second.isExpired()) { expiredVars.push_back(it->first); } else if (it->second.hasValue() == false) { // No-op. A non-expired expiry exists for the key but there is no actual value } else { l->insert(l->begin(), new VariableValue(&m_name, &var, &it->second.getValue())); } } } for (const auto& expiredVar : expiredVars) { delIfExpired(expiredVar); } } void InMemoryPerProcess::resolveRegularExpression(const std::string& var, std::vector *l, variables::KeyExclusions &ke) { //if (var.find(":") == std::string::npos) { // return; //} //if (var.size() < var.find(":") + 3) { // return; //} //std::string col = std::string(var, 0, var.find(":")); //std::string name = std::string(var, var.find(":") + 2, // var.size() - var.find(":") - 3); //size_t keySize = col.size(); Utils::Regex r(var, true); std::list expiredVars; for (const auto& x : *this) { //if (x.first.size() <= keySize + 1) { // continue; //} //if (x.first.at(keySize) != ':') { // continue; //} //if (std::string(x.first, 0, keySize) != col) { // continue; //} //std::string content = std::string(x.first, keySize + 1, // x.first.size() - keySize - 1); int ret = Utils::regex_search(x.first, r); if (ret <= 0) { continue; } if (ke.toOmit(x.first)) { continue; } if (x.second.isExpired()) { expiredVars.push_back(x.first); } else if (x.second.hasValue() == false) { // No-op. A non-expired expiry exists for the key but there is no actual value } else { l->insert(l->begin(), new VariableValue(&m_name, &x.first, &x.second.getValue())); } } for (const auto& expiredVar : expiredVars) { delIfExpired(expiredVar); } } std::unique_ptr InMemoryPerProcess::resolveFirst( const std::string& var) { auto range = equal_range(var); for (auto it = range.first; it != range.second; ++it) { if (it->second.isExpired()) { delIfExpired(it->second.getValue()); } else if (it->second.hasValue() == false) { // No-op. A non-expired expiry exists for the key but there is no actual value } else { return std::unique_ptr(new std::string(it->second.getValue())); } } return NULL; } } // namespace backend } // namespace collection } // namespace modsecurity