libddwaf-src 2.1.0

Source distribution and build integration for DataDog/libddwaf
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

// Unless explicitly stated otherwise all files in this repository are
// dual-licensed under the Apache-2.0 License or BSD-3-Clause License.
//
// This product includes software developed at Datadog (https://www.datadoghq.com/).
// Copyright 2021 Datadog, Inc.

#pragma once

#include <string>
#include <string_view>
#include <unordered_map>
#include <utility>
#include <vector>

#include "configuration/common/configuration.hpp"
#include "configuration/common/configuration_collector.hpp"
#include "configuration/common/raw_configuration.hpp"
#include "ruleset_info.hpp"

#include "re2.h"

namespace ddwaf {

class configuration_manager {
public:
    configuration_manager() = default;
    ~configuration_manager() = default;
    configuration_manager(configuration_manager &&) = delete;
    configuration_manager(const configuration_manager &) = delete;
    configuration_manager &operator=(configuration_manager &&) = delete;
    configuration_manager &operator=(const configuration_manager &) = delete;

    bool add_or_update(const std::string &path, raw_configuration &root, ruleset_info &info);
    bool remove(const std::string &path);

    std::pair<const configuration_spec &, change_set> consolidate();

    std::vector<std::string_view> get_config_paths() const
    {
        std::vector<std::string_view> paths;
        paths.reserve(configs_.size());
        for (const auto &[path, _] : configs_) { paths.emplace_back(path); }
        return paths;
    }

    std::vector<std::string_view> get_filtered_config_paths(re2::RE2 &filter) const
    {
        std::vector<std::string_view> paths;
        paths.reserve(configs_.size());
        for (const auto &[path, _] : configs_) {
            const std::string_view ref(path.data(), path.size());
            if (!filter.Match(ref, 0, path.size(), re2::RE2::UNANCHORED, nullptr, 0)) {
                continue;
            }
            paths.emplace_back(path);
        }
        return paths;
    }

protected:
    void remove_config(const configuration_change_spec &cfg);

    // This function returns:
    //  - true: when the configuration was fully or partially loaded, this
    //          will also be the return value when the configuration is empty or
    //          inconsequential, i.e. no element can be loaded due to compat
    //  - false: when no elements within the configuration could be loaded due
    //           to errors. This implies that the configuration must be rejected
    static bool load(
        raw_configuration::map &root, configuration_collector &collector, ruleset_info &info);

    std::unordered_map<std::string, configuration_change_spec> configs_;
    configuration_spec global_config_;
    change_set changes_{change_set::none};
};

} // namespace ddwaf