This file is indexed.

/usr/include/aff4/zip.h is in libaff4-dev 0.24.post1-3.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
/*
Copyright 2014 Google Inc. All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use
this file except in compliance with the License.  You may obtain a copy of the
License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed
under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied.  See the License for the
specific language governing permissions and limitations under the License.
*/

#ifndef     SRC_ZIP_H_
#define     SRC_ZIP_H_

#include "aff4_errors.h"
#include "aff4_io.h"
#include "data_store.h"
#include <string.h>
#include <zlib.h>
#include <list>

using std::list;

/* This is the largest file size which may be represented by a regular
   zip file without using Zip64 extensions.
*/
#define  ZIP64_LIMIT ((1LL << 31)-1)


/** These are ZipFile structures */
struct EndCentralDirectory {
  uint32_t magic = 0x6054b50;
  uint16_t number_of_this_disk = 0;
  uint16_t disk_with_cd = 0;
  uint16_t total_entries_in_cd_on_disk;
  uint16_t total_entries_in_cd;
  int32_t size_of_cd = -1;
  int32_t offset_of_cd = -1;
  uint16_t comment_len = 0;
}__attribute__((packed));


/** As we parse these fields we populate the oracle */
struct CDFileHeader {
  uint32_t magic = 0x2014b50;
  uint16_t version_made_by = 0x317;
  uint16_t version_needed = 0x14;
  uint16_t flags = 0x8;
  uint16_t compression_method;
  uint16_t dostime;
  uint16_t dosdate;
  uint32_t crc32_cs;
  int32_t compress_size = -1;
  int32_t file_size = -1;
  uint16_t file_name_length;
  uint16_t extra_field_len = 32;
  uint16_t file_comment_length = 0;
  uint16_t disk_number_start = 0;
  uint16_t internal_file_attr = 0;
  uint32_t external_file_attr = 0644 << 16L;
  int32_t relative_offset_local_header = -1;
}__attribute__((packed));


struct ZipFileHeader {
  uint32_t magic = 0x4034b50;
  uint16_t version = 0x14;
  uint16_t flags = 0x8;
  uint16_t compression_method;
  uint16_t lastmodtime;
  uint16_t lastmoddate;
  uint32_t crc32_cs;
  uint32_t compress_size;
  uint32_t file_size;
  uint16_t file_name_length;
  uint16_t extra_field_len;
}__attribute__((packed));


struct Zip64FileHeaderExtensibleField {
  uint16_t header_id = 1;
  uint16_t data_size = 28;
  uint64_t file_size;
  uint64_t compress_size;
  uint64_t relative_offset_local_header;
  uint32_t disk_number_start = 0;
}__attribute__((packed));

struct Zip64EndCD {
  uint32_t magic = 0x06064b50;
  uint64_t size_of_header = 0;
  uint16_t version_made_by = 0x2d;
  uint16_t version_needed = 0x2d;
  uint32_t number_of_disk = 0;
  uint32_t number_of_disk_with_cd = 0;
  uint64_t number_of_entries_in_volume;
  uint64_t number_of_entries_in_total;
  uint64_t size_of_cd;
  uint64_t offset_of_cd;
}__attribute__((packed));


struct Zip64CDLocator {
  uint32_t magic = 0x07064b50;
  uint32_t disk_with_cd = 0;
  uint64_t offset_of_end_cd;
  uint32_t number_of_disks = 1;
}__attribute__((packed));


#define ZIP_STORED 0
#define ZIP_DEFLATE 8

class ZipFile;

/**
 * The ZipFileSegment is created by the ZipFile.CreateMember() method and is
 * given to callers to write on. When this object is destroyed, the member will
 * be flushed to the zip file.
 *
 * Note that in AFF4 we typically write smallish segments, hence its ok to keep
 * this segment in memory before flushing it.
 *
 */
class ZipFileSegment: public StringIO {
  friend class ZipFile;

 protected:
  URN owner_urn;                        /**< The zip file who owns us. */

  // If this is set, we are backing a backing store for reading. Otherwise we
  // use our own StringIO buffers.
  URN _backing_store_urn;

  // The start offset for the backing store.
  aff4_off_t _backing_store_start_offset = -1;
  size_t _backing_store_length = 0;

 public:
  /**
   * A convenience function to add a new segment to an existing ZipFile volume.
   *
   * @param resolver
   * @param segment_urn
   * @param volume_urn
   *
   * @return An AFF4ScopedPtr reference to the new segment or NULL if the
   * segment could not be created.
   */
  static AFF4ScopedPtr<ZipFileSegment> NewZipFileSegment(
      DataStore *resolver, const URN &segment_urn, const URN &volume_urn);

  explicit ZipFileSegment(DataStore *resolver);
  ZipFileSegment(string filename, ZipFile &zipfile);

  virtual AFF4Status LoadFromURN();
  virtual AFF4Status LoadFromZipFile(ZipFile &owner);

  virtual AFF4Status Flush();
  virtual AFF4Status Truncate();

  virtual string Read(size_t length);
  virtual int Write(const char *data, int length);

  virtual aff4_off_t Size();

  virtual AFF4Status WriteStream(
      AFF4Stream *source, ProgressContext *progress = nullptr);

  using AFF4Stream::Write;
};


/**
 * A simple struct which represents information about a member in the zip
 * file. We use this to recreate the central directory when updating the
 * ZipFile.
 *
 */
class ZipInfo {
 public:
  ZipInfo();

  int compression_method = ZIP_STORED;
  uint64_t compress_size = 0;
  uint64_t file_size = 0;
  string filename;
  off_t local_header_offset = 0;
  int crc32_cs = 0;
  int lastmoddate = 0;
  int lastmodtime = 0;

  // Where the zip file header is located.
  off_t file_header_offset = -1;

  AFF4Status WriteFileHeader(AFF4Stream &output);
  AFF4Status WriteCDFileHeader(AFF4Stream &output);
};

/**
 * The main AFF4 ZipFile based container.

 This container can be opened for reading or writing.

 Example usage:

~~~~~~~~~~~~~~~~~~~~~{.c}
  // First create a backing file for writing the ZipFile onto.
  unique_ptr<AFF4Stream> file = FileBackedObject::NewFileBackedObject(
      "test.zip", "w");

  // The backing file ownership is given to the zip.
  unique_ptr<AFF4Volume> zip = ZipFile::NewZipFile(std::move(file));

  // The CreateMember() method returns a writable stream.
  unique_ptr<AFF4Stream> segment = zip->CreateMember("Foobar.txt");
  segment->Write("I am another segment!");
~~~~~~~~~~~~~~~~~~~~~

The will result in a zip file:

~~~~~~~~~~~~~~~~~~~~~
Archive:  src/test.zip
aff4:/8811872a-3fab-45b0-be31-daad6ab4fa70
  Length      Date    Time    Name
---------  ---------- -----   ----
      180  2015-01-18 18:26   information.yaml
      259  2015-01-18 18:26   information.turtle
       15  2015-01-18 18:26   Foobar.txt
---------                     -------
      454                     3 files
~~~~~~~~~~~~~~~~~~~~~

Note that when the volume is destroyed, it will automatically update
the *information.turtle* file if needed.

 *
 */

class ZipFile: public AFF4Volume {
  friend class ZipFileSegment;

 private:
  AFF4Status write_zip64_CD(AFF4Stream &backing_store);

 protected:
  int directory_number_of_entries = -1;
  URN backing_store_urn;

  /// The global offset of all zip file references from the real file
  /// references. This might be non-zero if the zip file was appended to another
  /// file.
  int global_offset = 0;

  /**
   * Parse the central directory in the Zip File.
   *
   * @param backing_store
   *
   * @return
   */
  AFF4Status parse_cd();


  /**
   * Load the information.turtle file in this volume into the resolver.
   *
   *
   * @return
   */
  AFF4Status LoadTurtleMetadata();

 public:
  explicit ZipFile(DataStore *resolver);

  /**
   * Creates a new ZipFile object.
   *
   * @param backing_store_urn: An URN of an object to write the zip file
   *                onto. Note that we first read and preserve the objects in
   *                the existing volume and just append new objects to it.
   *
   * @return A new ZipFile reference.
   */
  static AFF4ScopedPtr<ZipFile> NewZipFile(
      DataStore *resolver, URN backing_store_urn);

  // Generic volume interface.
  virtual AFF4ScopedPtr<AFF4Stream> CreateMember(URN child);

  /**
   * Creates a new ZipFileSegment object. The new object is automatically added
   * to the resolver cache and therefore the caller does not own it (it is
   * always owned by the resolver cache).
   *
   * @param filename
   *
   * @return
   */
  AFF4ScopedPtr<ZipFileSegment> CreateZipSegment(string filename);
  AFF4ScopedPtr<ZipFileSegment> OpenZipSegment(string filename);

  // Supports a stream interface.
  // An efficient interface to add a new archive member.
  //
  // Args:
  //   member_urn: The new member URN to be added.
  //   stream: A file-like object (with read() method) that generates data to
  //     be written as the member.
  //   compression_method: How to compress the member.
  virtual AFF4Status StreamAddMember(URN child, AFF4Stream &stream,
                                     int compression_method,
                                     ProgressContext *progress = nullptr);

  // Load the ZipFile from its URN and the information in the oracle.
  virtual AFF4Status LoadFromURN();

  virtual AFF4Status Flush();

  // All the members of the zip file. Used to reconstruct the central
  // directory. Note these store the members as the ZipFile sees them. The
  // Segment URNs must be constructed from _urn_from_member_name(). Adding new
  // objects to this must use the member names using _member_name_for_urn(URN).
  unordered_map<string, unique_ptr<ZipInfo>> members;
};

#endif   // SRC_ZIP_H_