AbstractAttribute.java

Go to the documentation of this file.

/*
 * Sleuth Kit Data Model
 *
 * Copyright 2021 Basis Technology Corp.
 * Contact: carrier <at> sleuthkit <dot> org
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.sleuthkit.datamodel;
 
import java.util.Arrays;
import java.util.Objects;

public abstract class AbstractAttribute {
 
        private static final char[] HEX_ARRAY = "0123456789ABCDEF".toCharArray();
 
        private final BlackboardAttribute.Type attributeType;
 
        private final int valueInt;
        private final long valueLong;
        private final double valueDouble;
        private final String valueString;
        private final byte[] valueBytes;
 
        private SleuthkitCase sleuthkitCase;

        public AbstractAttribute(BlackboardAttribute.Type attributeType, int valueInt) {
                if (attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.INTEGER) {
                        throw new IllegalArgumentException("Type mismatched with value type");
                }
                this.attributeType = attributeType;
                this.valueInt = valueInt;
                this.valueLong = 0;
                this.valueDouble = 0;
                this.valueString = "";
                this.valueBytes = new byte[0];
        }

        public AbstractAttribute(BlackboardAttribute.Type attributeType, long valueLong) {
                if (attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.LONG
                                && attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DATETIME) {
                        throw new IllegalArgumentException("Type mismatched with value type");
                }
                this.attributeType = attributeType;
                this.valueInt = 0;
                this.valueLong = valueLong;
                this.valueDouble = 0;
                this.valueString = "";
                this.valueBytes = new byte[0];
        }

        public AbstractAttribute(BlackboardAttribute.Type attributeType, double valueDouble) {
                if (attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DOUBLE) {
                        throw new IllegalArgumentException("Type mismatched with value type");
                }
                this.attributeType = attributeType;
                this.valueInt = 0;
                this.valueLong = 0;
                this.valueDouble = valueDouble;
                this.valueString = "";
                this.valueBytes = new byte[0];
        }

        public AbstractAttribute(BlackboardAttribute.Type attributeType, String valueString) {
                if (attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.STRING
                                && attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.JSON) {
                        throw new IllegalArgumentException("Type mismatched with value type");
                }
                this.attributeType = attributeType;
                this.valueInt = 0;
                this.valueLong = 0;
                this.valueDouble = 0;
                if (valueString == null) {
                        this.valueString = "";
                } else {
                        this.valueString = replaceNulls(valueString).trim();
                }
                this.valueBytes = new byte[0];
        }

        public AbstractAttribute(BlackboardAttribute.Type attributeType, byte[] valueBytes) {
                if (attributeType.getValueType() != BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.BYTE) {
                        throw new IllegalArgumentException("Type mismatched with value type");
                }
                this.attributeType = attributeType;
                this.valueInt = 0;
                this.valueLong = 0;
                this.valueDouble = 0;
                this.valueString = "";
                if (valueBytes == null) {
                        this.valueBytes = new byte[0];
                } else {
                        this.valueBytes = valueBytes;
                }
        }

        AbstractAttribute(BlackboardAttribute.Type attributeType,
                        int valueInt, long valueLong, double valueDouble, String valueString, byte[] valueBytes,
                        SleuthkitCase sleuthkitCase) {
 
                this.attributeType = attributeType;
                this.valueInt = valueInt;
                this.valueLong = valueLong;
                this.valueDouble = valueDouble;
                if (valueString == null) {
                        this.valueString = "";
                } else {
                        this.valueString = replaceNulls(valueString).trim();
                }
                if (valueBytes == null) {
                        this.valueBytes = new byte[0];
                } else {
                        this.valueBytes = valueBytes;
                }
                this.sleuthkitCase = sleuthkitCase;
        }

        public String getDisplayString() {
                switch (attributeType.getValueType()) {
                        case STRING:
                                return getValueString();
                        case INTEGER:
                                if (attributeType.getTypeID() == BlackboardAttribute.ATTRIBUTE_TYPE.TSK_READ_STATUS.getTypeID()) {
                                        if (getValueInt() == 0) {
                                                return "Unread";
                                        } else {
                                                return "Read";
                                        }
                                }
                                return Integer.toString(getValueInt());
                        case LONG:
                                return Long.toString(getValueLong());
                        case DOUBLE:
                                return Double.toString(getValueDouble());
                        case BYTE:
                                return bytesToHexString(getValueBytes());
                        case DATETIME:
                                // once we have TSK timezone, that should be used here.
                                return TimeUtilities.epochToTime(getValueLong());
                        case JSON: {
                                return getValueString();
                        }
                }
                return "";
        }

        public BlackboardAttribute.Type getAttributeType() {
                return this.attributeType;
        }

        public BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE getValueType() {
                return attributeType.getValueType();
        }

        public int getValueInt() {
                return valueInt;
        }

        public long getValueLong() {
                return valueLong;
        }

        public double getValueDouble() {
                return valueDouble;
        }

        public String getValueString() {
                return valueString;
        }

        public byte[] getValueBytes() {
                return Arrays.copyOf(valueBytes, valueBytes.length);
        }

        SleuthkitCase getCaseDatabase() {
                return this.sleuthkitCase;
        }

        void setCaseDatabase(SleuthkitCase sleuthkitCase) {
                this.sleuthkitCase = sleuthkitCase;
        }

        static String bytesToHexString(byte[] bytes) {
                // from http://stackoverflow.com/questions/9655181/convert-from-byte-array-to-hex-string-in-java
                char[] hexChars = new char[bytes.length * 2];
                for (int j = 0; j < bytes.length; j++) {
                        int v = bytes[j] & 0xFF;
                        hexChars[j * 2] = HEX_ARRAY[v >>> 4];
                        hexChars[j * 2 + 1] = HEX_ARRAY[v & 0x0F];
                }
                return new String(hexChars);
        }

        static String replaceNulls(String text) {
                return text.replace((char) 0x00, (char) 0x1A);
        }

        boolean areValuesEqual(Object that) {
                if (that instanceof AbstractAttribute) {
                        AbstractAttribute other = (AbstractAttribute) that;
                        Object[] thisObject = new Object[]{this.getAttributeType(), this.getValueInt(), this.getValueLong(), this.getValueDouble(),
                                this.getValueString(), this.getValueBytes()};
                        Object[] otherObject = new Object[]{other.getAttributeType(), other.getValueInt(), other.getValueLong(), other.getValueDouble(),
                                other.getValueString(), other.getValueBytes()};
                        return Objects.deepEquals(thisObject, otherObject);
                } else {
                        return false;
                }
        }
}