Learn more  » Push, build, and install  RubyGems npm packages Python packages Maven artifacts PHP packages Go Modules Bower components Debian packages RPM packages NuGet packages

vistahigherlearning / logstash   deb

Repository URL to install this package:

/ opt / logstash / vendor / bundle / jruby / 1.9 / gems / gelfd-0.2.0 / lib / gelfd / chunked_parser.rb

module Gelfd
  class ChunkedParser
    @@chunk_map = Hash.new {|hash,key| hash[key] = {:total_chunks => 0, :chunks => {} } }

    attr_accessor :message_id, :max_chunks, :decoded_data, :chunks, :seen

    def self.parse(data)
      msg_id = self.parse_chunk(data)
      if @@chunk_map[msg_id][:chunks].size == @@chunk_map[msg_id][:total_chunks]
        assemble_chunks(msg_id)
      end
    end

    def self.assemble_chunks(msg_id)
      buff = ''
      chunks = @@chunk_map[msg_id][:chunks]
      chunks.keys.sort.each do |k|
        buff += chunks[k]
      end
      begin
        # TODO
        # This has a chance for an DoS
        # you can send a chunked message as a chunked message
        t = Parser.parse(buff.clone)
        @@chunk_map.delete(msg_id)
        t
      rescue Exception => e
        "Exception: #{e.message}"
      end
    end

    private
    def self.parse_chunk(data)
      header = data[0..1]
      raise NotChunkedDataError, "This doesn't look like a Chunked GELF message!" if header != CHUNKED_MAGIC
      begin
        msg_id = data[2..9].unpack('C*').join
        seq_number, total_number = data[10].ord, data[11].ord
        zlib_chunk = data[12..-1]
        raise TooManyChunksError, "#{total_number} greater than #{MAX_CHUNKS}" if total_number > MAX_CHUNKS
        @@chunk_map[msg_id][:total_chunks] = total_number.to_i
        @@chunk_map[msg_id][:chunks].merge!({seq_number.to_i => zlib_chunk})
        msg_id
      end
    end

  end
end