From 240ee357e59359ae5fab2ac208d88a1ccf9cb8ba Mon Sep 17 00:00:00 2001
From: Mike Auty <mike.auty@gmail.com>
Date: Mon, 18 Feb 2013 03:34:43 +0000
Subject: [PATCH] Change symbol spaces to dictionaries for speed.  Add initial
 object and context thoughts.

---
 volatility/framework/context.py | 48 +++++++++++++++++++++++++++++++++
 volatility/framework/obj.py     | 18 +++++++++++++
 volatility/framework/symbols.py |  4 +--
 3 files changed, 68 insertions(+), 2 deletions(-)
 create mode 100644 volatility/framework/context.py
 create mode 100644 volatility/framework/obj.py

diff --git a/volatility/framework/context.py b/volatility/framework/context.py
new file mode 100644
index 000000000..afeed17b1
--- /dev/null
+++ b/volatility/framework/context.py
@@ -0,0 +1,48 @@
+'''
+Created on 12 Feb 2013
+
+@author: mike
+'''
+
+import volatility.framework.symbols as symbols
+import volatility.framework.exceptions as exceptions
+
+class Context(object):
+    """Maintains the context within which to construct objects"""
+
+    def __init__(self):
+        self._symbol_space = symbols.SymbolSpace()
+        self._layers = {}
+
+    ### Symbol Space Functions
+
+    def add_symbol_list(self, symbol_list):
+        """Adds a symbol list to the symbol space used by the context"""
+        if symbol_list.name in self._symbol_space:
+            raise exceptions.SymbolSpaceError("Symbol list " + symbol_list.name + " already exists in this space.")
+        self._symbol_space[symbol_list.name] = symbol_list
+
+    def remove_symbol_list(self, symbol_list_name):
+        if not symbol_list_name in self._symbol_space:
+            raise exceptions.SymbolSpaceError("No symbol list named " + symbol_list_name + " present in the symbol space.")
+        del self._symbol_space[symbol_list_name]
+
+    ### Address Space Functions
+
+    def add_translation_layer(self, layer, name = None):
+        """Adds a named translation layer to the context"""
+        self._layers[name] = layer
+
+    ### Object Factory Functions
+
+    def object(self, symbol, offset, layername = None):
+        """Object factory, takes a context, symbol, offset and optional layername
+        
+           Looks up the layername in the context, finds the object template based on the symbol,
+           and constructs an object using the object template on the layer at the offset. 
+        
+           Returns a fully constructed object
+        """
+        object_template = self._symbol_space.resolve(symbol)
+        return object_template(v)
+
diff --git a/volatility/framework/obj.py b/volatility/framework/obj.py
new file mode 100644
index 000000000..799716f85
--- /dev/null
+++ b/volatility/framework/obj.py
@@ -0,0 +1,18 @@
+'''
+Created on 17 Feb 2013
+
+@author: mike
+'''
+
+class ObjectInterface(object):
+    """ A base object required to be the ancestor of every object used in volatility """
+    def __init__(self, context, offset, layer_name):
+        self._context = context
+        self._offset = offset
+        self._layer_name = layer_name
+
+class IntegerObject(ObjectInterface, int):
+
+    def __new__(cls, context, offset, layer_name):
+        aspace = context.get_address_space(layer_name)
+        aspace.read(offset)
diff --git a/volatility/framework/symbols.py b/volatility/framework/symbols.py
index 0d07b5f43..af2e2ae05 100644
--- a/volatility/framework/symbols.py
+++ b/volatility/framework/symbols.py
@@ -4,9 +4,9 @@ Created on 7 Feb 2013
 @author: mike
 '''
 
-import volatility.exceptions as exceptions
+import volatility.framework.exceptions as exceptions
 
-class SymbolSpace(list):
+class SymbolSpace(dict):
     """Handles a collection of SymbolLists"""
 
     def resolve_symbol(self, symbol):