138 lines
5.5 KiB
Python
138 lines
5.5 KiB
Python
# flake8: noqa: E203,E501,W503
|
|
# pylint: disable=C0413,W0718,R0903,R0801
|
|
# mypy: disable-error-code=unused-awaitable
|
|
"""Asynchronous worker for analyzing image submissions."""
|
|
|
|
import threading
|
|
from pathlib import Path
|
|
from typing import Any
|
|
|
|
import sentry_sdk
|
|
|
|
from .sentry import initialize_sentry
|
|
|
|
initialize_sentry()
|
|
|
|
from .analyzers.binwalk import analyze_binwalk # pylint: disable=C0413
|
|
from .analyzers.decomposer import analyze_decomposer
|
|
from .analyzers.exiftool import analyze_exiftool
|
|
from .analyzers.foremost import analyze_foremost
|
|
from .analyzers.image_resize import analyze_image_resize
|
|
from .analyzers.openstego import analyze_openstego
|
|
from .analyzers.outguess import analyze_outguess
|
|
from .analyzers.pngcheck import analyze_pngcheck
|
|
from .analyzers.steghide import analyze_steghide
|
|
from .analyzers.strings import analyze_strings
|
|
from .analyzers.zsteg import analyze_zsteg
|
|
from .app import app, db
|
|
from .config import RESULT_FOLDER
|
|
from .models import Image, Submission
|
|
|
|
|
|
def analyze_image(submission_hash: str) -> None:
|
|
"""
|
|
Analyze an image submission by running multiple analysis tools concurrently.
|
|
|
|
This function retrieves a submission and its associated image from the database,
|
|
then executes various image analysis tools in parallel threads. The analysis tools
|
|
include binwalk, decomposer, exiftool, foremost, strings, pngcheck, steghide,
|
|
zsteg, and image resize. If deep analysis is enabled, additional tools like
|
|
outguess are included.
|
|
|
|
Args:
|
|
submission_hash (str): The unique hash identifier of the submission to analyze.
|
|
|
|
Returns:
|
|
None
|
|
|
|
Raises:
|
|
Implicitly catches and handles exceptions during analysis, setting submission
|
|
status to "error" if an exception occurs.
|
|
|
|
Side Effects:
|
|
- Queries the database for the submission and associated image
|
|
- Updates submission status in the database ("running" -> "completed" or "error")
|
|
- Creates result directories and generates analysis output files
|
|
- Modifies the database session and commits changes
|
|
"""
|
|
with app.app_context():
|
|
submission: Submission = Submission.query.get(submission_hash) # type: ignore
|
|
image = Image.query.get_or_404(submission.image_hash) # type: ignore
|
|
|
|
if not submission or not image: # No submission found
|
|
sentry_sdk.capture_message(
|
|
f"Submission or image not found: {submission_hash}", level="warning"
|
|
)
|
|
return
|
|
|
|
submission.status = "running" # type: ignore
|
|
db.session.commit() # pylint: disable=no-member
|
|
|
|
try:
|
|
img_path: Path = Path(image.file)
|
|
result_path: Path = RESULT_FOLDER / str(image.hash) / str(submission.hash)
|
|
result_path.mkdir(parents=True, exist_ok=True)
|
|
|
|
threads: list[threading.Thread] = []
|
|
|
|
def run_analyzer(analyzer_func: Any, *args: Any) -> None:
|
|
"""Run an analyzer function in a separate thread."""
|
|
analyzer_name = analyzer_func.__name__.replace("analyze_", "")
|
|
try:
|
|
analyzer_func(*args)
|
|
except Exception as e:
|
|
print(f"Error in {analyzer_name}: {e}")
|
|
with sentry_sdk.push_scope() as scope:
|
|
scope.set_tag("analyzer", analyzer_name)
|
|
scope.set_tag("submission_hash", submission_hash)
|
|
scope.set_context(
|
|
"analyzer_info",
|
|
{
|
|
"tool": analyzer_name,
|
|
"image_path": str(img_path),
|
|
"result_path": str(result_path),
|
|
"filename": submission.filename,
|
|
"deep_analysis": submission.deep_analysis,
|
|
},
|
|
)
|
|
scope.fingerprint = ["analyzer-error", analyzer_name]
|
|
sentry_sdk.capture_exception(e)
|
|
|
|
analyzers = [
|
|
(analyze_binwalk, img_path, result_path),
|
|
(analyze_decomposer, img_path, result_path),
|
|
(analyze_exiftool, img_path, result_path),
|
|
(analyze_foremost, img_path, result_path),
|
|
(analyze_image_resize, img_path, result_path),
|
|
(analyze_openstego, img_path, result_path, submission.password),
|
|
(analyze_pngcheck, img_path, result_path),
|
|
(analyze_strings, img_path, result_path),
|
|
(analyze_steghide, img_path, result_path, submission.password),
|
|
(analyze_zsteg, img_path, result_path),
|
|
]
|
|
|
|
# Deep analysis only
|
|
if submission.deep_analysis:
|
|
analyzers.extend(
|
|
[
|
|
(analyze_outguess, img_path, result_path),
|
|
]
|
|
)
|
|
|
|
for analyzer in analyzers:
|
|
thread = threading.Thread(target=run_analyzer, args=analyzer)
|
|
threads.append(thread)
|
|
thread.start()
|
|
|
|
for thread in threads:
|
|
thread.join()
|
|
|
|
submission.status = "completed" # type: ignore
|
|
except Exception as e:
|
|
sentry_sdk.capture_exception(e)
|
|
submission.status = "error" # type: ignore
|
|
finally:
|
|
db.session.commit() # pylint: disable=no-member
|
|
# Flush Sentry events - wait up to 5 seconds for events to be sent
|
|
sentry_sdk.flush(timeout=5)
|