dissect.sql.sqlite3

Module Contents

Classes

SQLite3

Column

Describes a column of a sqlite table.

Table

Index

Row

Empty

Page

Cell

WAL

WALFrame

WALCheckpoint

Functions

wal_checksum

For future use, will be used when WAL is fully implemented

walk_tree

read_record

varint

class dissect.sql.sqlite3.SQLite3(fh, wal_fh=None)
fh
wal = None
header
encoding
page_size
usable_page_size
page
open_wal(fh)
table(name)
tables()
index(name)
indices()
raw_page(num)
pages()
cells()
class dissect.sql.sqlite3.Column(name: str, description: str)

Describes a column of a sqlite table.

SPACE = '\\s'
EXPRESSION = '\\(.+?\\)'
STRING = '[\'\\"].+?[\'\\"]'
TOKENIZER_EXPRESSION
name
default_value = None
__eq__(other)
__repr__()
class dissect.sql.sqlite3.Table(sqlite, type_, name, table_name, page, sql)
sqlite
type
name
table_name
page
sql
columns = []
primary_key = None
__repr__()
__iter__()
row(idx)
rows()
class dissect.sql.sqlite3.Index(sqlite, type_, name, table_name, page, sql)
sqlite
type
name
table_name
page
sql
__repr__()
class dissect.sql.sqlite3.Row(table, cell)
__iter__()
__getitem__(key)
__getattr__(key)
__repr__()
get(key, default=None)
class dissect.sql.sqlite3.Empty
class dissect.sql.sqlite3.Page(sqlite, num)
sqlite
num
data
offset
header
right_page = None
cell_pointers
cell
__repr__()
open()
cells()
class dissect.sql.sqlite3.Cell(page, offset)
page
offset
size = None
key = None
left_page = None
max_payload_size
min_payload_size
__repr__()
property data
property types
property values
class dissect.sql.sqlite3.WAL(fh)
fh
header
checksum_endian = '<'
frame
frames()
checkpoints()
class dissect.sql.sqlite3.WALFrame(wal, offset)
wal
offset
fh
header
__repr__()
property valid
property data
property page_number
property page_count
class dissect.sql.sqlite3.WALCheckpoint(wal, frames)
wal
frames
__contains__(page)
__getitem__(page)
__repr__()
property page_map
get(page, default=None)
dissect.sql.sqlite3.wal_checksum(buf, endian='>')

For future use, will be used when WAL is fully implemented

dissect.sql.sqlite3.walk_tree(sqlite, page)
dissect.sql.sqlite3.read_record(fh, encoding)
dissect.sql.sqlite3.varint(fh)