{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/1069","labels_url":"https://api.github.com/repos/facebook/osquery/issues/1069/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/1069/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/1069/events","html_url":"https://github.com/facebook/osquery/issues/1069","id":71763058,"number":1069,"title":"Core's event manager no longer digests call responses correctly","user":{"login":"marpaia","id":927168,"avatar_url":"https://avatars.githubusercontent.com/u/927168?v=3","gravatar_id":"","url":"https://api.github.com/users/marpaia","html_url":"https://github.com/marpaia","followers_url":"https://api.github.com/users/marpaia/followers","following_url":"https://api.github.com/users/marpaia/following{/other_user}","gists_url":"https://api.github.com/users/marpaia/gists{/gist_id}","starred_url":"https://api.github.com/users/marpaia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marpaia/subscriptions","organizations_url":"https://api.github.com/users/marpaia/orgs","repos_url":"https://api.github.com/users/marpaia/repos","events_url":"https://api.github.com/users/marpaia/events{/privacy}","received_events_url":"https://api.github.com/users/marpaia/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/facebook/osquery/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/facebook/osquery/labels/triage","name":"triage","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-29T02:49:34Z","updated_at":"2015-04-29T02:54:41Z","closed_at":null,"body":"So, I haven't started exploring this in the code yet, but as I was working on Python API stuff, I noticed that core is no longer accepting valid responses from my extension's `ExtensionManager::call()` function. The error case exists for both the `api_example.py` extension (which is currently included with library code in #1020) as well as the crude extension using just the thrift API that I wrote last week (https://gist.github.com/marpaia/ddb09d4029a177850db3).\r\n\r\nAs of last week, the gisted extension worked with osqueryd, but not osqueryi. Now, neither extension works with either osqueryd or osqueryi. Specifically, what I mean by \"doesn't work\" is that, when querying the \"foobar\" table, osquery-core says no data was returned. This means that the extension successfully registers (it shows up in `osquery_extensions`), the table gets inserted into the registry (it shows up in `osquery_registry`), the table lists (`.tables`). Everything works, except for the data parsing bit.\r\n\r\nSomething like this happened last week during development as well, and it was because I wasn't formatting my QueryData response correctly (`list<map<string, string>>`), but I am formatting it correctly now (I believe)."},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/97289843","html_url":"https://github.com/facebook/osquery/issues/1069#issuecomment-97289843","issue_url":"https://api.github.com/repos/facebook/osquery/issues/1069","id":97289843,"user":{"login":"marpaia","id":927168,"avatar_url":"https://avatars.githubusercontent.com/u/927168?v=3","gravatar_id":"","url":"https://api.github.com/users/marpaia","html_url":"https://github.com/marpaia","followers_url":"https://api.github.com/users/marpaia/followers","following_url":"https://api.github.com/users/marpaia/following{/other_user}","gists_url":"https://api.github.com/users/marpaia/gists{/gist_id}","starred_url":"https://api.github.com/users/marpaia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marpaia/subscriptions","organizations_url":"https://api.github.com/users/marpaia/orgs","repos_url":"https://api.github.com/users/marpaia/repos","events_url":"https://api.github.com/users/marpaia/events{/privacy}","received_events_url":"https://api.github.com/users/marpaia/received_events","type":"User","site_admin":false},"created_at":"2015-04-29T02:54:41Z","updated_at":"2015-04-29T02:54:41Z","body":"terminal output from osqueryi:\r\n\r\n```\r\n$ ./build/darwin/osquery/osqueryi\r\nosquery> .tables\r\n<<redacted>>\r\n  => firefox_addons\r\n  => foobar\r\n  => groups\r\n<<redacted>>\r\nosquery> .mode line\r\nosquery> select * from osquery_registry;\r\n<<redacted>>\r\n  registry = table\r\n      name = foobar\r\nowner_uuid = 8467\r\n  internal = 0\r\n    active = 1\r\nosquery> select * from osquery_extensions;\r\n       uuid = 0\r\n       name = core\r\n    version = 1.4.4-160-g0f9e31d\r\nsdk_version = 1.4.4\r\n       path = /Users/marpaia/.osquery/shell.em\r\n       type = extension\r\n\r\n       uuid = 8467\r\n       name = XXX NAME\r\n    version =\r\nsdk_version =\r\n       path = /Users/marpaia/.osquery/shell.em.8467\r\n       type = extension\r\nosquery> select * from osquery_extensions;\r\n       uuid = 0\r\n       name = core\r\n    version = 1.4.4-160-g0f9e31d\r\nsdk_version = 1.4.4\r\n       path = /Users/marpaia/.osquery/shell.em\r\n       type = extension\r\n\r\n       uuid = 40785\r\n       name = XXX NAME\r\n    version =\r\nsdk_version =\r\n       path = /Users/marpaia/.osquery/shell.em.40785\r\n       type = extension\r\nosquery> select * from foobar;\r\nosquery> \r\n```"}}