Base64 functions missing

[zwass]

What version of osquery are you using? What operating system. Be specific.

You can run this query to get the necessary details:

osqueryd -S --line 'SELECT oi.version as osquery_version, os.version AS os_version, os.build AS os_build, os.platform AS os_platform FROM os_version AS os JOIN osquery_info as oi;'
osquery_version = 3.2.6
     os_version = 10.13.5
       os_build = 17F77
    os_platform = darwin

What have you already tried?

$ osqueryd -S 'SELECT base64("foo")'
Error: no such function: base64
$ osqueryd -S 'SELECT unbase64("Zm9v")'
Error: no such function: unbase64

What did you expect to see?

Working base64 functions (as noted in https://osquery.readthedocs.io/en/stable/introduction/sql/#sql-additions).

What did you see instead?

Errors that the functions are not defined.

[akindyakov]

Thank you @zwass for the question!

There is a mistake in documentation I think. You can find this functions under slightly different names:

osquery> select to_base64("long phrase");
+--------------------------+
| to_base64("long phrase") |
+--------------------------+
| bG9uZyBwaHJhc2U=         |
+--------------------------+
osquery> select from_base64(to_base64("long phrase"));
+---------------------------------------+
| from_base64(to_base64("long phrase")) |
+---------------------------------------+
| long phrase                           |
+---------------------------------------+

[zwass]

Awesome, thanks for fixing that.