contrast-agent 3.10.0 → 3.12.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.flayignore +1 -0
- data/.simplecov +5 -2
- data/ext/build_funchook.rb +12 -7
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +12 -14
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +1 -0
- data/ext/cs__assess_active_record_named/extconf.rb +3 -0
- data/ext/cs__assess_array/cs__assess_array.c +5 -6
- data/ext/cs__assess_array/cs__assess_array.h +1 -0
- data/ext/cs__assess_array/extconf.rb +3 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +13 -11
- data/ext/cs__assess_basic_object/cs__assess_basic_object.h +2 -1
- data/ext/cs__assess_basic_object/extconf.rb +3 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +4 -3
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -3
- data/ext/cs__assess_fiber_track/extconf.rb +3 -0
- data/ext/cs__assess_hash/cs__assess_hash.c +40 -17
- data/ext/cs__assess_hash/cs__assess_hash.h +4 -6
- data/ext/cs__assess_hash/extconf.rb +3 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.c +11 -9
- data/ext/cs__assess_kernel/cs__assess_kernel.h +1 -0
- data/ext/cs__assess_kernel/extconf.rb +3 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +3 -6
- data/ext/cs__assess_marshal_module/extconf.rb +3 -0
- data/ext/cs__assess_module/cs__assess_module.c +16 -14
- data/ext/cs__assess_module/cs__assess_module.h +3 -0
- data/ext/cs__assess_module/extconf.rb +3 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.c +13 -9
- data/ext/cs__assess_regexp/cs__assess_regexp.h +1 -0
- data/ext/cs__assess_regexp/extconf.rb +3 -0
- data/ext/cs__assess_string/cs__assess_string.c +5 -8
- data/ext/cs__assess_string/cs__assess_string.h +2 -1
- data/ext/cs__assess_string/extconf.rb +3 -0
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +2 -2
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +3 -3
- data/ext/cs__assess_string_interpolation26/extconf.rb +3 -0
- data/ext/cs__assess_yield_track/cs__assess_yield_track.h +1 -1
- data/ext/cs__assess_yield_track/extconf.rb +3 -0
- data/ext/cs__common/cs__common.c +80 -1
- data/ext/cs__common/cs__common.h +34 -0
- data/ext/cs__common/extconf.rb +9 -8
- data/ext/cs__contrast_patch/cs__contrast_patch.h +1 -6
- data/ext/cs__contrast_patch/extconf.rb +3 -0
- data/ext/cs__protect_kernel/cs__protect_kernel.c +23 -12
- data/ext/cs__protect_kernel/cs__protect_kernel.h +1 -0
- data/ext/cs__protect_kernel/extconf.rb +3 -0
- data/ext/extconf_common.rb +10 -8
- data/funchook/autom4te.cache/requests +45 -45
- data/funchook/config.log +4 -4
- data/lib/contrast.rb +1 -1
- data/lib/contrast/agent.rb +32 -29
- data/lib/contrast/agent/assess.rb +1 -11
- data/lib/contrast/agent/assess/adjusted_span.rb +3 -1
- data/lib/contrast/agent/assess/contrast_event.rb +16 -62
- data/lib/contrast/agent/assess/events/event_factory.rb +25 -0
- data/lib/contrast/agent/assess/events/source_event.rb +83 -0
- data/lib/contrast/agent/assess/insulator.rb +0 -4
- data/lib/contrast/agent/assess/policy/patcher.rb +6 -2
- data/lib/contrast/agent/assess/policy/policy_node.rb +1 -8
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +2 -2
- data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagation_method.rb +68 -33
- data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -1
- data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +1 -3
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +80 -0
- data/lib/contrast/agent/assess/policy/propagator/select.rb +35 -22
- data/lib/contrast/agent/assess/policy/propagator/split.rb +26 -6
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +2 -0
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +37 -26
- data/lib/contrast/agent/assess/policy/source_method.rb +20 -20
- data/lib/contrast/agent/assess/policy/source_node.rb +0 -15
- data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +90 -0
- data/lib/contrast/agent/assess/policy/trigger/xpath.rb +57 -0
- data/lib/contrast/agent/assess/policy/trigger_method.rb +30 -45
- data/lib/contrast/agent/assess/policy/trigger_node.rb +7 -7
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +2 -31
- data/lib/contrast/agent/assess/properties.rb +5 -3
- data/lib/contrast/agent/assess/rule/base.rb +1 -20
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +23 -6
- data/lib/contrast/agent/assess/rule/redos.rb +4 -5
- data/lib/contrast/agent/assess/tag.rb +24 -14
- data/lib/contrast/agent/at_exit_hook.rb +16 -13
- data/lib/contrast/agent/class_reopener.rb +23 -8
- data/lib/contrast/agent/deadzone/policy/policy.rb +2 -2
- data/lib/contrast/agent/disable_reaction.rb +3 -4
- data/lib/contrast/agent/exclusion_matcher.rb +7 -48
- data/lib/contrast/agent/inventory/policy/datastores.rb +54 -0
- data/lib/contrast/agent/inventory/policy/policy.rb +1 -1
- data/lib/contrast/agent/middleware.rb +101 -260
- data/lib/contrast/agent/module_data.rb +2 -1
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +13 -3
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +59 -47
- data/lib/contrast/agent/patching/policy/method_policy.rb +3 -3
- data/lib/contrast/agent/patching/policy/module_policy.rb +0 -25
- data/lib/contrast/agent/patching/policy/patch.rb +97 -23
- data/lib/contrast/agent/patching/policy/patcher.rb +28 -30
- data/lib/contrast/agent/patching/policy/policy.rb +7 -7
- data/lib/contrast/agent/patching/policy/policy_node.rb +3 -11
- data/lib/contrast/agent/patching/policy/trigger_node.rb +2 -5
- data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +63 -0
- data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +52 -0
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +68 -0
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +117 -0
- data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +54 -0
- data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +129 -0
- data/lib/contrast/agent/protect/policy/policy.rb +6 -6
- data/lib/contrast/agent/protect/policy/rule_applicator.rb +51 -0
- data/lib/contrast/agent/protect/rule.rb +0 -5
- data/lib/contrast/agent/protect/rule/base.rb +19 -37
- data/lib/contrast/agent/protect/rule/base_service.rb +3 -1
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +12 -15
- data/lib/contrast/agent/protect/rule/default_scanner.rb +0 -13
- data/lib/contrast/agent/protect/rule/deserialization.rb +2 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +2 -2
- data/lib/contrast/agent/protect/rule/no_sqli.rb +4 -4
- data/lib/contrast/agent/protect/rule/path_traversal.rb +6 -10
- data/lib/contrast/agent/protect/rule/sqli.rb +5 -4
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +2 -0
- data/lib/contrast/agent/protect/rule/xss.rb +2 -0
- data/lib/contrast/agent/protect/rule/xxe.rb +10 -4
- data/lib/contrast/agent/railtie.rb +3 -8
- data/lib/contrast/agent/reaction_processor.rb +5 -5
- data/lib/contrast/agent/request.rb +11 -18
- data/lib/contrast/agent/request_context.rb +16 -19
- data/lib/contrast/agent/request_handler.rb +35 -0
- data/lib/contrast/agent/response.rb +39 -86
- data/lib/contrast/agent/rewriter.rb +22 -10
- data/lib/contrast/agent/rule_set.rb +49 -0
- data/lib/contrast/agent/scope.rb +0 -6
- data/lib/contrast/agent/service_heartbeat.rb +3 -4
- data/lib/contrast/agent/socket_client.rb +25 -19
- data/lib/contrast/agent/static_analysis.rb +41 -0
- data/lib/contrast/agent/thread.rb +1 -1
- data/lib/contrast/agent/tracepoint_hook.rb +1 -5
- data/lib/contrast/agent/version.rb +1 -1
- data/lib/contrast/api.rb +1 -1
- data/lib/contrast/api/decorators.rb +14 -0
- data/lib/contrast/api/decorators/application_settings.rb +37 -0
- data/lib/contrast/api/decorators/application_update.rb +66 -0
- data/lib/contrast/api/decorators/input_analysis.rb +17 -0
- data/lib/contrast/api/decorators/server_features.rb +24 -0
- data/lib/contrast/api/speedracer.rb +28 -24
- data/lib/contrast/api/tcp_socket.rb +0 -2
- data/lib/contrast/components/agent.rb +34 -24
- data/lib/contrast/components/app_context.rb +45 -38
- data/lib/contrast/components/assess.rb +25 -15
- data/lib/contrast/components/config.rb +7 -5
- data/lib/contrast/components/contrast_service.rb +23 -71
- data/lib/contrast/components/heap_dump.rb +12 -8
- data/lib/contrast/components/interface.rb +15 -22
- data/lib/contrast/components/inventory.rb +5 -1
- data/lib/contrast/components/logger.rb +3 -68
- data/lib/contrast/components/protect.rb +40 -4
- data/lib/contrast/components/sampling.rb +22 -11
- data/lib/contrast/components/scope.rb +2 -52
- data/lib/contrast/components/settings.rb +42 -23
- data/lib/contrast/config/base_configuration.rb +1 -0
- data/lib/contrast/config/default_value.rb +1 -0
- data/lib/contrast/config/protect_rule_configuration.rb +0 -14
- data/lib/contrast/config/protect_rules_configuration.rb +0 -1
- data/lib/contrast/configuration.rb +2 -2
- data/lib/contrast/{extensions/ruby_core → extension}/assess.rb +12 -15
- data/lib/contrast/extension/assess/array.rb +77 -0
- data/lib/contrast/{extensions/ruby_core → extension}/assess/assess_extension.rb +29 -24
- data/lib/contrast/{extensions/ruby_core → extension}/assess/erb.rb +0 -8
- data/lib/contrast/extension/assess/eval_trigger.rb +78 -0
- data/lib/contrast/{extensions/ruby_core → extension}/assess/exec_trigger.rb +7 -9
- data/lib/contrast/extension/assess/fiber.rb +113 -0
- data/lib/contrast/extension/assess/hash.rb +39 -0
- data/lib/contrast/extension/assess/kernel.rb +110 -0
- data/lib/contrast/extension/assess/regexp.rb +84 -0
- data/lib/contrast/{extensions/ruby_core → extension}/assess/string.rb +18 -10
- data/lib/contrast/{extensions/ruby_core → extension}/delegator.rb +0 -0
- data/lib/contrast/{extensions/ruby_core → extension}/inventory.rb +2 -2
- data/lib/contrast/extension/kernel.rb +54 -0
- data/lib/contrast/{extensions/ruby_core → extension}/module.rb +0 -0
- data/lib/contrast/{extensions/ruby_core → extension}/protect.rb +2 -2
- data/lib/contrast/extension/protect/kernel.rb +44 -0
- data/lib/contrast/{extensions/ruby_core → extension}/protect/psych.rb +1 -1
- data/lib/contrast/{extensions/ruby_core → extension}/thread.rb +0 -0
- data/lib/contrast/framework/base_support.rb +32 -0
- data/lib/contrast/framework/manager.rb +59 -8
- data/lib/contrast/framework/platform_version.rb +1 -0
- data/lib/contrast/framework/rack/patch/session_cookie.rb +126 -0
- data/lib/contrast/framework/rack/patch/support.rb +24 -0
- data/lib/contrast/framework/rack/support.rb +22 -0
- data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +43 -0
- data/lib/contrast/framework/rails/patch/assess_configuration.rb +103 -0
- data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +31 -0
- data/lib/contrast/framework/rails/patch/support.rb +67 -0
- data/lib/contrast/framework/rails/rewrite/action_controller_railties_helper_inherited.rb +34 -0
- data/lib/contrast/framework/rails/rewrite/active_record_attribute_methods_read.rb +39 -0
- data/lib/contrast/framework/rails/rewrite/active_record_named.rb +73 -0
- data/lib/contrast/framework/rails/rewrite/active_record_time_zone_inherited.rb +33 -0
- data/lib/contrast/framework/rails/support.rb +115 -0
- data/lib/contrast/framework/sinatra/application_helper.rb +51 -0
- data/lib/contrast/framework/sinatra/patch/base.rb +83 -0
- data/lib/contrast/framework/sinatra/patch/support.rb +27 -0
- data/lib/contrast/framework/sinatra/support.rb +109 -0
- data/lib/contrast/framework/view_technologies_descriptor.rb +1 -0
- data/lib/contrast/logger/application.rb +80 -0
- data/lib/contrast/logger/log.rb +143 -0
- data/lib/contrast/logger/time.rb +50 -0
- data/lib/contrast/tasks/config.rb +54 -0
- data/lib/contrast/tasks/service.rb +3 -13
- data/lib/contrast/utils/assess/sampling_util.rb +4 -9
- data/lib/contrast/utils/assess/tracking_util.rb +7 -1
- data/lib/contrast/utils/boolean_util.rb +2 -2
- data/lib/contrast/utils/cache.rb +0 -11
- data/lib/contrast/utils/class_util.rb +21 -2
- data/lib/contrast/utils/gemfile_reader.rb +7 -5
- data/lib/contrast/utils/hash_digest.rb +2 -11
- data/lib/contrast/utils/heap_dump_util.rb +12 -11
- data/lib/contrast/utils/invalid_configuration_util.rb +4 -4
- data/lib/contrast/utils/inventory_util.rb +2 -2
- data/lib/contrast/utils/io_util.rb +1 -11
- data/lib/contrast/utils/job_servers_running.rb +6 -4
- data/lib/contrast/utils/object_share.rb +1 -28
- data/lib/contrast/utils/os.rb +1 -25
- data/lib/contrast/utils/service_response_util.rb +36 -60
- data/lib/contrast/utils/service_sender_util.rb +84 -23
- data/lib/contrast/utils/sinatra_helper.rb +0 -6
- data/lib/contrast/utils/stack_trace_utils.rb +86 -182
- data/lib/contrast/utils/string_utils.rb +18 -2
- data/lib/contrast/utils/tag_util.rb +11 -1
- data/lib/contrast/utils/thread_tracker.rb +2 -2
- data/lib/contrast/utils/timer.rb +0 -40
- data/resources/assess/policy.json +42 -71
- data/resources/inventory/policy.json +2 -2
- data/resources/protect/policy.json +15 -15
- data/ruby-agent.gemspec +11 -4
- data/service_executables/VERSION +1 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- metadata +122 -111
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
- data/ext/cs__assess_regexp_track/extconf.rb +0 -2
- data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
- data/lib/contrast/agent/assess/rule/csrf.rb +0 -66
- data/lib/contrast/agent/assess/rule/csrf/csrf_action.rb +0 -28
- data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +0 -73
- data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +0 -132
- data/lib/contrast/agent/assess/rule/response_scanning_rule.rb +0 -47
- data/lib/contrast/agent/assess/rule/response_watcher.rb +0 -36
- data/lib/contrast/agent/assess/rule/watcher.rb +0 -36
- data/lib/contrast/agent/feature_state.rb +0 -376
- data/lib/contrast/agent/logger_manager.rb +0 -116
- data/lib/contrast/agent/protect/rule/csrf.rb +0 -118
- data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +0 -103
- data/lib/contrast/agent/protect/rule/csrf/csrf_token_injector.rb +0 -85
- data/lib/contrast/agent/settings_state.rb +0 -152
- data/lib/contrast/delegators.rb +0 -9
- data/lib/contrast/delegators/application_update.rb +0 -32
- data/lib/contrast/extensions/framework/rack/cookie.rb +0 -24
- data/lib/contrast/extensions/framework/rack/request.rb +0 -24
- data/lib/contrast/extensions/framework/rack/response.rb +0 -23
- data/lib/contrast/extensions/framework/rails/action_controller_railties_helper_inherited.rb +0 -20
- data/lib/contrast/extensions/framework/rails/active_record.rb +0 -26
- data/lib/contrast/extensions/framework/rails/active_record_named.rb +0 -53
- data/lib/contrast/extensions/framework/rails/active_record_time_zone_inherited.rb +0 -21
- data/lib/contrast/extensions/framework/rails/buffer.rb +0 -28
- data/lib/contrast/extensions/framework/rails/configuration.rb +0 -27
- data/lib/contrast/extensions/framework/sinatra/base.rb +0 -59
- data/lib/contrast/extensions/ruby_core/assess/array.rb +0 -59
- data/lib/contrast/extensions/ruby_core/assess/basic_object.rb +0 -15
- data/lib/contrast/extensions/ruby_core/assess/fiber.rb +0 -124
- data/lib/contrast/extensions/ruby_core/assess/hash.rb +0 -22
- data/lib/contrast/extensions/ruby_core/assess/kernel.rb +0 -95
- data/lib/contrast/extensions/ruby_core/assess/module.rb +0 -14
- data/lib/contrast/extensions/ruby_core/assess/regexp.rb +0 -206
- data/lib/contrast/extensions/ruby_core/assess/tilt_template_trigger.rb +0 -73
- data/lib/contrast/extensions/ruby_core/assess/xpath_library_trigger.rb +0 -40
- data/lib/contrast/extensions/ruby_core/eval_trigger.rb +0 -52
- data/lib/contrast/extensions/ruby_core/inventory/datastores.rb +0 -37
- data/lib/contrast/extensions/ruby_core/protect/applies_command_injection_rule.rb +0 -72
- data/lib/contrast/extensions/ruby_core/protect/applies_deserialization_rule.rb +0 -60
- data/lib/contrast/extensions/ruby_core/protect/applies_no_sqli_rule.rb +0 -83
- data/lib/contrast/extensions/ruby_core/protect/applies_path_traversal_rule.rb +0 -123
- data/lib/contrast/extensions/ruby_core/protect/applies_sqli_rule.rb +0 -65
- data/lib/contrast/extensions/ruby_core/protect/applies_xxe_rule.rb +0 -143
- data/lib/contrast/extensions/ruby_core/protect/kernel.rb +0 -30
- data/lib/contrast/framework/rails_support.rb +0 -88
- data/lib/contrast/framework/sinatra_application_helper.rb +0 -49
- data/lib/contrast/framework/sinatra_support.rb +0 -94
- data/lib/contrast/utils/comment_range.rb +0 -19
- data/lib/contrast/utils/data_store_util.rb +0 -23
- data/lib/contrast/utils/environment_util.rb +0 -81
- data/lib/contrast/utils/performs_logging.rb +0 -152
- data/lib/contrast/utils/rack_assess_session_cookie.rb +0 -104
- data/lib/contrast/utils/rails_assess_configuration.rb +0 -95
- data/lib/contrast/utils/random_util.rb +0 -22
- data/resources/csrf/inject.js +0 -44
- data/resources/factory-bot-spec/spec_helper.rb +0 -30
- data/resources/rubocops/kernel/catch_cop.rb +0 -37
- data/resources/rubocops/kernel/require_cop.rb +0 -37
- data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
- data/resources/rubocops/module/autoload_cop.rb +0 -37
- data/resources/rubocops/module/const_defined_cop.rb +0 -37
- data/resources/rubocops/module/const_get_cop.rb +0 -37
- data/resources/rubocops/module/const_set_cop.rb +0 -37
- data/resources/rubocops/module/constants_cop.rb +0 -37
- data/resources/rubocops/module/name_cop.rb +0 -37
- data/resources/rubocops/object/class_cop.rb +0 -37
- data/resources/rubocops/object/freeze_cop.rb +0 -37
- data/resources/rubocops/object/frozen_cop.rb +0 -37
- data/resources/rubocops/object/is_a_cop.rb +0 -37
- data/resources/rubocops/object/method_cop.rb +0 -37
- data/resources/rubocops/object/respond_to_cop.rb +0 -37
- data/resources/rubocops/object/singleton_class_cop.rb +0 -37
- data/resources/rubocops/regexp/spelling_cop.rb +0 -44
- data/resources/rubocops/thread/new_cop.rb +0 -39
- data/resources/ruby-spec/ancestors_spec.rb +0 -70
- data/resources/ruby-spec/modulo_spec.rb +0 -831
- data/resources/ruby-spec/parameters_spec.rb +0 -261
- data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
@@ -9,12 +9,23 @@ static VALUE contrast_protect_fork(const int argc, const VALUE *argv,
|
|
9
9
|
const VALUE self) {
|
10
10
|
VALUE ret;
|
11
11
|
if (rb_block_given_p()) {
|
12
|
+
/* We call our hook, but it's a little complicated.
|
13
|
+
* We wrap the fork block with our own lambda in
|
14
|
+
* order to instrument it. There are no public
|
15
|
+
* methods in the Ruby C API to set the prevailing
|
16
|
+
* block, so we have to use rb_funcall_with_block.
|
17
|
+
* Also, rb_funcall_with_block does a public call,
|
18
|
+
* and our method is private.
|
19
|
+
* So we (as a hack) temporarily set it to public.
|
20
|
+
*/
|
12
21
|
VALUE wrapper;
|
13
22
|
wrapper =
|
14
|
-
rb_funcall_with_block(
|
15
|
-
|
23
|
+
rb_funcall_with_block(kernel_protect, rb_sym_protect_kernel_wrapper, 0,
|
24
|
+
NULL, rb_block_proc());
|
25
|
+
rb_funcall(rb_mKernel, rb_intern("public"), 1, ID2SYM(rb_sym_protect_kernel_fork));
|
16
26
|
ret = rb_funcall_with_block(self, rb_sym_protect_kernel_fork, argc,
|
17
27
|
argv, wrapper);
|
28
|
+
rb_funcall(rb_mKernel, rb_intern("private"), 1, ID2SYM(rb_sym_protect_kernel_fork));
|
18
29
|
} else {
|
19
30
|
ret = rb_funcall2(self, rb_sym_protect_kernel_fork, argc, argv);
|
20
31
|
}
|
@@ -22,16 +33,16 @@ static VALUE contrast_protect_fork(const int argc, const VALUE *argv,
|
|
22
33
|
}
|
23
34
|
|
24
35
|
void Init_cs__protect_kernel(void) {
|
36
|
+
VALUE core_protect = rb_define_module_under(core_extensions, "Protect");
|
37
|
+
kernel_protect = rb_define_module_under(core_protect, "Kernel");
|
38
|
+
rb_sym_protect_kernel_wrapper = rb_intern("build_wrapper");
|
25
39
|
|
26
|
-
rb_sym_protect_kernel_fork =
|
27
|
-
|
40
|
+
rb_sym_protect_kernel_fork = contrast_register_patch("Kernel",
|
41
|
+
"fork",
|
42
|
+
&contrast_protect_fork);
|
43
|
+
|
44
|
+
rb_sym_protect_kernel_fork = contrast_register_singleton_patch("Kernel",
|
45
|
+
"fork",
|
46
|
+
&contrast_protect_fork);
|
28
47
|
|
29
|
-
VALUE singleton = rb_singleton_class(rb_mKernel);
|
30
|
-
contrast_alias_method(rb_mKernel, "cs__protect_kernel_fork", "fork");
|
31
|
-
contrast_alias_method(singleton, "cs__protect_kernel_fork", "fork");
|
32
|
-
rb_define_module_function(rb_mKernel, "fork", contrast_protect_fork, -1);
|
33
|
-
// Kernel#fork, as opposed to Kernel.fork, is private. Restore that.
|
34
|
-
rb_funcall(rb_mKernel, rb_intern("public"), 1,
|
35
|
-
ID2SYM(rb_intern("cs__protect_kernel_fork")));
|
36
|
-
rb_funcall(rb_mKernel, rb_intern("private"), 1, ID2SYM(rb_intern("fork")));
|
37
48
|
}
|
data/ext/extconf_common.rb
CHANGED
@@ -1,6 +1,7 @@
|
|
1
1
|
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
|
2
|
+
# frozen_string_literal: true
|
3
3
|
|
4
|
+
require 'mkmf'
|
4
5
|
require_relative '../lib/contrast/agent/version'
|
5
6
|
|
6
7
|
def name
|
@@ -8,7 +9,7 @@ def name
|
|
8
9
|
end
|
9
10
|
|
10
11
|
def make!
|
11
|
-
create_makefile "#{name}/#{name}"
|
12
|
+
create_makefile "#{ name }/#{ name }"
|
12
13
|
end
|
13
14
|
|
14
15
|
def ext_path
|
@@ -18,23 +19,24 @@ def ext_path
|
|
18
19
|
end
|
19
20
|
|
20
21
|
def rpath_root
|
21
|
-
if (
|
22
|
-
|
22
|
+
if (/darwin/ =~ RUBY_PLATFORM).nil?
|
23
|
+
'\$${ORIGIN}'
|
23
24
|
else
|
24
|
-
|
25
|
+
'@loader_path'
|
25
26
|
end
|
26
27
|
end
|
27
28
|
|
28
29
|
def funchook_rpath!
|
29
|
-
options = " -Wl,-rpath,#{rpath_root}/../../shared_libraries"
|
30
|
+
options = " -Wl,-rpath,#{ rpath_root }/../../shared_libraries"
|
30
31
|
raise unless try_link('int main() {return 0;}', options)
|
32
|
+
|
31
33
|
$LDFLAGS << options
|
32
|
-
$LDFLAGS << " -L#{__dir__}/../shared_libraries"
|
34
|
+
$LDFLAGS << " -L#{ __dir__ }/../shared_libraries"
|
33
35
|
|
34
36
|
find_header('funchook.h', ext_path)
|
35
37
|
have_header('funchook.h')
|
36
38
|
|
37
|
-
find_library('funchook', 'funchook_create',
|
39
|
+
find_library('funchook', 'funchook_create', '../shared_libraries')
|
38
40
|
find_library('funchook', 'funchook_install')
|
39
41
|
find_library('funchook', 'funchook_prepare')
|
40
42
|
have_library('funchook', 'funchook_create')
|
@@ -14,64 +14,64 @@
|
|
14
14
|
'configure.ac'
|
15
15
|
],
|
16
16
|
{
|
17
|
-
'
|
17
|
+
'_AM_MAKEFILE_INCLUDE' => 1,
|
18
|
+
'AM_MAINTAINER_MODE' => 1,
|
19
|
+
'AM_NLS' => 1,
|
20
|
+
'AM_ENABLE_MULTILIB' => 1,
|
21
|
+
'AC_CONFIG_FILES' => 1,
|
22
|
+
'AM_POT_TOOLS' => 1,
|
23
|
+
'AM_INIT_AUTOMAKE' => 1,
|
24
|
+
'AM_PROG_LIBTOOL' => 1,
|
25
|
+
'AM_PROG_MOC' => 1,
|
26
|
+
'AC_CONFIG_HEADERS' => 1,
|
27
|
+
'AH_OUTPUT' => 1,
|
28
|
+
'AM_PROG_AR' => 1,
|
18
29
|
'AC_DEFINE_TRACE_LITERAL' => 1,
|
19
|
-
'
|
20
|
-
'_LT_AC_TAGCONFIG' => 1,
|
30
|
+
'AC_REQUIRE_AUX_FILE' => 1,
|
21
31
|
'AM_AUTOMAKE_VERSION' => 1,
|
32
|
+
'm4_include' => 1,
|
22
33
|
'AC_CANONICAL_BUILD' => 1,
|
23
|
-
'
|
24
|
-
'
|
25
|
-
'AM_PROG_LIBTOOL' => 1,
|
26
|
-
'AM_PROG_FC_C_O' => 1,
|
34
|
+
'LT_INIT' => 1,
|
35
|
+
'AC_LIBSOURCE' => 1,
|
27
36
|
'm4_pattern_allow' => 1,
|
28
|
-
'
|
29
|
-
'
|
30
|
-
'
|
31
|
-
'
|
37
|
+
'AM_PROG_CC_C_O' => 1,
|
38
|
+
'AM_PROG_FC_C_O' => 1,
|
39
|
+
'AC_SUBST_TRACE' => 1,
|
40
|
+
'AC_FC_PP_DEFINE' => 1,
|
41
|
+
'AC_PROG_LIBTOOL' => 1,
|
32
42
|
'LT_SUPPORTED_TAG' => 1,
|
33
|
-
'
|
34
|
-
'AM_CONDITIONAL' => 1,
|
35
|
-
'AM_XGETTEXT_OPTION' => 1,
|
43
|
+
'AC_SUBST' => 1,
|
36
44
|
'sinclude' => 1,
|
37
|
-
'
|
45
|
+
'AM_MAKEFILE_INCLUDE' => 1,
|
38
46
|
'_AM_SUBST_NOTMAKE' => 1,
|
39
|
-
'
|
40
|
-
'
|
41
|
-
'AM_PROG_F77_C_O' => 1,
|
42
|
-
'AC_CONFIG_LINKS' => 1,
|
43
|
-
'AC_FC_PP_DEFINE' => 1,
|
44
|
-
'AM_SILENT_RULES' => 1,
|
45
|
-
'AC_CONFIG_FILES' => 1,
|
46
|
-
'AC_FC_FREEFORM' => 1,
|
47
|
-
'_m4_warn' => 1,
|
48
|
-
'AM_MAINTAINER_MODE' => 1,
|
47
|
+
'AM_CONDITIONAL' => 1,
|
48
|
+
'_LT_AC_TAGCONFIG' => 1,
|
49
49
|
'include' => 1,
|
50
|
-
'
|
51
|
-
'
|
52
|
-
'
|
53
|
-
'
|
54
|
-
'
|
55
|
-
'
|
56
|
-
'AM_PROG_MOC' => 1,
|
50
|
+
'AC_CANONICAL_TARGET' => 1,
|
51
|
+
'm4_sinclude' => 1,
|
52
|
+
'AC_INIT' => 1,
|
53
|
+
'_AM_COND_ELSE' => 1,
|
54
|
+
'AC_FC_FREEFORM' => 1,
|
55
|
+
'AM_PATH_GUILE' => 1,
|
57
56
|
'AM_GNU_GETTEXT_INTL_SUBDIR' => 1,
|
58
|
-
'
|
59
|
-
'
|
60
|
-
'
|
61
|
-
'AM_MAKEFILE_INCLUDE' => 1,
|
57
|
+
'AM_SILENT_RULES' => 1,
|
58
|
+
'AM_PROG_F77_C_O' => 1,
|
59
|
+
'AC_FC_PP_SRCEXT' => 1,
|
62
60
|
'AC_CANONICAL_SYSTEM' => 1,
|
63
|
-
'
|
61
|
+
'AC_CANONICAL_HOST' => 1,
|
62
|
+
'm4_pattern_forbid' => 1,
|
63
|
+
'_AM_COND_IF' => 1,
|
64
|
+
'AM_PROG_CXX_C_O' => 1,
|
64
65
|
'AC_FC_SRCEXT' => 1,
|
65
|
-
'AM_INIT_AUTOMAKE' => 1,
|
66
66
|
'AC_CONFIG_LIBOBJ_DIR' => 1,
|
67
|
-
'
|
68
|
-
'
|
69
|
-
'
|
70
|
-
'AC_CONFIG_SUBDIRS' => 1,
|
67
|
+
'AM_XGETTEXT_OPTION' => 1,
|
68
|
+
'_AM_COND_ENDIF' => 1,
|
69
|
+
'LT_CONFIG_LTDL_DIR' => 1,
|
71
70
|
'AC_CONFIG_AUX_DIR' => 1,
|
72
|
-
'
|
73
|
-
'
|
74
|
-
'
|
71
|
+
'AC_CONFIG_SUBDIRS' => 1,
|
72
|
+
'AM_GNU_GETTEXT' => 1,
|
73
|
+
'AC_CONFIG_LINKS' => 1,
|
74
|
+
'_m4_warn' => 1
|
75
75
|
}
|
76
76
|
], 'Autom4te::Request' )
|
77
77
|
);
|
data/funchook/config.log
CHANGED
@@ -10,11 +10,11 @@ generated by GNU Autoconf 2.69. Invocation command line was
|
|
10
10
|
## Platform. ##
|
11
11
|
## --------- ##
|
12
12
|
|
13
|
-
hostname =
|
13
|
+
hostname = a193cfcc-bb72-46e9-914d-bb7806a0d5f9-k7pzb
|
14
14
|
uname -m = x86_64
|
15
|
-
uname -r = 4.19.
|
15
|
+
uname -r = 4.19.107-flatcar
|
16
16
|
uname -s = Linux
|
17
|
-
uname -v = #1 SMP
|
17
|
+
uname -v = #1 SMP Thu Mar 26 19:48:36 -00 2020
|
18
18
|
|
19
19
|
/usr/bin/uname -p = unknown
|
20
20
|
/bin/uname -X = unknown
|
@@ -326,7 +326,7 @@ generated by GNU Autoconf 2.69. Invocation command line was
|
|
326
326
|
CONFIG_COMMANDS =
|
327
327
|
$ ./config.status
|
328
328
|
|
329
|
-
on
|
329
|
+
on a193cfcc-bb72-46e9-914d-bb7806a0d5f9-k7pzb
|
330
330
|
|
331
331
|
config.status:822: creating Makefile
|
332
332
|
config.status:822: creating src/Makefile
|
data/lib/contrast.rb
CHANGED
@@ -51,7 +51,7 @@ cs__scoped_require 'contrast/internal_exception'
|
|
51
51
|
|
52
52
|
# shared utils
|
53
53
|
cs__scoped_require 'contrast/utils/timer'
|
54
|
-
cs__scoped_require 'contrast/utils/random_util'
|
55
54
|
cs__scoped_require 'contrast/utils/preflight_util'
|
56
55
|
|
56
|
+
cs__scoped_require 'contrast/utils/assess/sampling_util'
|
57
57
|
cs__scoped_require 'contrast/agent'
|
data/lib/contrast/agent.rb
CHANGED
@@ -5,9 +5,22 @@ cs__scoped_require 'English'
|
|
5
5
|
|
6
6
|
# This must precede other Contrast C extensions
|
7
7
|
cs__scoped_require 'cs__common/cs__common'
|
8
|
-
|
9
|
-
|
10
|
-
cs__scoped_require 'contrast/
|
8
|
+
# This must precede any patching we do as we log patches and we shouldn't cause
|
9
|
+
# requires to happen during that process.
|
10
|
+
cs__scoped_require 'contrast/components/logger'
|
11
|
+
|
12
|
+
# defining instrumentation, this must precede core extensions
|
13
|
+
# because they need to register their patches
|
14
|
+
cs__scoped_require 'contrast/agent/patching/policy/patcher'
|
15
|
+
cs__scoped_require 'contrast/agent/patching/policy/patch'
|
16
|
+
|
17
|
+
# core extensions
|
18
|
+
cs__scoped_require 'contrast/extension/assess'
|
19
|
+
cs__scoped_require 'contrast/extension/delegator'
|
20
|
+
cs__scoped_require 'contrast/extension/inventory'
|
21
|
+
cs__scoped_require 'contrast/extension/module'
|
22
|
+
cs__scoped_require 'contrast/extension/protect'
|
23
|
+
cs__scoped_require 'contrast/extension/protect/kernel'
|
11
24
|
|
12
25
|
cs__scoped_require 'contrast/utils/object_share'
|
13
26
|
cs__scoped_require 'contrast/utils/boolean_util'
|
@@ -20,20 +33,11 @@ cs__scoped_require 'contrast/common_agent_configuration'
|
|
20
33
|
cs__scoped_require 'contrast/utils/hash_digest'
|
21
34
|
cs__scoped_require 'contrast/utils/invalid_configuration_util'
|
22
35
|
|
23
|
-
cs__scoped_require 'contrast/utils/cache'
|
24
|
-
|
25
36
|
# scoping
|
26
37
|
cs__scoped_require 'contrast/agent/scope'
|
27
38
|
|
28
39
|
cs__scoped_require 'contrast/utils/thread_tracker'
|
29
40
|
|
30
|
-
cs__scoped_require 'contrast/api'
|
31
|
-
|
32
|
-
cs__scoped_require 'contrast/utils/resource_loader'
|
33
|
-
cs__scoped_require 'contrast/utils/duck_utils'
|
34
|
-
cs__scoped_require 'contrast/agent/tracepoint_hook'
|
35
|
-
cs__scoped_require 'contrast/agent/at_exit_hook'
|
36
|
-
|
37
41
|
# Framework support
|
38
42
|
cs__scoped_require 'contrast/framework/manager'
|
39
43
|
|
@@ -50,16 +54,17 @@ module Contrast
|
|
50
54
|
end
|
51
55
|
end
|
52
56
|
|
53
|
-
|
54
|
-
|
57
|
+
cs__scoped_require 'contrast/api'
|
58
|
+
|
59
|
+
cs__scoped_require 'contrast/utils/resource_loader'
|
60
|
+
cs__scoped_require 'contrast/utils/duck_utils'
|
61
|
+
cs__scoped_require 'contrast/agent/tracepoint_hook'
|
62
|
+
cs__scoped_require 'contrast/agent/at_exit_hook'
|
55
63
|
|
56
64
|
# communication with contrast service
|
57
65
|
cs__scoped_require 'contrast/agent/exclusion_matcher'
|
58
66
|
cs__scoped_require 'contrast/agent/socket_client'
|
59
67
|
|
60
|
-
# config interface
|
61
|
-
cs__scoped_require 'contrast/agent/feature_state'
|
62
|
-
|
63
68
|
# threads that handle contrast scope
|
64
69
|
cs__scoped_require 'contrast/agent/thread'
|
65
70
|
|
@@ -68,17 +73,6 @@ cs__scoped_require 'contrast/agent/request_context'
|
|
68
73
|
|
69
74
|
cs__scoped_require 'contrast/agent/assess'
|
70
75
|
|
71
|
-
# Unconditional early-framework patches.
|
72
|
-
# These happen regardless of analysis mode, & should be lightweight.
|
73
|
-
cs__scoped_require 'contrast/utils/rack_assess_session_cookie'
|
74
|
-
cs__scoped_require 'contrast/utils/rails_assess_configuration'
|
75
|
-
# Also: should document the necessity of patching this ASAP.
|
76
|
-
# In Rails, session configuration occurs extremely early & only once.
|
77
|
-
# If we defer our patching of the rails session configuration too long
|
78
|
-
# (i.e., where we normally patch) we will miss the configuration
|
79
|
-
# and will never be able to report session misconfiguration rules.
|
80
|
-
cs__scoped_require 'contrast/extensions/framework/rails/configuration' if defined?(Rails)
|
81
|
-
|
82
76
|
# protect rules
|
83
77
|
cs__scoped_require 'contrast/agent/protect/rule'
|
84
78
|
|
@@ -87,4 +81,13 @@ cs__scoped_require 'contrast/utils/gemfile_reader'
|
|
87
81
|
|
88
82
|
# rack event monitoring
|
89
83
|
cs__scoped_require 'contrast/agent/middleware'
|
90
|
-
|
84
|
+
|
85
|
+
# TODO: RUBY-919
|
86
|
+
# Refactor to use Contrast::Framework::Manager
|
87
|
+
# Contrast::Framework::Manager.before_load_patches!
|
88
|
+
if defined?(::Rails)
|
89
|
+
cs__scoped_require 'contrast/framework/rails/patch/support'
|
90
|
+
cs__scoped_require 'contrast/framework/rails/patch/rails_application_configuration'
|
91
|
+
Contrast::Framework::Rails::Patch::RailsApplicationConfiguration.instrument
|
92
|
+
cs__scoped_require 'contrast/agent/railtie' if ::Rails::VERSION::MAJOR.to_i >= 3
|
93
|
+
end
|
@@ -17,28 +17,18 @@ module Contrast
|
|
17
17
|
# Rules - generic
|
18
18
|
cs__scoped_require 'contrast/agent/assess/rule'
|
19
19
|
cs__scoped_require 'contrast/agent/assess/rule/base'
|
20
|
-
cs__scoped_require 'contrast/agent/assess/rule/response_scanning_rule'
|
21
|
-
cs__scoped_require 'contrast/agent/assess/rule/watcher'
|
22
|
-
cs__scoped_require 'contrast/agent/assess/rule/response_watcher'
|
23
20
|
|
24
21
|
# Dynamic Sources
|
25
22
|
cs__scoped_require 'contrast/agent/assess/policy/dynamic_source_factory'
|
26
23
|
|
27
|
-
# Rule: CSRF
|
28
|
-
cs__scoped_require 'contrast/agent/assess/rule/csrf'
|
29
|
-
cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_applicator'
|
30
|
-
cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_action'
|
31
|
-
cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_watcher'
|
32
|
-
|
33
24
|
# Rule: REDOS
|
34
25
|
cs__scoped_require 'contrast/agent/assess/rule/redos'
|
35
26
|
|
36
27
|
# reporting / tracking
|
37
28
|
cs__scoped_require 'contrast/agent/assess/insulator'
|
38
29
|
cs__scoped_require 'contrast/agent/assess/properties'
|
39
|
-
cs__scoped_require 'contrast/agent/assess/frozen_properties'
|
40
30
|
cs__scoped_require 'contrast/agent/assess/tag'
|
41
|
-
cs__scoped_require 'contrast/agent/assess/
|
31
|
+
cs__scoped_require 'contrast/agent/assess/events/event_factory'
|
42
32
|
end
|
43
33
|
end
|
44
34
|
end
|
@@ -14,7 +14,9 @@ module Contrast
|
|
14
14
|
# Note: Unlike ranges, it is assumed that the stop
|
15
15
|
# value is exclusive, not inclusive. [start, end)
|
16
16
|
class AdjustedSpan
|
17
|
-
attr_accessor :
|
17
|
+
attr_accessor :stop
|
18
|
+
attr_reader :start
|
19
|
+
|
18
20
|
def initialize start = nil, stop = nil
|
19
21
|
@start = start if start
|
20
22
|
@stop = stop if stop
|
@@ -1,8 +1,14 @@
|
|
1
1
|
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
|
+
cs__scoped_require 'contrast/utils/assess/tracking_util'
|
4
5
|
cs__scoped_require 'contrast/utils/class_util'
|
6
|
+
cs__scoped_require 'contrast/utils/duck_utils'
|
7
|
+
cs__scoped_require 'contrast/utils/object_share'
|
5
8
|
cs__scoped_require 'contrast/utils/prevent_serialization'
|
9
|
+
cs__scoped_require 'contrast/utils/stack_trace_utils'
|
10
|
+
cs__scoped_require 'contrast/utils/string_utils'
|
11
|
+
cs__scoped_require 'contrast/utils/timer'
|
6
12
|
|
7
13
|
module Contrast
|
8
14
|
module Agent
|
@@ -53,8 +59,7 @@ module Contrast
|
|
53
59
|
end
|
54
60
|
end
|
55
61
|
|
56
|
-
|
57
|
-
attr_reader :event_id, :source_type, :parent_ids
|
62
|
+
attr_reader :event_id, :parent_ids
|
58
63
|
|
59
64
|
# We need this to track the parent id's of events to build up a flow
|
60
65
|
# chart of the finding
|
@@ -69,13 +74,13 @@ module Contrast
|
|
69
74
|
end
|
70
75
|
end
|
71
76
|
|
72
|
-
def initialize policy_node, tagged, object, ret, args
|
73
|
-
@caller = caller_locations(get_call_start(policy_node, invoked), 10)
|
77
|
+
def initialize policy_node, tagged, object, ret, args
|
74
78
|
@policy_node = policy_node
|
79
|
+
# so long as this event is built in a factory, we know Contrast Code
|
80
|
+
# will be the first three events
|
81
|
+
@caller = caller(3, 20)
|
75
82
|
@time = Contrast::Utils::Timer.now_ms
|
76
83
|
@thread = Thread.current.object_id
|
77
|
-
@source_type = source_type
|
78
|
-
@source_name = source_name
|
79
84
|
|
80
85
|
# These methods rely on the above being set. Don't move them!
|
81
86
|
@event_id = Contrast::Agent::Assess::ContrastEvent.next_atomic_id
|
@@ -86,8 +91,6 @@ module Contrast
|
|
86
91
|
# Parent IDs are the event ids of all the sources of this event which
|
87
92
|
# were tracked prior to this event occurring
|
88
93
|
def find_parent_ids policy_node, object, ret, args
|
89
|
-
return if policy_node.is_a?(Contrast::Agent::Assess::Policy::SourceNode)
|
90
|
-
|
91
94
|
mapped = policy_node.sources.map do |source|
|
92
95
|
value_of_source(source, object, ret, args)
|
93
96
|
end
|
@@ -137,6 +140,8 @@ module Contrast
|
|
137
140
|
# one w/ a dup, but good enough for now. Trying not to make this too
|
138
141
|
# complicated. - HM 8/8/19
|
139
142
|
def save_target_arg target, tagged
|
143
|
+
return if @args.cs__frozen?
|
144
|
+
|
140
145
|
if target.is_a?(Integer)
|
141
146
|
@args[target] = cs__class.safe_dup(tagged)
|
142
147
|
return
|
@@ -172,27 +177,6 @@ module Contrast
|
|
172
177
|
end
|
173
178
|
end
|
174
179
|
|
175
|
-
# each policy_node has a certain number of levels down it calls
|
176
|
-
# before getting here. since we know them, we can skip
|
177
|
-
# right to the part of the stack we care about.
|
178
|
-
#
|
179
|
-
# Note: if our callstack changes, this number has to change
|
180
|
-
def get_call_start policy_node, invoked
|
181
|
-
# TODO: RUBY-440 audit these numbers to get stacktraces to render
|
182
|
-
# properly
|
183
|
-
base = case policy_node
|
184
|
-
when Contrast::Agent::Assess::Policy::SourceNode
|
185
|
-
6
|
186
|
-
when Contrast::Agent::Assess::Policy::PropagationNode
|
187
|
-
7
|
188
|
-
when Contrast::Agent::Assess::Policy::TriggerNode
|
189
|
-
7
|
190
|
-
else
|
191
|
-
2
|
192
|
-
end
|
193
|
-
base + invoked
|
194
|
-
end
|
195
|
-
|
196
180
|
# Convert this event into a DTM that TeamServer can consume
|
197
181
|
def to_dtm_event
|
198
182
|
event = Contrast::Api::Dtm::TraceEvent.new
|
@@ -220,20 +204,11 @@ module Contrast
|
|
220
204
|
end
|
221
205
|
|
222
206
|
# We delayed doing this as long as possible b/c it's expensive
|
223
|
-
stack = Contrast::Utils::StackTraceUtils.
|
224
|
-
|
225
|
-
rasp_element: false)
|
226
|
-
stack.each do |frame|
|
227
|
-
event.stack << frame
|
228
|
-
end
|
229
|
-
|
230
|
-
event.field_name = Contrast::Utils::StringUtils.force_utf8(source_name)
|
231
|
-
|
232
|
-
event_source_dtm = build_event_source_dtm
|
233
|
-
event.event_sources << event_source_dtm if event_source_dtm
|
207
|
+
stack = Contrast::Utils::StackTraceUtils.build_assess_stack_array(@caller)
|
208
|
+
event.stack += stack
|
234
209
|
|
235
210
|
event.object_id = event_id.to_i
|
236
|
-
|
211
|
+
parent_ids&.each do |id|
|
237
212
|
parent = Contrast::Api::Dtm::ParentObjectId.new
|
238
213
|
parent.id = id.to_i
|
239
214
|
event.parent_object_ids << parent
|
@@ -245,27 +220,6 @@ module Contrast
|
|
245
220
|
event
|
246
221
|
end
|
247
222
|
|
248
|
-
def forced_source_type
|
249
|
-
@_forced_source_type ||= Contrast::Utils::StringUtils.force_utf8(source_type)
|
250
|
-
end
|
251
|
-
|
252
|
-
def forced_source_name
|
253
|
-
@_forced_source_name ||= Contrast::Utils::StringUtils.force_utf8(source_name)
|
254
|
-
end
|
255
|
-
|
256
|
-
# Probably only for source events, but we'll go
|
257
|
-
# with source_type instead. java & .net support source_type
|
258
|
-
# in propagation events, so we'll future proof this
|
259
|
-
def build_event_source_dtm
|
260
|
-
# You can have a source w/o a name, but not w/o a type
|
261
|
-
return unless source_type
|
262
|
-
|
263
|
-
dtm = Contrast::Api::Dtm::TraceEventSource.new
|
264
|
-
dtm.type = forced_source_type
|
265
|
-
dtm.name = forced_source_name
|
266
|
-
dtm
|
267
|
-
end
|
268
|
-
|
269
223
|
# We're not going to build the signature string here, b/c we have all
|
270
224
|
# the composite pieces of it. Instead, we're going to let TeamServer
|
271
225
|
# render this for us.
|