contrast-agent 3.10.0 → 3.12.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (318) hide show
  1. checksums.yaml +4 -4
  2. data/.flayignore +1 -0
  3. data/.simplecov +5 -2
  4. data/ext/build_funchook.rb +12 -7
  5. data/ext/cs__assess_active_record_named/cs__active_record_named.c +12 -14
  6. data/ext/cs__assess_active_record_named/cs__active_record_named.h +1 -0
  7. data/ext/cs__assess_active_record_named/extconf.rb +3 -0
  8. data/ext/cs__assess_array/cs__assess_array.c +5 -6
  9. data/ext/cs__assess_array/cs__assess_array.h +1 -0
  10. data/ext/cs__assess_array/extconf.rb +3 -0
  11. data/ext/cs__assess_basic_object/cs__assess_basic_object.c +13 -11
  12. data/ext/cs__assess_basic_object/cs__assess_basic_object.h +2 -1
  13. data/ext/cs__assess_basic_object/extconf.rb +3 -0
  14. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +4 -3
  15. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -3
  16. data/ext/cs__assess_fiber_track/extconf.rb +3 -0
  17. data/ext/cs__assess_hash/cs__assess_hash.c +40 -17
  18. data/ext/cs__assess_hash/cs__assess_hash.h +4 -6
  19. data/ext/cs__assess_hash/extconf.rb +3 -0
  20. data/ext/cs__assess_kernel/cs__assess_kernel.c +11 -9
  21. data/ext/cs__assess_kernel/cs__assess_kernel.h +1 -0
  22. data/ext/cs__assess_kernel/extconf.rb +3 -0
  23. data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +3 -6
  24. data/ext/cs__assess_marshal_module/extconf.rb +3 -0
  25. data/ext/cs__assess_module/cs__assess_module.c +16 -14
  26. data/ext/cs__assess_module/cs__assess_module.h +3 -0
  27. data/ext/cs__assess_module/extconf.rb +3 -0
  28. data/ext/cs__assess_regexp/cs__assess_regexp.c +13 -9
  29. data/ext/cs__assess_regexp/cs__assess_regexp.h +1 -0
  30. data/ext/cs__assess_regexp/extconf.rb +3 -0
  31. data/ext/cs__assess_string/cs__assess_string.c +5 -8
  32. data/ext/cs__assess_string/cs__assess_string.h +2 -1
  33. data/ext/cs__assess_string/extconf.rb +3 -0
  34. data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +2 -2
  35. data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +3 -3
  36. data/ext/cs__assess_string_interpolation26/extconf.rb +3 -0
  37. data/ext/cs__assess_yield_track/cs__assess_yield_track.h +1 -1
  38. data/ext/cs__assess_yield_track/extconf.rb +3 -0
  39. data/ext/cs__common/cs__common.c +80 -1
  40. data/ext/cs__common/cs__common.h +34 -0
  41. data/ext/cs__common/extconf.rb +9 -8
  42. data/ext/cs__contrast_patch/cs__contrast_patch.h +1 -6
  43. data/ext/cs__contrast_patch/extconf.rb +3 -0
  44. data/ext/cs__protect_kernel/cs__protect_kernel.c +23 -12
  45. data/ext/cs__protect_kernel/cs__protect_kernel.h +1 -0
  46. data/ext/cs__protect_kernel/extconf.rb +3 -0
  47. data/ext/extconf_common.rb +10 -8
  48. data/funchook/autom4te.cache/requests +45 -45
  49. data/funchook/config.log +4 -4
  50. data/lib/contrast.rb +1 -1
  51. data/lib/contrast/agent.rb +32 -29
  52. data/lib/contrast/agent/assess.rb +1 -11
  53. data/lib/contrast/agent/assess/adjusted_span.rb +3 -1
  54. data/lib/contrast/agent/assess/contrast_event.rb +16 -62
  55. data/lib/contrast/agent/assess/events/event_factory.rb +25 -0
  56. data/lib/contrast/agent/assess/events/source_event.rb +83 -0
  57. data/lib/contrast/agent/assess/insulator.rb +0 -4
  58. data/lib/contrast/agent/assess/policy/patcher.rb +6 -2
  59. data/lib/contrast/agent/assess/policy/policy_node.rb +1 -8
  60. data/lib/contrast/agent/assess/policy/policy_scanner.rb +2 -2
  61. data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
  62. data/lib/contrast/agent/assess/policy/propagation_method.rb +68 -33
  63. data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -1
  64. data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
  65. data/lib/contrast/agent/assess/policy/propagator/custom.rb +1 -1
  66. data/lib/contrast/agent/assess/policy/propagator/database_write.rb +1 -3
  67. data/lib/contrast/agent/assess/policy/propagator/match_data.rb +80 -0
  68. data/lib/contrast/agent/assess/policy/propagator/select.rb +35 -22
  69. data/lib/contrast/agent/assess/policy/propagator/split.rb +26 -6
  70. data/lib/contrast/agent/assess/policy/propagator/substitution.rb +2 -0
  71. data/lib/contrast/agent/assess/policy/rewriter_patch.rb +37 -26
  72. data/lib/contrast/agent/assess/policy/source_method.rb +20 -20
  73. data/lib/contrast/agent/assess/policy/source_node.rb +0 -15
  74. data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +90 -0
  75. data/lib/contrast/agent/assess/policy/trigger/xpath.rb +57 -0
  76. data/lib/contrast/agent/assess/policy/trigger_method.rb +30 -45
  77. data/lib/contrast/agent/assess/policy/trigger_node.rb +7 -7
  78. data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +2 -31
  79. data/lib/contrast/agent/assess/properties.rb +5 -3
  80. data/lib/contrast/agent/assess/rule/base.rb +1 -20
  81. data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +23 -6
  82. data/lib/contrast/agent/assess/rule/redos.rb +4 -5
  83. data/lib/contrast/agent/assess/tag.rb +24 -14
  84. data/lib/contrast/agent/at_exit_hook.rb +16 -13
  85. data/lib/contrast/agent/class_reopener.rb +23 -8
  86. data/lib/contrast/agent/deadzone/policy/policy.rb +2 -2
  87. data/lib/contrast/agent/disable_reaction.rb +3 -4
  88. data/lib/contrast/agent/exclusion_matcher.rb +7 -48
  89. data/lib/contrast/agent/inventory/policy/datastores.rb +54 -0
  90. data/lib/contrast/agent/inventory/policy/policy.rb +1 -1
  91. data/lib/contrast/agent/middleware.rb +101 -260
  92. data/lib/contrast/agent/module_data.rb +2 -1
  93. data/lib/contrast/agent/patching/policy/after_load_patch.rb +13 -3
  94. data/lib/contrast/agent/patching/policy/after_load_patcher.rb +59 -47
  95. data/lib/contrast/agent/patching/policy/method_policy.rb +3 -3
  96. data/lib/contrast/agent/patching/policy/module_policy.rb +0 -25
  97. data/lib/contrast/agent/patching/policy/patch.rb +97 -23
  98. data/lib/contrast/agent/patching/policy/patcher.rb +28 -30
  99. data/lib/contrast/agent/patching/policy/policy.rb +7 -7
  100. data/lib/contrast/agent/patching/policy/policy_node.rb +3 -11
  101. data/lib/contrast/agent/patching/policy/trigger_node.rb +2 -5
  102. data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +63 -0
  103. data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +52 -0
  104. data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +68 -0
  105. data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +117 -0
  106. data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +54 -0
  107. data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +129 -0
  108. data/lib/contrast/agent/protect/policy/policy.rb +6 -6
  109. data/lib/contrast/agent/protect/policy/rule_applicator.rb +51 -0
  110. data/lib/contrast/agent/protect/rule.rb +0 -5
  111. data/lib/contrast/agent/protect/rule/base.rb +19 -37
  112. data/lib/contrast/agent/protect/rule/base_service.rb +3 -1
  113. data/lib/contrast/agent/protect/rule/cmd_injection.rb +12 -15
  114. data/lib/contrast/agent/protect/rule/default_scanner.rb +0 -13
  115. data/lib/contrast/agent/protect/rule/deserialization.rb +2 -0
  116. data/lib/contrast/agent/protect/rule/http_method_tampering.rb +2 -2
  117. data/lib/contrast/agent/protect/rule/no_sqli.rb +4 -4
  118. data/lib/contrast/agent/protect/rule/path_traversal.rb +6 -10
  119. data/lib/contrast/agent/protect/rule/sqli.rb +5 -4
  120. data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +2 -0
  121. data/lib/contrast/agent/protect/rule/xss.rb +2 -0
  122. data/lib/contrast/agent/protect/rule/xxe.rb +10 -4
  123. data/lib/contrast/agent/railtie.rb +3 -8
  124. data/lib/contrast/agent/reaction_processor.rb +5 -5
  125. data/lib/contrast/agent/request.rb +11 -18
  126. data/lib/contrast/agent/request_context.rb +16 -19
  127. data/lib/contrast/agent/request_handler.rb +35 -0
  128. data/lib/contrast/agent/response.rb +39 -86
  129. data/lib/contrast/agent/rewriter.rb +22 -10
  130. data/lib/contrast/agent/rule_set.rb +49 -0
  131. data/lib/contrast/agent/scope.rb +0 -6
  132. data/lib/contrast/agent/service_heartbeat.rb +3 -4
  133. data/lib/contrast/agent/socket_client.rb +25 -19
  134. data/lib/contrast/agent/static_analysis.rb +41 -0
  135. data/lib/contrast/agent/thread.rb +1 -1
  136. data/lib/contrast/agent/tracepoint_hook.rb +1 -5
  137. data/lib/contrast/agent/version.rb +1 -1
  138. data/lib/contrast/api.rb +1 -1
  139. data/lib/contrast/api/decorators.rb +14 -0
  140. data/lib/contrast/api/decorators/application_settings.rb +37 -0
  141. data/lib/contrast/api/decorators/application_update.rb +66 -0
  142. data/lib/contrast/api/decorators/input_analysis.rb +17 -0
  143. data/lib/contrast/api/decorators/server_features.rb +24 -0
  144. data/lib/contrast/api/speedracer.rb +28 -24
  145. data/lib/contrast/api/tcp_socket.rb +0 -2
  146. data/lib/contrast/components/agent.rb +34 -24
  147. data/lib/contrast/components/app_context.rb +45 -38
  148. data/lib/contrast/components/assess.rb +25 -15
  149. data/lib/contrast/components/config.rb +7 -5
  150. data/lib/contrast/components/contrast_service.rb +23 -71
  151. data/lib/contrast/components/heap_dump.rb +12 -8
  152. data/lib/contrast/components/interface.rb +15 -22
  153. data/lib/contrast/components/inventory.rb +5 -1
  154. data/lib/contrast/components/logger.rb +3 -68
  155. data/lib/contrast/components/protect.rb +40 -4
  156. data/lib/contrast/components/sampling.rb +22 -11
  157. data/lib/contrast/components/scope.rb +2 -52
  158. data/lib/contrast/components/settings.rb +42 -23
  159. data/lib/contrast/config/base_configuration.rb +1 -0
  160. data/lib/contrast/config/default_value.rb +1 -0
  161. data/lib/contrast/config/protect_rule_configuration.rb +0 -14
  162. data/lib/contrast/config/protect_rules_configuration.rb +0 -1
  163. data/lib/contrast/configuration.rb +2 -2
  164. data/lib/contrast/{extensions/ruby_core → extension}/assess.rb +12 -15
  165. data/lib/contrast/extension/assess/array.rb +77 -0
  166. data/lib/contrast/{extensions/ruby_core → extension}/assess/assess_extension.rb +29 -24
  167. data/lib/contrast/{extensions/ruby_core → extension}/assess/erb.rb +0 -8
  168. data/lib/contrast/extension/assess/eval_trigger.rb +78 -0
  169. data/lib/contrast/{extensions/ruby_core → extension}/assess/exec_trigger.rb +7 -9
  170. data/lib/contrast/extension/assess/fiber.rb +113 -0
  171. data/lib/contrast/extension/assess/hash.rb +39 -0
  172. data/lib/contrast/extension/assess/kernel.rb +110 -0
  173. data/lib/contrast/extension/assess/regexp.rb +84 -0
  174. data/lib/contrast/{extensions/ruby_core → extension}/assess/string.rb +18 -10
  175. data/lib/contrast/{extensions/ruby_core → extension}/delegator.rb +0 -0
  176. data/lib/contrast/{extensions/ruby_core → extension}/inventory.rb +2 -2
  177. data/lib/contrast/extension/kernel.rb +54 -0
  178. data/lib/contrast/{extensions/ruby_core → extension}/module.rb +0 -0
  179. data/lib/contrast/{extensions/ruby_core → extension}/protect.rb +2 -2
  180. data/lib/contrast/extension/protect/kernel.rb +44 -0
  181. data/lib/contrast/{extensions/ruby_core → extension}/protect/psych.rb +1 -1
  182. data/lib/contrast/{extensions/ruby_core → extension}/thread.rb +0 -0
  183. data/lib/contrast/framework/base_support.rb +32 -0
  184. data/lib/contrast/framework/manager.rb +59 -8
  185. data/lib/contrast/framework/platform_version.rb +1 -0
  186. data/lib/contrast/framework/rack/patch/session_cookie.rb +126 -0
  187. data/lib/contrast/framework/rack/patch/support.rb +24 -0
  188. data/lib/contrast/framework/rack/support.rb +22 -0
  189. data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +43 -0
  190. data/lib/contrast/framework/rails/patch/assess_configuration.rb +103 -0
  191. data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +31 -0
  192. data/lib/contrast/framework/rails/patch/support.rb +67 -0
  193. data/lib/contrast/framework/rails/rewrite/action_controller_railties_helper_inherited.rb +34 -0
  194. data/lib/contrast/framework/rails/rewrite/active_record_attribute_methods_read.rb +39 -0
  195. data/lib/contrast/framework/rails/rewrite/active_record_named.rb +73 -0
  196. data/lib/contrast/framework/rails/rewrite/active_record_time_zone_inherited.rb +33 -0
  197. data/lib/contrast/framework/rails/support.rb +115 -0
  198. data/lib/contrast/framework/sinatra/application_helper.rb +51 -0
  199. data/lib/contrast/framework/sinatra/patch/base.rb +83 -0
  200. data/lib/contrast/framework/sinatra/patch/support.rb +27 -0
  201. data/lib/contrast/framework/sinatra/support.rb +109 -0
  202. data/lib/contrast/framework/view_technologies_descriptor.rb +1 -0
  203. data/lib/contrast/logger/application.rb +80 -0
  204. data/lib/contrast/logger/log.rb +143 -0
  205. data/lib/contrast/logger/time.rb +50 -0
  206. data/lib/contrast/tasks/config.rb +54 -0
  207. data/lib/contrast/tasks/service.rb +3 -13
  208. data/lib/contrast/utils/assess/sampling_util.rb +4 -9
  209. data/lib/contrast/utils/assess/tracking_util.rb +7 -1
  210. data/lib/contrast/utils/boolean_util.rb +2 -2
  211. data/lib/contrast/utils/cache.rb +0 -11
  212. data/lib/contrast/utils/class_util.rb +21 -2
  213. data/lib/contrast/utils/gemfile_reader.rb +7 -5
  214. data/lib/contrast/utils/hash_digest.rb +2 -11
  215. data/lib/contrast/utils/heap_dump_util.rb +12 -11
  216. data/lib/contrast/utils/invalid_configuration_util.rb +4 -4
  217. data/lib/contrast/utils/inventory_util.rb +2 -2
  218. data/lib/contrast/utils/io_util.rb +1 -11
  219. data/lib/contrast/utils/job_servers_running.rb +6 -4
  220. data/lib/contrast/utils/object_share.rb +1 -28
  221. data/lib/contrast/utils/os.rb +1 -25
  222. data/lib/contrast/utils/service_response_util.rb +36 -60
  223. data/lib/contrast/utils/service_sender_util.rb +84 -23
  224. data/lib/contrast/utils/sinatra_helper.rb +0 -6
  225. data/lib/contrast/utils/stack_trace_utils.rb +86 -182
  226. data/lib/contrast/utils/string_utils.rb +18 -2
  227. data/lib/contrast/utils/tag_util.rb +11 -1
  228. data/lib/contrast/utils/thread_tracker.rb +2 -2
  229. data/lib/contrast/utils/timer.rb +0 -40
  230. data/resources/assess/policy.json +42 -71
  231. data/resources/inventory/policy.json +2 -2
  232. data/resources/protect/policy.json +15 -15
  233. data/ruby-agent.gemspec +11 -4
  234. data/service_executables/VERSION +1 -1
  235. data/service_executables/linux/contrast-service +0 -0
  236. data/service_executables/mac/contrast-service +0 -0
  237. metadata +122 -111
  238. data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
  239. data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
  240. data/ext/cs__assess_regexp_track/extconf.rb +0 -2
  241. data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
  242. data/lib/contrast/agent/assess/rule/csrf.rb +0 -66
  243. data/lib/contrast/agent/assess/rule/csrf/csrf_action.rb +0 -28
  244. data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +0 -73
  245. data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +0 -132
  246. data/lib/contrast/agent/assess/rule/response_scanning_rule.rb +0 -47
  247. data/lib/contrast/agent/assess/rule/response_watcher.rb +0 -36
  248. data/lib/contrast/agent/assess/rule/watcher.rb +0 -36
  249. data/lib/contrast/agent/feature_state.rb +0 -376
  250. data/lib/contrast/agent/logger_manager.rb +0 -116
  251. data/lib/contrast/agent/protect/rule/csrf.rb +0 -118
  252. data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +0 -103
  253. data/lib/contrast/agent/protect/rule/csrf/csrf_token_injector.rb +0 -85
  254. data/lib/contrast/agent/settings_state.rb +0 -152
  255. data/lib/contrast/delegators.rb +0 -9
  256. data/lib/contrast/delegators/application_update.rb +0 -32
  257. data/lib/contrast/extensions/framework/rack/cookie.rb +0 -24
  258. data/lib/contrast/extensions/framework/rack/request.rb +0 -24
  259. data/lib/contrast/extensions/framework/rack/response.rb +0 -23
  260. data/lib/contrast/extensions/framework/rails/action_controller_railties_helper_inherited.rb +0 -20
  261. data/lib/contrast/extensions/framework/rails/active_record.rb +0 -26
  262. data/lib/contrast/extensions/framework/rails/active_record_named.rb +0 -53
  263. data/lib/contrast/extensions/framework/rails/active_record_time_zone_inherited.rb +0 -21
  264. data/lib/contrast/extensions/framework/rails/buffer.rb +0 -28
  265. data/lib/contrast/extensions/framework/rails/configuration.rb +0 -27
  266. data/lib/contrast/extensions/framework/sinatra/base.rb +0 -59
  267. data/lib/contrast/extensions/ruby_core/assess/array.rb +0 -59
  268. data/lib/contrast/extensions/ruby_core/assess/basic_object.rb +0 -15
  269. data/lib/contrast/extensions/ruby_core/assess/fiber.rb +0 -124
  270. data/lib/contrast/extensions/ruby_core/assess/hash.rb +0 -22
  271. data/lib/contrast/extensions/ruby_core/assess/kernel.rb +0 -95
  272. data/lib/contrast/extensions/ruby_core/assess/module.rb +0 -14
  273. data/lib/contrast/extensions/ruby_core/assess/regexp.rb +0 -206
  274. data/lib/contrast/extensions/ruby_core/assess/tilt_template_trigger.rb +0 -73
  275. data/lib/contrast/extensions/ruby_core/assess/xpath_library_trigger.rb +0 -40
  276. data/lib/contrast/extensions/ruby_core/eval_trigger.rb +0 -52
  277. data/lib/contrast/extensions/ruby_core/inventory/datastores.rb +0 -37
  278. data/lib/contrast/extensions/ruby_core/protect/applies_command_injection_rule.rb +0 -72
  279. data/lib/contrast/extensions/ruby_core/protect/applies_deserialization_rule.rb +0 -60
  280. data/lib/contrast/extensions/ruby_core/protect/applies_no_sqli_rule.rb +0 -83
  281. data/lib/contrast/extensions/ruby_core/protect/applies_path_traversal_rule.rb +0 -123
  282. data/lib/contrast/extensions/ruby_core/protect/applies_sqli_rule.rb +0 -65
  283. data/lib/contrast/extensions/ruby_core/protect/applies_xxe_rule.rb +0 -143
  284. data/lib/contrast/extensions/ruby_core/protect/kernel.rb +0 -30
  285. data/lib/contrast/framework/rails_support.rb +0 -88
  286. data/lib/contrast/framework/sinatra_application_helper.rb +0 -49
  287. data/lib/contrast/framework/sinatra_support.rb +0 -94
  288. data/lib/contrast/utils/comment_range.rb +0 -19
  289. data/lib/contrast/utils/data_store_util.rb +0 -23
  290. data/lib/contrast/utils/environment_util.rb +0 -81
  291. data/lib/contrast/utils/performs_logging.rb +0 -152
  292. data/lib/contrast/utils/rack_assess_session_cookie.rb +0 -104
  293. data/lib/contrast/utils/rails_assess_configuration.rb +0 -95
  294. data/lib/contrast/utils/random_util.rb +0 -22
  295. data/resources/csrf/inject.js +0 -44
  296. data/resources/factory-bot-spec/spec_helper.rb +0 -30
  297. data/resources/rubocops/kernel/catch_cop.rb +0 -37
  298. data/resources/rubocops/kernel/require_cop.rb +0 -37
  299. data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
  300. data/resources/rubocops/module/autoload_cop.rb +0 -37
  301. data/resources/rubocops/module/const_defined_cop.rb +0 -37
  302. data/resources/rubocops/module/const_get_cop.rb +0 -37
  303. data/resources/rubocops/module/const_set_cop.rb +0 -37
  304. data/resources/rubocops/module/constants_cop.rb +0 -37
  305. data/resources/rubocops/module/name_cop.rb +0 -37
  306. data/resources/rubocops/object/class_cop.rb +0 -37
  307. data/resources/rubocops/object/freeze_cop.rb +0 -37
  308. data/resources/rubocops/object/frozen_cop.rb +0 -37
  309. data/resources/rubocops/object/is_a_cop.rb +0 -37
  310. data/resources/rubocops/object/method_cop.rb +0 -37
  311. data/resources/rubocops/object/respond_to_cop.rb +0 -37
  312. data/resources/rubocops/object/singleton_class_cop.rb +0 -37
  313. data/resources/rubocops/regexp/spelling_cop.rb +0 -44
  314. data/resources/rubocops/thread/new_cop.rb +0 -39
  315. data/resources/ruby-spec/ancestors_spec.rb +0 -70
  316. data/resources/ruby-spec/modulo_spec.rb +0 -831
  317. data/resources/ruby-spec/parameters_spec.rb +0 -261
  318. data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
@@ -1,10 +1,5 @@
1
1
  #include <ruby.h>
2
-
3
- typedef enum {
4
- IMPL_ALIAS_INSTANCE,
5
- IMPL_ALIAS_SINGLETON,
6
- IMPL_PREPEND
7
- } patch_impl;
2
+ #include "../cs__common/cs__common.h"
8
3
 
9
4
  /* Calls to Contrast modules */
10
5
  /* Contrast::Agent::Patching::Policy::PatchStatus */
@@ -1,2 +1,5 @@
1
+ # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
1
4
  $TO_MAKE = File.basename(__dir__)
2
5
  require_relative '../extconf_common'
@@ -9,12 +9,23 @@ static VALUE contrast_protect_fork(const int argc, const VALUE *argv,
9
9
  const VALUE self) {
10
10
  VALUE ret;
11
11
  if (rb_block_given_p()) {
12
+ /* We call our hook, but it's a little complicated.
13
+ * We wrap the fork block with our own lambda in
14
+ * order to instrument it. There are no public
15
+ * methods in the Ruby C API to set the prevailing
16
+ * block, so we have to use rb_funcall_with_block.
17
+ * Also, rb_funcall_with_block does a public call,
18
+ * and our method is private.
19
+ * So we (as a hack) temporarily set it to public.
20
+ */
12
21
  VALUE wrapper;
13
22
  wrapper =
14
- rb_funcall_with_block(rb_mKernel, rb_sym_protect_kernel_wrapper, 0,
15
- NULL, rb_block_proc());
23
+ rb_funcall_with_block(kernel_protect, rb_sym_protect_kernel_wrapper, 0,
24
+ NULL, rb_block_proc());
25
+ rb_funcall(rb_mKernel, rb_intern("public"), 1, ID2SYM(rb_sym_protect_kernel_fork));
16
26
  ret = rb_funcall_with_block(self, rb_sym_protect_kernel_fork, argc,
17
27
  argv, wrapper);
28
+ rb_funcall(rb_mKernel, rb_intern("private"), 1, ID2SYM(rb_sym_protect_kernel_fork));
18
29
  } else {
19
30
  ret = rb_funcall2(self, rb_sym_protect_kernel_fork, argc, argv);
20
31
  }
@@ -22,16 +33,16 @@ static VALUE contrast_protect_fork(const int argc, const VALUE *argv,
22
33
  }
23
34
 
24
35
  void Init_cs__protect_kernel(void) {
36
+ VALUE core_protect = rb_define_module_under(core_extensions, "Protect");
37
+ kernel_protect = rb_define_module_under(core_protect, "Kernel");
38
+ rb_sym_protect_kernel_wrapper = rb_intern("build_wrapper");
25
39
 
26
- rb_sym_protect_kernel_fork = rb_intern("cs__protect_kernel_fork");
27
- rb_sym_protect_kernel_wrapper = rb_intern("cs__protect_build_wrapper");
40
+ rb_sym_protect_kernel_fork = contrast_register_patch("Kernel",
41
+ "fork",
42
+ &contrast_protect_fork);
43
+
44
+ rb_sym_protect_kernel_fork = contrast_register_singleton_patch("Kernel",
45
+ "fork",
46
+ &contrast_protect_fork);
28
47
 
29
- VALUE singleton = rb_singleton_class(rb_mKernel);
30
- contrast_alias_method(rb_mKernel, "cs__protect_kernel_fork", "fork");
31
- contrast_alias_method(singleton, "cs__protect_kernel_fork", "fork");
32
- rb_define_module_function(rb_mKernel, "fork", contrast_protect_fork, -1);
33
- // Kernel#fork, as opposed to Kernel.fork, is private. Restore that.
34
- rb_funcall(rb_mKernel, rb_intern("public"), 1,
35
- ID2SYM(rb_intern("cs__protect_kernel_fork")));
36
- rb_funcall(rb_mKernel, rb_intern("private"), 1, ID2SYM(rb_intern("fork")));
37
48
  }
@@ -2,6 +2,7 @@
2
2
 
3
3
  extern VALUE rb_vm_top_self(void);
4
4
 
5
+ static VALUE kernel_protect;
5
6
  static VALUE rb_sym_protect_kernel_fork;
6
7
  static VALUE rb_sym_protect_kernel_wrapper;
7
8
 
@@ -1,2 +1,5 @@
1
+ # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
1
4
  $TO_MAKE = File.basename(__dir__)
2
5
  require_relative '../extconf_common'
@@ -1,6 +1,7 @@
1
1
  # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- require 'mkmf'
2
+ # frozen_string_literal: true
3
3
 
4
+ require 'mkmf'
4
5
  require_relative '../lib/contrast/agent/version'
5
6
 
6
7
  def name
@@ -8,7 +9,7 @@ def name
8
9
  end
9
10
 
10
11
  def make!
11
- create_makefile "#{name}/#{name}"
12
+ create_makefile "#{ name }/#{ name }"
12
13
  end
13
14
 
14
15
  def ext_path
@@ -18,23 +19,24 @@ def ext_path
18
19
  end
19
20
 
20
21
  def rpath_root
21
- if (darwin = !(/darwin/ =~ RUBY_PLATFORM).nil?)
22
- "@loader_path"
22
+ if (/darwin/ =~ RUBY_PLATFORM).nil?
23
+ '\$${ORIGIN}'
23
24
  else
24
- "\\$${ORIGIN}"
25
+ '@loader_path'
25
26
  end
26
27
  end
27
28
 
28
29
  def funchook_rpath!
29
- options = " -Wl,-rpath,#{rpath_root}/../../shared_libraries"
30
+ options = " -Wl,-rpath,#{ rpath_root }/../../shared_libraries"
30
31
  raise unless try_link('int main() {return 0;}', options)
32
+
31
33
  $LDFLAGS << options
32
- $LDFLAGS << " -L#{__dir__}/../shared_libraries"
34
+ $LDFLAGS << " -L#{ __dir__ }/../shared_libraries"
33
35
 
34
36
  find_header('funchook.h', ext_path)
35
37
  have_header('funchook.h')
36
38
 
37
- find_library('funchook', 'funchook_create', "../shared_libraries")
39
+ find_library('funchook', 'funchook_create', '../shared_libraries')
38
40
  find_library('funchook', 'funchook_install')
39
41
  find_library('funchook', 'funchook_prepare')
40
42
  have_library('funchook', 'funchook_create')
@@ -14,64 +14,64 @@
14
14
  'configure.ac'
15
15
  ],
16
16
  {
17
- 'LT_INIT' => 1,
17
+ '_AM_MAKEFILE_INCLUDE' => 1,
18
+ 'AM_MAINTAINER_MODE' => 1,
19
+ 'AM_NLS' => 1,
20
+ 'AM_ENABLE_MULTILIB' => 1,
21
+ 'AC_CONFIG_FILES' => 1,
22
+ 'AM_POT_TOOLS' => 1,
23
+ 'AM_INIT_AUTOMAKE' => 1,
24
+ 'AM_PROG_LIBTOOL' => 1,
25
+ 'AM_PROG_MOC' => 1,
26
+ 'AC_CONFIG_HEADERS' => 1,
27
+ 'AH_OUTPUT' => 1,
28
+ 'AM_PROG_AR' => 1,
18
29
  'AC_DEFINE_TRACE_LITERAL' => 1,
19
- 'AM_PROG_CXX_C_O' => 1,
20
- '_LT_AC_TAGCONFIG' => 1,
30
+ 'AC_REQUIRE_AUX_FILE' => 1,
21
31
  'AM_AUTOMAKE_VERSION' => 1,
32
+ 'm4_include' => 1,
22
33
  'AC_CANONICAL_BUILD' => 1,
23
- 'AC_SUBST_TRACE' => 1,
24
- 'AM_NLS' => 1,
25
- 'AM_PROG_LIBTOOL' => 1,
26
- 'AM_PROG_FC_C_O' => 1,
34
+ 'LT_INIT' => 1,
35
+ 'AC_LIBSOURCE' => 1,
27
36
  'm4_pattern_allow' => 1,
28
- 'AC_CANONICAL_HOST' => 1,
29
- 'AC_SUBST' => 1,
30
- '_AM_COND_IF' => 1,
31
- 'AH_OUTPUT' => 1,
37
+ 'AM_PROG_CC_C_O' => 1,
38
+ 'AM_PROG_FC_C_O' => 1,
39
+ 'AC_SUBST_TRACE' => 1,
40
+ 'AC_FC_PP_DEFINE' => 1,
41
+ 'AC_PROG_LIBTOOL' => 1,
32
42
  'LT_SUPPORTED_TAG' => 1,
33
- 'AC_INIT' => 1,
34
- 'AM_CONDITIONAL' => 1,
35
- 'AM_XGETTEXT_OPTION' => 1,
43
+ 'AC_SUBST' => 1,
36
44
  'sinclude' => 1,
37
- 'AC_CONFIG_HEADERS' => 1,
45
+ 'AM_MAKEFILE_INCLUDE' => 1,
38
46
  '_AM_SUBST_NOTMAKE' => 1,
39
- 'AM_POT_TOOLS' => 1,
40
- '_AM_MAKEFILE_INCLUDE' => 1,
41
- 'AM_PROG_F77_C_O' => 1,
42
- 'AC_CONFIG_LINKS' => 1,
43
- 'AC_FC_PP_DEFINE' => 1,
44
- 'AM_SILENT_RULES' => 1,
45
- 'AC_CONFIG_FILES' => 1,
46
- 'AC_FC_FREEFORM' => 1,
47
- '_m4_warn' => 1,
48
- 'AM_MAINTAINER_MODE' => 1,
47
+ 'AM_CONDITIONAL' => 1,
48
+ '_LT_AC_TAGCONFIG' => 1,
49
49
  'include' => 1,
50
- 'm4_include' => 1,
51
- 'AC_LIBSOURCE' => 1,
52
- 'AC_FC_PP_SRCEXT' => 1,
53
- 'LT_CONFIG_LTDL_DIR' => 1,
54
- '_AM_COND_ENDIF' => 1,
55
- 'AC_PROG_LIBTOOL' => 1,
56
- 'AM_PROG_MOC' => 1,
50
+ 'AC_CANONICAL_TARGET' => 1,
51
+ 'm4_sinclude' => 1,
52
+ 'AC_INIT' => 1,
53
+ '_AM_COND_ELSE' => 1,
54
+ 'AC_FC_FREEFORM' => 1,
55
+ 'AM_PATH_GUILE' => 1,
57
56
  'AM_GNU_GETTEXT_INTL_SUBDIR' => 1,
58
- 'AM_GNU_GETTEXT' => 1,
59
- 'AM_ENABLE_MULTILIB' => 1,
60
- 'AC_REQUIRE_AUX_FILE' => 1,
61
- 'AM_MAKEFILE_INCLUDE' => 1,
57
+ 'AM_SILENT_RULES' => 1,
58
+ 'AM_PROG_F77_C_O' => 1,
59
+ 'AC_FC_PP_SRCEXT' => 1,
62
60
  'AC_CANONICAL_SYSTEM' => 1,
63
- 'AM_PROG_CC_C_O' => 1,
61
+ 'AC_CANONICAL_HOST' => 1,
62
+ 'm4_pattern_forbid' => 1,
63
+ '_AM_COND_IF' => 1,
64
+ 'AM_PROG_CXX_C_O' => 1,
64
65
  'AC_FC_SRCEXT' => 1,
65
- 'AM_INIT_AUTOMAKE' => 1,
66
66
  'AC_CONFIG_LIBOBJ_DIR' => 1,
67
- 'm4_pattern_forbid' => 1,
68
- 'AC_CANONICAL_TARGET' => 1,
69
- 'm4_sinclude' => 1,
70
- 'AC_CONFIG_SUBDIRS' => 1,
67
+ 'AM_XGETTEXT_OPTION' => 1,
68
+ '_AM_COND_ENDIF' => 1,
69
+ 'LT_CONFIG_LTDL_DIR' => 1,
71
70
  'AC_CONFIG_AUX_DIR' => 1,
72
- '_AM_COND_ELSE' => 1,
73
- 'AM_PATH_GUILE' => 1,
74
- 'AM_PROG_AR' => 1
71
+ 'AC_CONFIG_SUBDIRS' => 1,
72
+ 'AM_GNU_GETTEXT' => 1,
73
+ 'AC_CONFIG_LINKS' => 1,
74
+ '_m4_warn' => 1
75
75
  }
76
76
  ], 'Autom4te::Request' )
77
77
  );
@@ -10,11 +10,11 @@ generated by GNU Autoconf 2.69. Invocation command line was
10
10
  ## Platform. ##
11
11
  ## --------- ##
12
12
 
13
- hostname = b28fd605-e326-4651-9c62-dace7786d221-5nfw6
13
+ hostname = a193cfcc-bb72-46e9-914d-bb7806a0d5f9-k7pzb
14
14
  uname -m = x86_64
15
- uname -r = 4.19.95-flatcar
15
+ uname -r = 4.19.107-flatcar
16
16
  uname -s = Linux
17
- uname -v = #1 SMP Sat Feb 8 07:25:12 -00 2020
17
+ uname -v = #1 SMP Thu Mar 26 19:48:36 -00 2020
18
18
 
19
19
  /usr/bin/uname -p = unknown
20
20
  /bin/uname -X = unknown
@@ -326,7 +326,7 @@ generated by GNU Autoconf 2.69. Invocation command line was
326
326
  CONFIG_COMMANDS =
327
327
  $ ./config.status
328
328
 
329
- on b28fd605-e326-4651-9c62-dace7786d221-5nfw6
329
+ on a193cfcc-bb72-46e9-914d-bb7806a0d5f9-k7pzb
330
330
 
331
331
  config.status:822: creating Makefile
332
332
  config.status:822: creating src/Makefile
@@ -51,7 +51,7 @@ cs__scoped_require 'contrast/internal_exception'
51
51
 
52
52
  # shared utils
53
53
  cs__scoped_require 'contrast/utils/timer'
54
- cs__scoped_require 'contrast/utils/random_util'
55
54
  cs__scoped_require 'contrast/utils/preflight_util'
56
55
 
56
+ cs__scoped_require 'contrast/utils/assess/sampling_util'
57
57
  cs__scoped_require 'contrast/agent'
@@ -5,9 +5,22 @@ cs__scoped_require 'English'
5
5
 
6
6
  # This must precede other Contrast C extensions
7
7
  cs__scoped_require 'cs__common/cs__common'
8
-
9
- cs__scoped_require 'contrast/extensions/ruby_core/delegator'
10
- cs__scoped_require 'contrast/extensions/ruby_core/module'
8
+ # This must precede any patching we do as we log patches and we shouldn't cause
9
+ # requires to happen during that process.
10
+ cs__scoped_require 'contrast/components/logger'
11
+
12
+ # defining instrumentation, this must precede core extensions
13
+ # because they need to register their patches
14
+ cs__scoped_require 'contrast/agent/patching/policy/patcher'
15
+ cs__scoped_require 'contrast/agent/patching/policy/patch'
16
+
17
+ # core extensions
18
+ cs__scoped_require 'contrast/extension/assess'
19
+ cs__scoped_require 'contrast/extension/delegator'
20
+ cs__scoped_require 'contrast/extension/inventory'
21
+ cs__scoped_require 'contrast/extension/module'
22
+ cs__scoped_require 'contrast/extension/protect'
23
+ cs__scoped_require 'contrast/extension/protect/kernel'
11
24
 
12
25
  cs__scoped_require 'contrast/utils/object_share'
13
26
  cs__scoped_require 'contrast/utils/boolean_util'
@@ -20,20 +33,11 @@ cs__scoped_require 'contrast/common_agent_configuration'
20
33
  cs__scoped_require 'contrast/utils/hash_digest'
21
34
  cs__scoped_require 'contrast/utils/invalid_configuration_util'
22
35
 
23
- cs__scoped_require 'contrast/utils/cache'
24
-
25
36
  # scoping
26
37
  cs__scoped_require 'contrast/agent/scope'
27
38
 
28
39
  cs__scoped_require 'contrast/utils/thread_tracker'
29
40
 
30
- cs__scoped_require 'contrast/api'
31
-
32
- cs__scoped_require 'contrast/utils/resource_loader'
33
- cs__scoped_require 'contrast/utils/duck_utils'
34
- cs__scoped_require 'contrast/agent/tracepoint_hook'
35
- cs__scoped_require 'contrast/agent/at_exit_hook'
36
-
37
41
  # Framework support
38
42
  cs__scoped_require 'contrast/framework/manager'
39
43
 
@@ -50,16 +54,17 @@ module Contrast
50
54
  end
51
55
  end
52
56
 
53
- # keep tracker of logger updates
54
- cs__scoped_require 'contrast/agent/logger_manager'
57
+ cs__scoped_require 'contrast/api'
58
+
59
+ cs__scoped_require 'contrast/utils/resource_loader'
60
+ cs__scoped_require 'contrast/utils/duck_utils'
61
+ cs__scoped_require 'contrast/agent/tracepoint_hook'
62
+ cs__scoped_require 'contrast/agent/at_exit_hook'
55
63
 
56
64
  # communication with contrast service
57
65
  cs__scoped_require 'contrast/agent/exclusion_matcher'
58
66
  cs__scoped_require 'contrast/agent/socket_client'
59
67
 
60
- # config interface
61
- cs__scoped_require 'contrast/agent/feature_state'
62
-
63
68
  # threads that handle contrast scope
64
69
  cs__scoped_require 'contrast/agent/thread'
65
70
 
@@ -68,17 +73,6 @@ cs__scoped_require 'contrast/agent/request_context'
68
73
 
69
74
  cs__scoped_require 'contrast/agent/assess'
70
75
 
71
- # Unconditional early-framework patches.
72
- # These happen regardless of analysis mode, & should be lightweight.
73
- cs__scoped_require 'contrast/utils/rack_assess_session_cookie'
74
- cs__scoped_require 'contrast/utils/rails_assess_configuration'
75
- # Also: should document the necessity of patching this ASAP.
76
- # In Rails, session configuration occurs extremely early & only once.
77
- # If we defer our patching of the rails session configuration too long
78
- # (i.e., where we normally patch) we will miss the configuration
79
- # and will never be able to report session misconfiguration rules.
80
- cs__scoped_require 'contrast/extensions/framework/rails/configuration' if defined?(Rails)
81
-
82
76
  # protect rules
83
77
  cs__scoped_require 'contrast/agent/protect/rule'
84
78
 
@@ -87,4 +81,13 @@ cs__scoped_require 'contrast/utils/gemfile_reader'
87
81
 
88
82
  # rack event monitoring
89
83
  cs__scoped_require 'contrast/agent/middleware'
90
- cs__scoped_require 'contrast/agent/railtie' if defined?(Rails) && Rails::VERSION::MAJOR.to_i >= 3
84
+
85
+ # TODO: RUBY-919
86
+ # Refactor to use Contrast::Framework::Manager
87
+ # Contrast::Framework::Manager.before_load_patches!
88
+ if defined?(::Rails)
89
+ cs__scoped_require 'contrast/framework/rails/patch/support'
90
+ cs__scoped_require 'contrast/framework/rails/patch/rails_application_configuration'
91
+ Contrast::Framework::Rails::Patch::RailsApplicationConfiguration.instrument
92
+ cs__scoped_require 'contrast/agent/railtie' if ::Rails::VERSION::MAJOR.to_i >= 3
93
+ end
@@ -17,28 +17,18 @@ module Contrast
17
17
  # Rules - generic
18
18
  cs__scoped_require 'contrast/agent/assess/rule'
19
19
  cs__scoped_require 'contrast/agent/assess/rule/base'
20
- cs__scoped_require 'contrast/agent/assess/rule/response_scanning_rule'
21
- cs__scoped_require 'contrast/agent/assess/rule/watcher'
22
- cs__scoped_require 'contrast/agent/assess/rule/response_watcher'
23
20
 
24
21
  # Dynamic Sources
25
22
  cs__scoped_require 'contrast/agent/assess/policy/dynamic_source_factory'
26
23
 
27
- # Rule: CSRF
28
- cs__scoped_require 'contrast/agent/assess/rule/csrf'
29
- cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_applicator'
30
- cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_action'
31
- cs__scoped_require 'contrast/agent/assess/rule/csrf/csrf_watcher'
32
-
33
24
  # Rule: REDOS
34
25
  cs__scoped_require 'contrast/agent/assess/rule/redos'
35
26
 
36
27
  # reporting / tracking
37
28
  cs__scoped_require 'contrast/agent/assess/insulator'
38
29
  cs__scoped_require 'contrast/agent/assess/properties'
39
- cs__scoped_require 'contrast/agent/assess/frozen_properties'
40
30
  cs__scoped_require 'contrast/agent/assess/tag'
41
- cs__scoped_require 'contrast/agent/assess/contrast_event'
31
+ cs__scoped_require 'contrast/agent/assess/events/event_factory'
42
32
  end
43
33
  end
44
34
  end
@@ -14,7 +14,9 @@ module Contrast
14
14
  # Note: Unlike ranges, it is assumed that the stop
15
15
  # value is exclusive, not inclusive. [start, end)
16
16
  class AdjustedSpan
17
- attr_accessor :start, :stop
17
+ attr_accessor :stop
18
+ attr_reader :start
19
+
18
20
  def initialize start = nil, stop = nil
19
21
  @start = start if start
20
22
  @stop = stop if stop
@@ -1,8 +1,14 @@
1
1
  # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
2
  # frozen_string_literal: true
3
3
 
4
+ cs__scoped_require 'contrast/utils/assess/tracking_util'
4
5
  cs__scoped_require 'contrast/utils/class_util'
6
+ cs__scoped_require 'contrast/utils/duck_utils'
7
+ cs__scoped_require 'contrast/utils/object_share'
5
8
  cs__scoped_require 'contrast/utils/prevent_serialization'
9
+ cs__scoped_require 'contrast/utils/stack_trace_utils'
10
+ cs__scoped_require 'contrast/utils/string_utils'
11
+ cs__scoped_require 'contrast/utils/timer'
6
12
 
7
13
  module Contrast
8
14
  module Agent
@@ -53,8 +59,7 @@ module Contrast
53
59
  end
54
60
  end
55
61
 
56
- attr_accessor :source_name
57
- attr_reader :event_id, :source_type, :parent_ids
62
+ attr_reader :event_id, :parent_ids
58
63
 
59
64
  # We need this to track the parent id's of events to build up a flow
60
65
  # chart of the finding
@@ -69,13 +74,13 @@ module Contrast
69
74
  end
70
75
  end
71
76
 
72
- def initialize policy_node, tagged, object, ret, args, invoked = 0, source_type = nil, source_name = nil
73
- @caller = caller_locations(get_call_start(policy_node, invoked), 10)
77
+ def initialize policy_node, tagged, object, ret, args
74
78
  @policy_node = policy_node
79
+ # so long as this event is built in a factory, we know Contrast Code
80
+ # will be the first three events
81
+ @caller = caller(3, 20)
75
82
  @time = Contrast::Utils::Timer.now_ms
76
83
  @thread = Thread.current.object_id
77
- @source_type = source_type
78
- @source_name = source_name
79
84
 
80
85
  # These methods rely on the above being set. Don't move them!
81
86
  @event_id = Contrast::Agent::Assess::ContrastEvent.next_atomic_id
@@ -86,8 +91,6 @@ module Contrast
86
91
  # Parent IDs are the event ids of all the sources of this event which
87
92
  # were tracked prior to this event occurring
88
93
  def find_parent_ids policy_node, object, ret, args
89
- return if policy_node.is_a?(Contrast::Agent::Assess::Policy::SourceNode)
90
-
91
94
  mapped = policy_node.sources.map do |source|
92
95
  value_of_source(source, object, ret, args)
93
96
  end
@@ -137,6 +140,8 @@ module Contrast
137
140
  # one w/ a dup, but good enough for now. Trying not to make this too
138
141
  # complicated. - HM 8/8/19
139
142
  def save_target_arg target, tagged
143
+ return if @args.cs__frozen?
144
+
140
145
  if target.is_a?(Integer)
141
146
  @args[target] = cs__class.safe_dup(tagged)
142
147
  return
@@ -172,27 +177,6 @@ module Contrast
172
177
  end
173
178
  end
174
179
 
175
- # each policy_node has a certain number of levels down it calls
176
- # before getting here. since we know them, we can skip
177
- # right to the part of the stack we care about.
178
- #
179
- # Note: if our callstack changes, this number has to change
180
- def get_call_start policy_node, invoked
181
- # TODO: RUBY-440 audit these numbers to get stacktraces to render
182
- # properly
183
- base = case policy_node
184
- when Contrast::Agent::Assess::Policy::SourceNode
185
- 6
186
- when Contrast::Agent::Assess::Policy::PropagationNode
187
- 7
188
- when Contrast::Agent::Assess::Policy::TriggerNode
189
- 7
190
- else
191
- 2
192
- end
193
- base + invoked
194
- end
195
-
196
180
  # Convert this event into a DTM that TeamServer can consume
197
181
  def to_dtm_event
198
182
  event = Contrast::Api::Dtm::TraceEvent.new
@@ -220,20 +204,11 @@ module Contrast
220
204
  end
221
205
 
222
206
  # We delayed doing this as long as possible b/c it's expensive
223
- stack = Contrast::Utils::StackTraceUtils.to_dtm_stack(
224
- stack_locations: @caller,
225
- rasp_element: false)
226
- stack.each do |frame|
227
- event.stack << frame
228
- end
229
-
230
- event.field_name = Contrast::Utils::StringUtils.force_utf8(source_name)
231
-
232
- event_source_dtm = build_event_source_dtm
233
- event.event_sources << event_source_dtm if event_source_dtm
207
+ stack = Contrast::Utils::StackTraceUtils.build_assess_stack_array(@caller)
208
+ event.stack += stack
234
209
 
235
210
  event.object_id = event_id.to_i
236
- @parent_ids&.each do |id|
211
+ parent_ids&.each do |id|
237
212
  parent = Contrast::Api::Dtm::ParentObjectId.new
238
213
  parent.id = id.to_i
239
214
  event.parent_object_ids << parent
@@ -245,27 +220,6 @@ module Contrast
245
220
  event
246
221
  end
247
222
 
248
- def forced_source_type
249
- @_forced_source_type ||= Contrast::Utils::StringUtils.force_utf8(source_type)
250
- end
251
-
252
- def forced_source_name
253
- @_forced_source_name ||= Contrast::Utils::StringUtils.force_utf8(source_name)
254
- end
255
-
256
- # Probably only for source events, but we'll go
257
- # with source_type instead. java & .net support source_type
258
- # in propagation events, so we'll future proof this
259
- def build_event_source_dtm
260
- # You can have a source w/o a name, but not w/o a type
261
- return unless source_type
262
-
263
- dtm = Contrast::Api::Dtm::TraceEventSource.new
264
- dtm.type = forced_source_type
265
- dtm.name = forced_source_name
266
- dtm
267
- end
268
-
269
223
  # We're not going to build the signature string here, b/c we have all
270
224
  # the composite pieces of it. Instead, we're going to let TeamServer
271
225
  # render this for us.