contrast-agent 3.8.4 → 6.9.0

data/exe/contrast_service

@@ -1,29 +0,0 @@
-#!/usr/bin/env ruby
-# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-def mac?
-  RUBY_PLATFORM.match?(/darwin/)
-end
-
-def windows?
-  RUBY_PLATFORM.match?(/cygwin|mswin|mingw|bccwin|wince|emx/)
-end
-
-def path
-  base_path = "#{ File.dirname(__FILE__) }/.."
-  if mac?
-    "#{ base_path }/service_executables/mac/contrast-service"
-  elsif windows?
-    "#{ base_path }/service_executables/windows/contrast-service.exe"
-  else
-    "#{ base_path }/service_executables/linux/contrast-service"
-  end
-end
-
-executable_path = path
-if File.exist?(executable_path)
-  Kernel.exec(executable_path)
-else
-  puts "Service executable not found at: #{ executable_path }"
-end

data/ext/cs__assess_active_record_named/cs__active_record_named.c

@@ -1,47 +0,0 @@
-/* Copyright (c) 2020 Contrast Security, Inc.  See
- * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */
-
-#include "cs__active_record_named.h"
-#include <ruby.h>
-
-VALUE contrast_assess_active_record_scope(const int argc, const VALUE *argv,
-                                          const VALUE self) {
-    /*
-     * The ActiveRecord::Scoping::Named::ClassMethods#scope method allows for
-     * the creation of methods at runtime. In order to trigger on interpolation
-     * within that new method, we must rewrite the method body BEFORE it can be
-     * used in the original #scope method, replacing interpolations with our
-     * String append logic. As this deviates from standard Assess behavior
-     * (changes the application behavior and acts on an input BEFORE it can be
-     * passed to the original method), I think it deserves to be in a custom
-     * call. -HM
-     */
-    VALUE new_body, ret;
-    VALUE new_args[3];
-    new_body = rb_funcall(self, rb_sym_assess_rewrite, 2, argv[0], argv[1]);
-    new_args[0] = argv[0];
-    if (NIL_P(new_body)) {
-        new_args[1] = argv[1];
-    } else {
-        new_args[1] = new_body;
-    }
-    new_args[2] = argv[2];
-    ret = rb_funcall2(self, rb_sym_assess_scope, argc, new_args);
-    return ret;
-}
-
-void Init_cs__assess_active_record_named(void) {
-    rb_sym_assess_rewrite = rb_intern("_cs__rewrite");
-    rb_sym_assess_scope = rb_intern("cs__patched_scope");
-
-    VALUE active_record_module = rb_define_module("ActiveRecord");
-    VALUE scoping_module =
-        rb_define_module_under(active_record_module, "Scoping");
-    VALUE named_module = rb_define_module_under(scoping_module, "Named");
-    VALUE class_methods_module =
-        rb_define_module_under(named_module, "ClassMethods");
-
-    contrast_alias_method(class_methods_module, "cs__patched_scope", "scope");
-    rb_define_method(class_methods_module, "scope",
-                     contrast_assess_active_record_scope, -1);
-}

data/ext/cs__assess_active_record_named/cs__active_record_named.h

@@ -1,10 +0,0 @@
-#include <ruby.h>
-
-static VALUE rb_sym_assess_rewrite;
-static VALUE rb_sym_assess_scope;
-
-void contrast_alias_method(const VALUE target, const char *to,
-                           const char *from);
-
-VALUE contrast_assess_active_record_scope(const int argc, const VALUE *argv,
-                                          const VALUE self);

data/ext/cs__assess_active_record_named/extconf.rb

@@ -1,2 +0,0 @@
-$TO_MAKE = File.basename(__dir__)
-require_relative '../extconf_common'

data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c

@@ -1,63 +0,0 @@
-/* Copyright (c) 2020 Contrast Security, Inc.  See
- * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */
-
-#include "cs__assess_regexp_track.h"
-#include <funchook.h>
-#include <ruby.h>
-
-static VALUE rb_reg_match_pre_hook(VALUE match) {
-    VALUE result = rb_reg_match_pre_original(match);
-    result = rb_funcall(regexp_class, track_rb_pre_match, 2, match, result);
-    return result;
-}
-
-static VALUE rb_reg_match_post_hook(VALUE match) {
-    VALUE result = rb_reg_match_post_original(match);
-    result = rb_funcall(regexp_class, track_rb_post_match, 2, match, result);
-    return result;
-}
-
-static VALUE rb_reg_match_last_hook(VALUE match) {
-    VALUE result = rb_reg_match_last_original(match);
-    result =
-        rb_funcall(regexp_class, track_rb_reg_match_last, 2, match, result);
-    return result;
-}
-
-static VALUE rb_reg_nth_match_hook(int nth, VALUE match) {
-    VALUE result = rb_reg_nth_match_original(nth, match);
-    result = rb_funcall(regexp_class, track_rb_n_match, 2, match, result);
-    return result;
-}
-
-static int install_regexp_hooks() {
-    funchook_t *funchook = funchook_create();
-
-    rb_reg_match_pre_original = rb_reg_match_pre;
-    funchook_prepare(funchook, (void **)&rb_reg_match_pre_original,
-                     rb_reg_match_pre_hook);
-
-    rb_reg_match_post_original = rb_reg_match_post;
-    funchook_prepare(funchook, (void **)&rb_reg_match_post_original,
-                     rb_reg_match_post_hook);
-
-    rb_reg_match_last_original = rb_reg_match_last;
-    funchook_prepare(funchook, (void **)&rb_reg_match_last_original,
-                     rb_reg_match_last_hook);
-
-    rb_reg_nth_match_original = rb_reg_nth_match;
-    funchook_prepare(funchook, (void **)&rb_reg_nth_match_original,
-                     rb_reg_nth_match_hook);
-
-    funchook_install(funchook, 0);
-    return 0;
-}
-
-void Init_cs__assess_regexp_track(void) {
-    regexp_class = rb_define_class("Regexp", rb_cObject);
-    track_rb_n_match = rb_intern("track_rb_n_match");
-    track_rb_pre_match = rb_intern("track_rb_pre_match");
-    track_rb_post_match = rb_intern("track_rb_post_match");
-    track_rb_reg_match_last = rb_intern("track_rb_reg_match_last");
-    install_regexp_hooks();
-}

data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h

@@ -1,29 +0,0 @@
-#include <funchook.h>
-#include <ruby.h>
-
-static VALUE regexp_class;
-static VALUE track_rb_n_match;
-static VALUE track_rb_pre_match;
-static VALUE track_rb_post_match;
-static VALUE track_rb_reg_match_last;
-
-VALUE rb_reg_match_pre(VALUE match);
-static VALUE *(*rb_reg_match_pre_original)(VALUE match);
-
-VALUE rb_reg_match_post(VALUE match);
-static VALUE *(*rb_reg_match_post_original)(VALUE match);
-
-VALUE rb_reg_match_last(VALUE match);
-static VALUE *(*rb_reg_match_last_original)(VALUE match);
-
-VALUE rb_reg_nth_match(int nth, VALUE match);
-static VALUE *(*rb_reg_nth_match_original)(int nth, VALUE match);
-
-static VALUE rb_reg_match_pre_hook(VALUE match);
-static VALUE rb_reg_match_post_hook(VALUE match);
-static VALUE rb_reg_match_last_hook(VALUE match);
-static VALUE rb_reg_nth_match_hook(int nth, VALUE match);
-
-static int install_regexp_hooks();
-
-void Init_cs__assess_regexp_track(void);

data/ext/cs__assess_regexp_track/extconf.rb

@@ -1,2 +0,0 @@
-$TO_MAKE = File.basename(__dir__)
-require_relative '../extconf_common'

data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c

@@ -1,31 +0,0 @@
-/* Copyright (c) 2020 Contrast Security, Inc.  See
- * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */
-
-#include "cs__assess_string_interpolation26.h"
-#include "../cs__common/cs__common.h"
-#include <funchook.h>
-#include <ruby.h>
-
-static VALUE rb_str_concat_literals_hook(size_t num, VALUE *strary) {
-    VALUE result = rb_str_concat_literals_original(num, strary);
-    VALUE rb_params = rb_ary_new_from_values((int)num, strary);
-    rb_funcall(string_class, track_interpolation, 2, rb_params, result);
-    return result;
-}
-
-static int install_hooks() {
-    funchook_t *funchook = funchook_create();
-
-    rb_str_concat_literals_original = rb_str_concat_literals;
-    funchook_prepare(funchook, (void **)&rb_str_concat_literals_original,
-                     rb_str_concat_literals_hook);
-
-    funchook_install(funchook, 0);
-    return 0;
-}
-
-void Init_cs__assess_string_interpolation26(void) {
-    string_class = rb_define_class_under(core_assess, "StringPropagator", rb_cObject);
-    track_interpolation = rb_intern("track_interpolation");
-    install_hooks();
-}

data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h

@@ -1,13 +0,0 @@
-#include <ruby.h>
-
-static VALUE string_class;
-static VALUE track_interpolation;
-
-void *rb_str_concat_literals(size_t num, const VALUE *strary);
-void *(*rb_str_concat_literals_original)(size_t, const VALUE *);
-
-static VALUE rb_str_concat_literals_hook(size_t num, VALUE *strary);
-
-static int install_hooks();
-
-void Init_cs__assess_string_interpolation26(void);

data/ext/cs__assess_string_interpolation26/extconf.rb

@@ -1,2 +0,0 @@
-$TO_MAKE = File.basename(__dir__)
-require_relative '../extconf_common'

data/ext/cs__protect_kernel/cs__protect_kernel.c

@@ -1,37 +0,0 @@
-/* Copyright (c) 2020 Contrast Security, Inc.  See
- * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */
-
-#include "cs__protect_kernel.h"
-#include "../cs__common/cs__common.h"
-#include <ruby.h>
-
-static VALUE contrast_protect_fork(const int argc, const VALUE *argv,
-                                   const VALUE self) {
-    VALUE ret;
-    if (rb_block_given_p()) {
-        VALUE wrapper;
-        wrapper =
-            rb_funcall_with_block(rb_mKernel, rb_sym_protect_kernel_wrapper, 0,
-                                  NULL, rb_block_proc());
-        ret = rb_funcall_with_block(self, rb_sym_protect_kernel_fork, argc,
-                                    argv, wrapper);
-    } else {
-        ret = rb_funcall2(self, rb_sym_protect_kernel_fork, argc, argv);
-    }
-    return ret;
-}
-
-void Init_cs__protect_kernel(void) {
-
-    rb_sym_protect_kernel_fork = rb_intern("cs__protect_kernel_fork");
-    rb_sym_protect_kernel_wrapper = rb_intern("cs__protect_build_wrapper");
-
-    VALUE singleton = rb_singleton_class(rb_mKernel);
-    contrast_alias_method(rb_mKernel, "cs__protect_kernel_fork", "fork");
-    contrast_alias_method(singleton, "cs__protect_kernel_fork", "fork");
-    rb_define_module_function(rb_mKernel, "fork", contrast_protect_fork, -1);
-    // Kernel#fork, as opposed to Kernel.fork, is private. Restore that.
-    rb_funcall(rb_mKernel, rb_intern("public"), 1,
-               ID2SYM(rb_intern("cs__protect_kernel_fork")));
-    rb_funcall(rb_mKernel, rb_intern("private"), 1, ID2SYM(rb_intern("fork")));
-}

data/ext/cs__protect_kernel/cs__protect_kernel.h

@@ -1,11 +0,0 @@
-#include <ruby.h>
-
-extern VALUE rb_vm_top_self(void);
-
-static VALUE rb_sym_protect_kernel_fork;
-static VALUE rb_sym_protect_kernel_wrapper;
-
-static VALUE
-contrast_protect_fork(const int argc, const VALUE *argv, const VALUE self);
-
-void Init_cs__protect_kernel(void);

data/ext/cs__protect_kernel/extconf.rb

@@ -1,2 +0,0 @@
-$TO_MAKE = File.basename(__dir__)
-require_relative '../extconf_common'

data/funchook/Makefile

@@ -1,29 +0,0 @@
-srcdir = .
-top_srcdir = .
-top_builddir = .
-
-.PHONY: all test
-
-all: $(srcdir)/distorm/src/distorm.c
-	cd src && $(MAKE)
-	cd test && $(MAKE)
-
-test: all
-	cd test && $(MAKE) test
-
-clean:
-	cd src && $(MAKE) clean
-	cd test && $(MAKE) clean
-
-$(srcdir)/distorm/src/distorm.c:
-	cd $(srcdir) && git submodule init
-	cd $(srcdir) && git submodule update
-
-config.status: $(srcdir)/configure
-	./config.status --recheck
-
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	./config.status
-
-$(srcdir)/configure: $(srcdir)/configure.ac
-	cd $(srcdir) && autoconf || touch configure