contrast-agent 4.14.0 → 5.2.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (422) hide show
  1. checksums.yaml +4 -4
  2. data/.simplecov +2 -3
  3. data/Gemfile +1 -1
  4. data/LICENSE.txt +1 -1
  5. data/Rakefile +1 -1
  6. data/exe/contrast_service +1 -1
  7. data/ext/build_funchook.rb +1 -1
  8. data/ext/cs__assess_array/cs__assess_array.c +1 -1
  9. data/ext/cs__assess_array/extconf.rb +1 -1
  10. data/ext/cs__assess_basic_object/cs__assess_basic_object.c +1 -1
  11. data/ext/cs__assess_basic_object/extconf.rb +1 -1
  12. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +1 -1
  13. data/ext/cs__assess_fiber_track/extconf.rb +1 -1
  14. data/ext/cs__assess_hash/cs__assess_hash.c +1 -1
  15. data/ext/cs__assess_hash/extconf.rb +1 -1
  16. data/ext/cs__assess_kernel/cs__assess_kernel.c +8 -5
  17. data/ext/cs__assess_kernel/extconf.rb +1 -1
  18. data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +1 -1
  19. data/ext/cs__assess_marshal_module/extconf.rb +1 -1
  20. data/ext/cs__assess_module/cs__assess_module.c +49 -39
  21. data/ext/cs__assess_module/extconf.rb +1 -1
  22. data/ext/cs__assess_regexp/cs__assess_regexp.c +1 -1
  23. data/ext/cs__assess_regexp/extconf.rb +1 -1
  24. data/ext/cs__assess_string/cs__assess_string.c +1 -1
  25. data/ext/cs__assess_string/extconf.rb +1 -1
  26. data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +1 -1
  27. data/ext/cs__assess_string_interpolation26/extconf.rb +1 -1
  28. data/ext/cs__assess_yield_track/cs__assess_yield_track.c +1 -1
  29. data/ext/cs__assess_yield_track/extconf.rb +1 -1
  30. data/ext/cs__common/cs__common.c +5 -1
  31. data/ext/cs__common/cs__common.h +1 -0
  32. data/ext/cs__common/extconf.rb +1 -1
  33. data/ext/cs__contrast_patch/cs__contrast_patch.c +53 -28
  34. data/ext/cs__contrast_patch/cs__contrast_patch.h +2 -0
  35. data/ext/cs__contrast_patch/extconf.rb +1 -1
  36. data/ext/cs__os_information/cs__os_information.c +1 -1
  37. data/ext/cs__os_information/extconf.rb +1 -1
  38. data/ext/cs__scope/cs__scope.c +747 -0
  39. data/ext/cs__scope/cs__scope.h +88 -0
  40. data/ext/{cs__assess_active_record_named → cs__scope}/extconf.rb +1 -1
  41. data/ext/extconf_common.rb +1 -1
  42. data/lib/contrast/agent/assess/contrast_event.rb +27 -24
  43. data/lib/contrast/agent/assess/contrast_object.rb +5 -2
  44. data/lib/contrast/agent/assess/events/event_data.rb +30 -0
  45. data/lib/contrast/agent/assess/events/event_factory.rb +14 -6
  46. data/lib/contrast/agent/assess/events/source_event.rb +22 -3
  47. data/lib/contrast/agent/assess/finalizers/freeze.rb +1 -1
  48. data/lib/contrast/agent/assess/finalizers/hash.rb +1 -1
  49. data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +7 -7
  50. data/lib/contrast/agent/assess/policy/patcher.rb +1 -35
  51. data/lib/contrast/agent/assess/policy/policy.rb +1 -1
  52. data/lib/contrast/agent/assess/policy/policy_node.rb +2 -2
  53. data/lib/contrast/agent/assess/policy/policy_scanner.rb +1 -1
  54. data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
  55. data/lib/contrast/agent/assess/policy/propagation_method.rb +55 -28
  56. data/lib/contrast/agent/assess/policy/propagation_node.rb +3 -6
  57. data/lib/contrast/agent/assess/policy/propagator/append.rb +1 -1
  58. data/lib/contrast/agent/assess/policy/propagator/base.rb +1 -1
  59. data/lib/contrast/agent/assess/policy/propagator/center.rb +1 -1
  60. data/lib/contrast/agent/assess/policy/propagator/custom.rb +1 -1
  61. data/lib/contrast/agent/assess/policy/propagator/database_write.rb +6 -2
  62. data/lib/contrast/agent/assess/policy/propagator/insert.rb +5 -2
  63. data/lib/contrast/agent/assess/policy/propagator/keep.rb +1 -1
  64. data/lib/contrast/agent/assess/policy/propagator/match_data.rb +13 -3
  65. data/lib/contrast/agent/assess/policy/propagator/next.rb +1 -1
  66. data/lib/contrast/agent/assess/policy/propagator/prepend.rb +1 -1
  67. data/lib/contrast/agent/assess/policy/propagator/rack_protection.rb +1 -1
  68. data/lib/contrast/agent/assess/policy/propagator/remove.rb +1 -1
  69. data/lib/contrast/agent/assess/policy/propagator/replace.rb +1 -1
  70. data/lib/contrast/agent/assess/policy/propagator/reverse.rb +1 -1
  71. data/lib/contrast/agent/assess/policy/propagator/select.rb +3 -2
  72. data/lib/contrast/agent/assess/policy/propagator/splat.rb +1 -1
  73. data/lib/contrast/agent/assess/policy/propagator/split.rb +27 -25
  74. data/lib/contrast/agent/assess/policy/propagator/substitution.rb +3 -5
  75. data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +190 -0
  76. data/lib/contrast/agent/assess/policy/propagator/trim.rb +9 -4
  77. data/lib/contrast/agent/assess/policy/propagator.rb +1 -1
  78. data/lib/contrast/agent/assess/policy/source_method.rb +39 -26
  79. data/lib/contrast/agent/assess/policy/source_node.rb +1 -1
  80. data/lib/contrast/agent/assess/policy/source_validation/cross_site_validator.rb +1 -1
  81. data/lib/contrast/agent/assess/policy/source_validation/source_validation.rb +1 -1
  82. data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +7 -2
  83. data/lib/contrast/agent/assess/policy/trigger/xpath.rb +1 -1
  84. data/lib/contrast/agent/assess/policy/trigger_method.rb +41 -25
  85. data/lib/contrast/agent/assess/policy/trigger_node.rb +1 -1
  86. data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +1 -1
  87. data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +1 -1
  88. data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +1 -1
  89. data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +1 -1
  90. data/lib/contrast/agent/assess/properties.rb +1 -1
  91. data/lib/contrast/agent/assess/property/evented.rb +25 -12
  92. data/lib/contrast/agent/assess/property/tagged.rb +1 -1
  93. data/lib/contrast/agent/assess/property/updated.rb +1 -1
  94. data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +1 -19
  95. data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +1 -13
  96. data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +7 -59
  97. data/lib/contrast/agent/assess/rule/provider.rb +1 -1
  98. data/lib/contrast/agent/assess/rule/response/auto_complete_rule.rb +69 -0
  99. data/lib/contrast/agent/assess/rule/response/base_rule.rb +130 -0
  100. data/lib/contrast/agent/assess/rule/response/body_rule.rb +109 -0
  101. data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +157 -0
  102. data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +26 -0
  103. data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +100 -0
  104. data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +26 -0
  105. data/lib/contrast/agent/assess/rule/response/framework/rails_support.rb +29 -0
  106. data/lib/contrast/agent/assess/rule/response/header_rule.rb +70 -0
  107. data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +36 -0
  108. data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +61 -0
  109. data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +26 -0
  110. data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +36 -0
  111. data/lib/contrast/agent/assess/tag.rb +1 -1
  112. data/lib/contrast/agent/assess/tracker.rb +1 -1
  113. data/lib/contrast/agent/assess.rb +1 -2
  114. data/lib/contrast/agent/at_exit_hook.rb +1 -1
  115. data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +13 -8
  116. data/lib/contrast/agent/deadzone/policy/policy.rb +1 -1
  117. data/lib/contrast/agent/disable_reaction.rb +1 -1
  118. data/lib/contrast/agent/exclusion_matcher.rb +1 -1
  119. data/lib/contrast/agent/inventory/database_config.rb +115 -77
  120. data/lib/contrast/agent/inventory/dependencies.rb +1 -1
  121. data/lib/contrast/agent/inventory/dependency_analysis.rb +1 -1
  122. data/lib/contrast/agent/inventory/dependency_usage_analysis.rb +3 -3
  123. data/lib/contrast/agent/inventory/policy/datastores.rb +1 -1
  124. data/lib/contrast/agent/inventory/policy/policy.rb +1 -1
  125. data/lib/contrast/agent/inventory/policy/trigger_node.rb +1 -1
  126. data/lib/contrast/agent/inventory.rb +1 -1
  127. data/lib/contrast/agent/metric_telemetry_event.rb +1 -1
  128. data/lib/contrast/agent/middleware.rb +4 -2
  129. data/lib/contrast/agent/module_data.rb +1 -1
  130. data/lib/contrast/agent/patching/policy/after_load_patch.rb +1 -1
  131. data/lib/contrast/agent/patching/policy/after_load_patcher.rb +2 -4
  132. data/lib/contrast/agent/patching/policy/method_policy.rb +28 -15
  133. data/lib/contrast/agent/patching/policy/method_policy_extend.rb +12 -10
  134. data/lib/contrast/agent/patching/policy/module_policy.rb +1 -1
  135. data/lib/contrast/agent/patching/policy/patch.rb +3 -7
  136. data/lib/contrast/agent/patching/policy/patch_status.rb +2 -26
  137. data/lib/contrast/agent/patching/policy/patcher.rb +2 -6
  138. data/lib/contrast/agent/patching/policy/policy.rb +1 -1
  139. data/lib/contrast/agent/patching/policy/policy_node.rb +1 -1
  140. data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -1
  141. data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +94 -0
  142. data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +1 -1
  143. data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +1 -1
  144. data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +1 -1
  145. data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +1 -1
  146. data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +1 -1
  147. data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +1 -1
  148. data/lib/contrast/agent/protect/policy/policy.rb +1 -1
  149. data/lib/contrast/agent/protect/policy/rule_applicator.rb +1 -1
  150. data/lib/contrast/agent/protect/policy/trigger_node.rb +1 -1
  151. data/lib/contrast/agent/protect/rule/base.rb +29 -2
  152. data/lib/contrast/agent/protect/rule/base_service.rb +11 -2
  153. data/lib/contrast/agent/protect/rule/cmd_injection.rb +3 -1
  154. data/lib/contrast/agent/protect/rule/default_scanner.rb +1 -1
  155. data/lib/contrast/agent/protect/rule/deserialization.rb +7 -1
  156. data/lib/contrast/agent/protect/rule/http_method_tampering.rb +6 -2
  157. data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +1 -1
  158. data/lib/contrast/agent/protect/rule/no_sqli.rb +2 -1
  159. data/lib/contrast/agent/protect/rule/path_traversal.rb +2 -1
  160. data/lib/contrast/agent/protect/rule/sql_sample_builder.rb +1 -1
  161. data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +1 -1
  162. data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +1 -1
  163. data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +2 -2
  164. data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +124 -0
  165. data/lib/contrast/agent/protect/rule/sqli/sqli_worth_watching.rb +121 -0
  166. data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +1 -1
  167. data/lib/contrast/agent/protect/rule/sqli.rb +34 -1
  168. data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +1 -1
  169. data/lib/contrast/agent/protect/rule/xss.rb +1 -1
  170. data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +1 -1
  171. data/lib/contrast/agent/protect/rule/xxe.rb +5 -1
  172. data/lib/contrast/agent/protect/rule.rb +1 -1
  173. data/lib/contrast/agent/reaction_processor.rb +1 -1
  174. data/lib/contrast/agent/reporting/input_analysis/input_analysis.rb +44 -0
  175. data/lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb +115 -0
  176. data/lib/contrast/agent/reporting/input_analysis/input_type.rb +44 -0
  177. data/lib/contrast/agent/reporting/input_analysis/score_level.rb +21 -0
  178. data/lib/contrast/agent/reporting/report.rb +8 -1
  179. data/lib/contrast/agent/reporting/reporter.rb +27 -47
  180. data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +49 -0
  181. data/lib/contrast/agent/reporting/reporting_events/application_update.rb +82 -0
  182. data/lib/contrast/agent/reporting/reporting_events/architecture_component.rb +80 -0
  183. data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +59 -0
  184. data/lib/contrast/agent/reporting/reporting_events/finding.rb +181 -43
  185. data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +293 -0
  186. data/lib/contrast/agent/reporting/reporting_events/finding_event_object.rb +94 -0
  187. data/lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb +39 -0
  188. data/lib/contrast/agent/reporting/reporting_events/finding_event_property.rb +40 -0
  189. data/lib/contrast/agent/reporting/reporting_events/finding_event_signature.rb +110 -0
  190. data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +61 -0
  191. data/lib/contrast/agent/reporting/reporting_events/finding_event_stack.rb +71 -0
  192. data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range.rb +60 -0
  193. data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +94 -0
  194. data/lib/contrast/agent/reporting/reporting_events/library_discovery.rb +93 -0
  195. data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +50 -0
  196. data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +54 -0
  197. data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +66 -0
  198. data/lib/contrast/agent/reporting/reporting_events/poll.rb +29 -0
  199. data/lib/contrast/agent/reporting/reporting_events/preflight.rb +20 -6
  200. data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +36 -17
  201. data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +29 -18
  202. data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +76 -0
  203. data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +67 -0
  204. data/lib/contrast/agent/reporting/reporting_events/route_discovery_observation.rb +65 -0
  205. data/lib/contrast/agent/reporting/reporting_events/server_activity.rb +52 -0
  206. data/lib/contrast/agent/reporting/reporting_events/trace_event_source.rb +30 -0
  207. data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +32 -15
  208. data/lib/contrast/agent/reporting/reporting_utilities/dtm_message.rb +67 -0
  209. data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +164 -0
  210. data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +55 -0
  211. data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +75 -156
  212. data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +162 -0
  213. data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +1 -1
  214. data/lib/contrast/agent/reporting/reporting_utilities/response.rb +30 -0
  215. data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +57 -0
  216. data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +208 -0
  217. data/lib/contrast/agent/reporting/settings/application_settings.rb +67 -0
  218. data/lib/contrast/agent/reporting/settings/assess.rb +45 -0
  219. data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +136 -0
  220. data/lib/contrast/agent/reporting/settings/exclusions.rb +123 -0
  221. data/lib/contrast/agent/reporting/settings/protect.rb +89 -0
  222. data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +243 -0
  223. data/lib/contrast/agent/reporting/settings/reaction.rb +30 -0
  224. data/lib/contrast/agent/reporting/settings/server_features.rb +78 -0
  225. data/lib/contrast/agent/request.rb +44 -3
  226. data/lib/contrast/agent/request_context.rb +25 -7
  227. data/lib/contrast/agent/request_context_extend.rb +109 -7
  228. data/lib/contrast/agent/request_handler.rb +41 -5
  229. data/lib/contrast/agent/response.rb +23 -15
  230. data/lib/contrast/agent/rule_set.rb +1 -1
  231. data/lib/contrast/agent/scope.rb +103 -108
  232. data/lib/contrast/agent/service_heartbeat.rb +46 -3
  233. data/lib/contrast/agent/startup_metrics_telemetry_event.rb +34 -7
  234. data/lib/contrast/agent/static_analysis.rb +13 -3
  235. data/lib/contrast/agent/telemetry.rb +1 -1
  236. data/lib/contrast/agent/telemetry_event.rb +1 -1
  237. data/lib/contrast/agent/thread.rb +1 -1
  238. data/lib/contrast/agent/thread_watcher.rb +3 -3
  239. data/lib/contrast/agent/tracepoint_hook.rb +1 -4
  240. data/lib/contrast/agent/version.rb +2 -2
  241. data/lib/contrast/agent/worker_thread.rb +1 -1
  242. data/lib/contrast/agent.rb +4 -4
  243. data/lib/contrast/api/communication/connection_status.rb +1 -1
  244. data/lib/contrast/api/communication/messaging_queue.rb +4 -4
  245. data/lib/contrast/api/communication/response_processor.rb +9 -5
  246. data/lib/contrast/api/communication/service_lifecycle.rb +1 -1
  247. data/lib/contrast/api/communication/socket.rb +1 -1
  248. data/lib/contrast/api/communication/socket_client.rb +4 -1
  249. data/lib/contrast/api/communication/speedracer.rb +1 -1
  250. data/lib/contrast/api/communication/tcp_socket.rb +1 -1
  251. data/lib/contrast/api/communication/unix_socket.rb +1 -1
  252. data/lib/contrast/api/communication.rb +1 -1
  253. data/lib/contrast/api/decorators/address.rb +1 -1
  254. data/lib/contrast/api/decorators/agent_startup.rb +1 -1
  255. data/lib/contrast/api/decorators/application_settings.rb +1 -1
  256. data/lib/contrast/api/decorators/application_startup.rb +1 -1
  257. data/lib/contrast/api/decorators/application_update.rb +1 -1
  258. data/lib/contrast/api/decorators/architecture_component.rb +36 -0
  259. data/lib/contrast/api/decorators/bot_blocker.rb +37 -0
  260. data/lib/contrast/api/decorators/finding.rb +1 -17
  261. data/lib/contrast/api/decorators/http_request.rb +3 -2
  262. data/lib/contrast/api/decorators/input_analysis.rb +1 -1
  263. data/lib/contrast/api/decorators/instrumentation_mode.rb +1 -1
  264. data/lib/contrast/api/decorators/ip_denylist.rb +37 -0
  265. data/lib/contrast/api/decorators/library.rb +1 -1
  266. data/lib/contrast/api/decorators/library_usage_update.rb +1 -1
  267. data/lib/contrast/api/decorators/message.rb +1 -1
  268. data/lib/contrast/api/decorators/rasp_rule_sample.rb +30 -1
  269. data/lib/contrast/api/decorators/route_coverage.rb +1 -1
  270. data/lib/contrast/api/decorators/server_features.rb +1 -1
  271. data/lib/contrast/api/decorators/trace_event.rb +1 -1
  272. data/lib/contrast/api/decorators/trace_event_object.rb +1 -1
  273. data/lib/contrast/api/decorators/trace_event_signature.rb +1 -1
  274. data/lib/contrast/api/decorators/trace_taint_range.rb +1 -1
  275. data/lib/contrast/api/decorators/trace_taint_range_tags.rb +1 -1
  276. data/lib/contrast/api/decorators/user_input.rb +12 -2
  277. data/lib/contrast/api/decorators/virtual_patch.rb +34 -0
  278. data/lib/contrast/api/decorators.rb +2 -1
  279. data/lib/contrast/api.rb +1 -1
  280. data/lib/contrast/components/agent.rb +5 -24
  281. data/lib/contrast/components/api.rb +18 -9
  282. data/lib/contrast/components/app_context.rb +2 -1
  283. data/lib/contrast/components/app_context_extend.rb +1 -1
  284. data/lib/contrast/components/assess.rb +12 -8
  285. data/lib/contrast/components/base.rb +1 -1
  286. data/lib/contrast/components/config.rb +30 -15
  287. data/lib/contrast/components/contrast_service.rb +1 -1
  288. data/lib/contrast/components/heap_dump.rb +1 -1
  289. data/lib/contrast/components/inventory.rb +5 -1
  290. data/lib/contrast/components/logger.rb +6 -1
  291. data/lib/contrast/components/protect.rb +10 -4
  292. data/lib/contrast/components/sampling.rb +1 -1
  293. data/lib/contrast/components/scope.rb +99 -92
  294. data/lib/contrast/components/settings.rb +25 -12
  295. data/lib/contrast/config/agent_configuration.rb +59 -13
  296. data/lib/contrast/config/api_configuration.rb +101 -13
  297. data/lib/contrast/config/api_proxy_configuration.rb +56 -4
  298. data/lib/contrast/config/application_configuration.rb +115 -16
  299. data/lib/contrast/config/assess_configuration.rb +107 -13
  300. data/lib/contrast/config/assess_rules_configuration.rb +45 -4
  301. data/lib/contrast/config/base_configuration.rb +2 -1
  302. data/lib/contrast/config/certification_configuration.rb +75 -4
  303. data/lib/contrast/config/env_variables.rb +1 -1
  304. data/lib/contrast/config/exception_configuration.rb +62 -4
  305. data/lib/contrast/config/heap_dump_configuration.rb +102 -18
  306. data/lib/contrast/config/inventory_configuration.rb +65 -4
  307. data/lib/contrast/config/logger_configuration.rb +47 -4
  308. data/lib/contrast/config/protect_configuration.rb +1 -1
  309. data/lib/contrast/config/protect_rule_configuration.rb +37 -10
  310. data/lib/contrast/config/protect_rules_configuration.rb +121 -18
  311. data/lib/contrast/config/request_audit_configuration.rb +69 -4
  312. data/lib/contrast/config/root_configuration.rb +1 -1
  313. data/lib/contrast/config/ruby_configuration.rb +97 -20
  314. data/lib/contrast/config/sampling_configuration.rb +77 -11
  315. data/lib/contrast/config/server_configuration.rb +57 -12
  316. data/lib/contrast/config/service_configuration.rb +1 -1
  317. data/lib/contrast/config.rb +1 -1
  318. data/lib/contrast/configuration.rb +7 -4
  319. data/lib/contrast/extension/assess/array.rb +4 -2
  320. data/lib/contrast/extension/assess/erb.rb +32 -5
  321. data/lib/contrast/extension/assess/eval_trigger.rb +3 -1
  322. data/lib/contrast/extension/assess/exec_trigger.rb +2 -1
  323. data/lib/contrast/extension/assess/fiber.rb +6 -3
  324. data/lib/contrast/extension/assess/hash.rb +1 -1
  325. data/lib/contrast/extension/assess/kernel.rb +8 -3
  326. data/lib/contrast/extension/assess/marshal.rb +6 -2
  327. data/lib/contrast/extension/assess/regexp.rb +8 -2
  328. data/lib/contrast/extension/assess/string.rb +8 -2
  329. data/lib/contrast/extension/assess.rb +1 -1
  330. data/lib/contrast/extension/delegator.rb +1 -1
  331. data/lib/contrast/extension/extension.rb +2 -4
  332. data/lib/contrast/extension/inventory.rb +1 -1
  333. data/lib/contrast/extension/module.rb +1 -1
  334. data/lib/contrast/extension/protect/psych.rb +1 -1
  335. data/lib/contrast/extension/protect.rb +1 -1
  336. data/lib/contrast/extension/thread.rb +32 -13
  337. data/lib/contrast/framework/base_support.rb +5 -1
  338. data/lib/contrast/framework/grape/support.rb +25 -1
  339. data/lib/contrast/framework/manager.rb +26 -5
  340. data/lib/contrast/framework/manager_extend.rb +1 -1
  341. data/lib/contrast/framework/platform_version.rb +1 -1
  342. data/lib/contrast/framework/rack/patch/session_cookie.rb +1 -1
  343. data/lib/contrast/framework/rack/patch/support.rb +1 -1
  344. data/lib/contrast/framework/rack/support.rb +1 -1
  345. data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +1 -1
  346. data/lib/contrast/framework/rails/patch/assess_configuration.rb +1 -1
  347. data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +1 -1
  348. data/lib/contrast/framework/rails/patch/support.rb +1 -1
  349. data/lib/contrast/framework/rails/railtie.rb +1 -1
  350. data/lib/contrast/framework/rails/support.rb +46 -2
  351. data/lib/contrast/framework/sinatra/support.rb +24 -2
  352. data/lib/contrast/funchook/funchook.rb +21 -18
  353. data/lib/contrast/logger/application.rb +1 -1
  354. data/lib/contrast/logger/cef_log.rb +151 -0
  355. data/lib/contrast/logger/format.rb +1 -1
  356. data/lib/contrast/logger/log.rb +1 -1
  357. data/lib/contrast/logger/request.rb +1 -1
  358. data/lib/contrast/logger/time.rb +1 -1
  359. data/lib/contrast/security_exception.rb +1 -1
  360. data/lib/contrast/tasks/config.rb +1 -1
  361. data/lib/contrast/tasks/service.rb +1 -1
  362. data/lib/contrast/utils/assess/propagation_method_utils.rb +1 -1
  363. data/lib/contrast/utils/assess/property/tagged_utils.rb +1 -1
  364. data/lib/contrast/utils/assess/sampling_util.rb +4 -4
  365. data/lib/contrast/utils/assess/source_method_utils.rb +1 -1
  366. data/lib/contrast/utils/assess/split_utils.rb +23 -0
  367. data/lib/contrast/utils/assess/tracking_util.rb +1 -1
  368. data/lib/contrast/utils/assess/trigger_method_utils.rb +3 -2
  369. data/lib/contrast/utils/class_util.rb +1 -1
  370. data/lib/contrast/utils/duck_utils.rb +1 -1
  371. data/lib/contrast/utils/env_configuration_item.rb +2 -2
  372. data/lib/contrast/utils/exclude_key.rb +1 -1
  373. data/lib/contrast/utils/findings.rb +5 -2
  374. data/lib/contrast/utils/hash_digest.rb +44 -6
  375. data/lib/contrast/utils/hash_digest_extend.rb +44 -1
  376. data/lib/contrast/utils/head_dump_utils_extend.rb +1 -1
  377. data/lib/contrast/utils/heap_dump_util.rb +1 -1
  378. data/lib/contrast/utils/invalid_configuration_util.rb +6 -5
  379. data/lib/contrast/utils/io_util.rb +1 -1
  380. data/lib/contrast/utils/job_servers_running.rb +1 -1
  381. data/lib/contrast/utils/log_utils.rb +115 -1
  382. data/lib/contrast/utils/lru_cache.rb +1 -1
  383. data/lib/contrast/utils/metrics_hash.rb +2 -2
  384. data/lib/contrast/utils/middleware_utils.rb +7 -8
  385. data/lib/contrast/utils/net_http_base.rb +26 -16
  386. data/lib/contrast/utils/object_share.rb +1 -6
  387. data/lib/contrast/utils/os.rb +9 -5
  388. data/lib/contrast/utils/patching/policy/patch_utils.rb +62 -102
  389. data/lib/contrast/utils/patching/policy/patcher_utils.rb +1 -1
  390. data/lib/contrast/utils/preflight_util.rb +1 -1
  391. data/lib/contrast/utils/request_utils.rb +9 -1
  392. data/lib/contrast/utils/resource_loader.rb +1 -1
  393. data/lib/contrast/utils/response_utils.rb +1 -1
  394. data/lib/contrast/utils/sha256_builder.rb +1 -1
  395. data/lib/contrast/utils/stack_trace_utils.rb +1 -1
  396. data/lib/contrast/utils/string_utils.rb +69 -67
  397. data/lib/contrast/utils/tag_util.rb +2 -1
  398. data/lib/contrast/utils/telemetry.rb +1 -1
  399. data/lib/contrast/utils/telemetry_client.rb +1 -1
  400. data/lib/contrast/utils/telemetry_identifier.rb +1 -1
  401. data/lib/contrast/utils/thread_tracker.rb +1 -1
  402. data/lib/contrast/utils/timer.rb +1 -1
  403. data/lib/contrast-agent.rb +1 -1
  404. data/lib/contrast.rb +5 -4
  405. data/resources/assess/policy.json +10 -0
  406. data/ruby-agent.gemspec +4 -5
  407. data/service_executables/VERSION +1 -1
  408. data/service_executables/linux/contrast-service +0 -0
  409. data/service_executables/mac/contrast-service +0 -0
  410. metadata +96 -40
  411. data/ext/cs__assess_active_record_named/cs__active_record_named.c +0 -46
  412. data/ext/cs__assess_active_record_named/cs__active_record_named.h +0 -11
  413. data/lib/contrast/agent/assess/policy/rewriter_patch.rb +0 -95
  414. data/lib/contrast/agent/class_reopener.rb +0 -258
  415. data/lib/contrast/agent/rewriter.rb +0 -259
  416. data/lib/contrast/extension/kernel.rb +0 -54
  417. data/lib/contrast/framework/rails/rewrite/action_controller_railties_helper_inherited.rb +0 -37
  418. data/lib/contrast/framework/rails/rewrite/active_record_attribute_methods_read.rb +0 -41
  419. data/lib/contrast/framework/rails/rewrite/active_record_named.rb +0 -75
  420. data/lib/contrast/framework/rails/rewrite/active_record_time_zone_inherited.rb +0 -35
  421. data/lib/contrast/utils/ruby_ast_rewriter.rb +0 -82
  422. data/lib/contrast/utils/substitution_utils.rb +0 -167
@@ -0,0 +1,747 @@
1
+ /* Copyright (c) 2022 Contrast Security, Inc. See
2
+ * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */
3
+
4
+ #include "../cs__common/cs__common.h"
5
+ #include "cs__scope.h"
6
+ #include <ruby.h>
7
+
8
+ /* Calls to Contrast modules and classes */
9
+ VALUE contrast, agent, components;
10
+ VALUE scope_interface, scope_inst_methods;
11
+ VALUE scope_mod, scope_klass;
12
+
13
+ /* helpers */
14
+
15
+ /* get scope for ec or create new
16
+ *
17
+ * [Ruby definition]
18
+ *
19
+ * EXECUTION_CONTEXT[Fiber.current] ||= Contrast::Agent::Scope.new
20
+ */
21
+ VALUE get_ec() {
22
+ VALUE ec, scope_inst, new_inst, keys, fiber;
23
+
24
+ ec = rb_const_get(scope_mod, rb_intern(rb_const_ec));
25
+ scope_inst = rb_hash_aref(ec, rb_fiber_current());
26
+ keys = rb_const_get(scope_mod, rb_intern(rb_const_ec_keys));
27
+ fiber = rb_fiber_current();
28
+
29
+ if (RB_TYPE_P(scope_inst, T_NIL))
30
+ {
31
+ new_inst = rb_new_c_scope();
32
+ rb_ary_push(keys, fiber);
33
+ rb_hash_aset(ec, fiber, new_inst);
34
+ return new_inst;
35
+ } else {
36
+ return scope_inst;
37
+ }
38
+ }
39
+
40
+ /* create new Scope class instance */
41
+ VALUE rb_new_c_scope() {
42
+ return rb_class_new_instance(0, 0, scope_klass);
43
+ }
44
+
45
+ int scope_increase(int scope) {
46
+ int inc = scope;
47
+ inc = inc + 1;
48
+
49
+ return INT2FIX(inc);
50
+ }
51
+
52
+ int scope_decrease(int scope) {
53
+ int inc = scope;
54
+ inc = inc - 1;
55
+
56
+ return INT2FIX(inc);
57
+ }
58
+
59
+ VALUE is_in_scope(int scope) {
60
+ if (scope > 0)
61
+ {
62
+ return Qtrue;
63
+ } else if (scope <= 0) {
64
+ return Qfalse;
65
+ }
66
+ }
67
+
68
+ /* default: raise NoMethodError, "Scope '#{ name.inspect }' is not registered as a scope." */
69
+ void rb_raise_scope_no_method_err(const VALUE method_scope_sym) {
70
+ rb_raise(rb_eNoMethodError, "Scope ':%"PRIsVALUE"' is not registered as a scope.", rb_sym_to_s(method_scope_sym));
71
+ }
72
+
73
+ /*
74
+ * @class Contrast::Agent::Scope
75
+ */
76
+
77
+ /*
78
+ * @method initialize
79
+ *
80
+ * sets scope instance variables.
81
+ * def initialize
82
+ * @contrast_scope = 0
83
+ * @deserialization_scope = 0
84
+ * @split_scope = 0
85
+ * end
86
+ */
87
+ VALUE contrast_scope_klass_init(VALUE self, VALUE args) {
88
+ rb_iv_set(self, rb_iv_cntr_scope, INT2FIX(0));
89
+ rb_iv_set(self, rb_iv_dslr_scope, INT2FIX(0));
90
+ rb_iv_set(self, rb_iv_split_scope, INT2FIX(0));
91
+
92
+ return self;
93
+ }
94
+
95
+ /*
96
+ * @method in_contrast_scope?
97
+ *
98
+ * Check if we are in contrast scope.
99
+ *
100
+ * @return [Boolean] check if we are in contrast scope
101
+ * if the scope is above 0 return true.
102
+ * def in_contrast_scope?
103
+ * @contrast_scope.positive?
104
+ * end
105
+ */
106
+ VALUE in_cntr_scope(VALUE self, VALUE args) {
107
+ return is_in_scope(FIX2INT(rb_iv_get(self, rb_iv_cntr_scope)));
108
+ }
109
+
110
+ /*
111
+ * @method enter_contrast_scope!
112
+ *
113
+ * Enters contrast scope.
114
+ *
115
+ * @return @contrast_scope [Integer] contrast scope increased.
116
+ * def enter_contrast_scope!
117
+ * @contrast_scope += 1
118
+ * end
119
+ */
120
+ VALUE enter_cntr_scope(VALUE self, VALUE args) {
121
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_cntr_scope));
122
+ rb_iv_set(self, rb_iv_cntr_scope, scope_increase(scope));
123
+
124
+ return rb_iv_get(self, rb_iv_cntr_scope);
125
+ }
126
+
127
+ /*
128
+ * @method exit_contrast_scope!
129
+ *
130
+ * Exits contrast scope.
131
+ *
132
+ * @return @contrast_scope [Integer] contrast scope decreased.
133
+ * def exit_contrast_scope!
134
+ * @contrast_scope -= 1
135
+ * end
136
+ */
137
+ VALUE exit_cntr_scope(VALUE self, VALUE args) {
138
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_cntr_scope));
139
+ rb_iv_set(self, rb_iv_cntr_scope, scope_decrease(scope));
140
+
141
+ return rb_iv_get(self, rb_iv_cntr_scope);
142
+ }
143
+
144
+ /*
145
+ * @method in_deserialization_scope?
146
+ *
147
+ * Check if we are in deserialization scope.
148
+ *
149
+ * @return [Boolean] check if we are in deserialization scope
150
+ * if the scope is above 0 return true.
151
+ * def in_deserialization_scope?
152
+ * @deserialization_scope.positive?
153
+ * end
154
+ */
155
+ VALUE in_dslr_scope(VALUE self, VALUE args) {
156
+ return is_in_scope(FIX2INT(rb_iv_get(self, rb_iv_dslr_scope)));
157
+ }
158
+
159
+ /*
160
+ * @method enter_deserialization_scope!
161
+ *
162
+ * Enters deserialization scope.
163
+ *
164
+ * @return @deserialization_scope [Integer] deserialization scope increased.
165
+ * def enter_deserialization_scope!
166
+ * @deserialization_scope += 1
167
+ * end
168
+ */
169
+ VALUE enter_dsrl_scope(VALUE self, VALUE args) {
170
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_dslr_scope));
171
+ rb_iv_set(self, rb_iv_dslr_scope, scope_increase(scope));
172
+
173
+ return rb_iv_get(self, rb_iv_dslr_scope);
174
+ }
175
+
176
+ /*
177
+ * @method exit_deserialization_scope!
178
+ *
179
+ * Exits deserialization scope.
180
+ *
181
+ * @return @deserialization_scope [Integer] deserialization scope decreased.
182
+ * def enter_deserialization_scope!
183
+ * @deserialization_scope += 1
184
+ * end
185
+ */
186
+ VALUE exit_dsrl_scope(VALUE self, VALUE args) {
187
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_dslr_scope));
188
+ rb_iv_set(self, rb_iv_dslr_scope, scope_decrease(scope));
189
+
190
+ return rb_iv_get(self, rb_iv_dslr_scope);
191
+ }
192
+
193
+ /*
194
+ * @method in_split_scope?
195
+ *
196
+ * Check if we are in split scope.
197
+ *
198
+ * @return [Boolean] check if we are in split scope
199
+ * if the scope is above 0 return true.
200
+ * def in_split_scope?
201
+ * @split_scope.positive?
202
+ * end
203
+ */
204
+ VALUE in_split_scope(VALUE self, VALUE args) {
205
+ return is_in_scope(FIX2INT(rb_iv_get(self, rb_iv_split_scope)));
206
+ }
207
+
208
+ /*
209
+ * @method enter_split_scope!
210
+ *
211
+ * Enters split scope.
212
+ *
213
+ * @return @split_scope [Integer] split scope increased.
214
+ * def enter_split_scope!
215
+ * @split_scope += 1
216
+ * end
217
+ */
218
+ VALUE enter_split_scope(VALUE self, VALUE args) {
219
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_split_scope));
220
+ rb_iv_set(self, rb_iv_split_scope, scope_increase(scope));
221
+
222
+ return rb_iv_get(self, rb_iv_split_scope);
223
+ }
224
+
225
+ /*
226
+ * @method exit_split_scope!
227
+ *
228
+ * Exits split scope.
229
+ *
230
+ * @return @split_scope [Integer] split scope decreased.
231
+ * def enter_split_scope!
232
+ * @split_scope -= 1
233
+ * end
234
+ */
235
+ VALUE exit_split_scope(VALUE self, VALUE args) {
236
+ int scope = FIX2INT(rb_iv_get(self, rb_iv_split_scope));
237
+ rb_iv_set(self, rb_iv_split_scope, scope_decrease(scope));
238
+
239
+ return rb_iv_get(self, rb_iv_split_scope);
240
+ }
241
+
242
+ /*
243
+ * @method split_scope_depth
244
+ *
245
+ * Returns split scope current depth.
246
+ *
247
+ * @return @split_scope [Integer]
248
+ * def split_scope_depth
249
+ * @split_scope
250
+ * end
251
+ */
252
+ VALUE split_scope_depth(VALUE self, VALUE args) {
253
+ return rb_iv_get(self, rb_iv_split_scope);
254
+ }
255
+
256
+ /*
257
+ * Static methods to be used, the cases are defined by the usage from the above methods
258
+ * if more methods are added - please extend the case statements as they are no longed dynamic
259
+ */
260
+
261
+ /*
262
+ * @method in_scope?
263
+ *
264
+ * Check if we are in specific scope.
265
+ *
266
+ * @param name [Symbol] scope symbol representing scope to check.
267
+ * @return [Boolean] check if we are in passed scope.
268
+ * def in_scope? name
269
+ * case name
270
+ * when :contrast
271
+ * in_contrast_scope?
272
+ * when :deserialization
273
+ * in_deserialization_scope?
274
+ * when :split
275
+ * in_split_scope?
276
+ * else
277
+ * raise NoMethodError, "Scope '#{ name.inspect }' is not registered as a scope."
278
+ * end
279
+ * end
280
+ */
281
+ VALUE scope_klass_in_scope(VALUE self, VALUE method_scope_sym) {
282
+ VALUE in_scope = Qnil;
283
+
284
+ if (method_scope_sym == rb_sym_contrast) {
285
+ /* in_contrast_scope? */
286
+ in_scope = in_cntr_scope(self, 0);
287
+ } else if (method_scope_sym == rb_sym_deserialization) {
288
+ /* in_deserialization_scope? */
289
+ in_scope = in_dslr_scope(self, 0);
290
+ } else if (method_scope_sym == rb_sym_split) {
291
+ /* in_split_scope? */
292
+ in_scope = in_split_scope(self, 0);
293
+ } else {
294
+ rb_raise_scope_no_method_err(method_scope_sym);
295
+ }
296
+
297
+ return in_scope;
298
+ }
299
+
300
+ /*
301
+ * @method enter_scope!
302
+ *
303
+ * Enters specific scope.
304
+ *
305
+ * @param name [Symbol] scope symbol representing scope to enter.
306
+ * @return [Boolean] entered scope value increased.
307
+ * def enter_scope! name
308
+ * case name
309
+ * when :contrast
310
+ * enter_contrast_scope!
311
+ * when :deserialization
312
+ * enter_deserialization_scope!
313
+ * when :split
314
+ * enter_split_scope!
315
+ * else
316
+ * raise NoMethodError, "Scope '#{ name.inspect }' is not registered as a scope."
317
+ * end
318
+ * end
319
+ */
320
+ VALUE scope_klass_enter_scope(VALUE self, VALUE method_scope_sym) {
321
+ VALUE enter_scope = Qnil;
322
+
323
+ if (method_scope_sym == rb_sym_contrast) {
324
+ enter_scope = enter_cntr_scope(self, 0);
325
+ } else if (method_scope_sym == rb_sym_deserialization) {
326
+ enter_scope = enter_dsrl_scope(self, 0);
327
+ } else if (method_scope_sym == rb_sym_split) {
328
+ enter_scope = enter_split_scope(self, 0);
329
+ } else {
330
+ rb_raise_scope_no_method_err(method_scope_sym);
331
+ }
332
+
333
+ return enter_scope;
334
+ }
335
+
336
+ /*
337
+ * @method exit_scope!
338
+ *
339
+ * Exits specific scope.
340
+ *
341
+ * @param name [Symbol] scope symbol representing scope to exit.
342
+ * @return [Boolean] entered scope value decreased.
343
+ * def exit_scope! name
344
+ * case name
345
+ * when :contrast
346
+ * exit_contrast_scope!
347
+ * when :deserialization
348
+ * exit_deserialization_scope!
349
+ * when :split
350
+ * exit_split_scope!
351
+ * else
352
+ * raise NoMethodError, "Scope '#{ name.inspect }' is not registered as a scope."
353
+ * end
354
+ * end
355
+ */
356
+ VALUE scope_klass_exit_scope(VALUE self, VALUE method_scope_sym) {
357
+ VALUE exit_scope = Qnil;
358
+
359
+ if (method_scope_sym == rb_sym_contrast) {
360
+ exit_scope = exit_cntr_scope(self, 0);
361
+ } else if (method_scope_sym == rb_sym_deserialization) {
362
+ exit_scope = exit_dsrl_scope(self, 0);
363
+ } else if (method_scope_sym == rb_sym_split) {
364
+ exit_scope = exit_split_scope(self, 0);
365
+ } else {
366
+ rb_raise_scope_no_method_err(method_scope_sym);
367
+ }
368
+
369
+ return exit_scope;
370
+ }
371
+
372
+ /*
373
+ * @class Contrast::Components::Interface
374
+ */
375
+
376
+ /* @method #initialize
377
+ *
378
+ * init set new scope for current fiber
379
+ * @return ec [Hash<Fiber => Scope>]
380
+ *
381
+ * [Ruby definition]
382
+ *
383
+ * EXECUTION_CONTEXT[Fiber.current] = Contrast::Agent::Scope.new
384
+ */
385
+ VALUE contrast_scope_interface_init(VALUE self, VALUE args) {
386
+ VALUE ec = rb_const_get(scope_mod, rb_intern(rb_const_ec));
387
+ rb_hash_aset(ec, rb_fiber_current(), rb_new_c_scope());
388
+
389
+ return ec;
390
+ }
391
+
392
+ /*
393
+ * @method #scope_for_current_ec
394
+ *
395
+ * This returns the scope governing the current execution context. Use this sparingly, preferring the instance
396
+ * & class methods to access and query scope, rather than interacting with the scope object directly.
397
+ *
398
+ * Alternative to Monitor => mutex.synchronize
399
+ * rb_mutex_new(void)
400
+ * rb_mutex_synchronize (VALUE mutex, VALUE(*func)(VALUE arg), VALUE arg)
401
+ * Mutex.synchronize do ... end goes here:
402
+ *
403
+ *
404
+ * [ruby definition]
405
+ *
406
+ * def scope_for_current_ec
407
+ * MONITOR.synchronize do
408
+ * return EXECUTION_CONTEXT[Fiber.current] ||= Contrast::Agent::Scope.new
409
+ * end
410
+ * end
411
+ */
412
+ VALUE contrast_scope_for_current_ec(VALUE self, VALUE args) {
413
+ /* synchronize */
414
+ VALUE mutex = rb_const_get(scope_mod, rb_intern(rb_const_mon));
415
+
416
+ return rb_mutex_synchronize(mutex, get_ec, 0);
417
+ }
418
+
419
+ /*
420
+ * @module Contrast::Components::Scope::InstanceMethods
421
+ */
422
+
423
+ /*
424
+ * @method #enter_method_scope!
425
+ *
426
+ * Iterates over the method policy's scopes and enters in each one.
427
+ *
428
+ * @param scopes_to_enter [Array<Symbol>] Scopes form method_policy#scopes_to_enter
429
+ * for the scope current method policy
430
+ * @return scopes_to_enter [Array<Symbol>]
431
+ *
432
+ * [Ruby definition]
433
+ *
434
+ * def enter_method_scope! scopes_to_enter
435
+ * scopes_to_enter.each do |scope|
436
+ * enter_scope!(scope)
437
+ * end
438
+ * end
439
+ */
440
+ VALUE inst_methods_enter_method_scope(VALUE self, VALUE scopes_to_enter) {
441
+ VALUE scopes_ary, scope;
442
+
443
+ scopes_ary = rb_ary_dup(scopes_to_enter);
444
+ scope = rb_ary_pop(scopes_ary);
445
+
446
+ while(!RB_TYPE_P(scope, T_NIL)){
447
+ inst_methods_enter_scope(self, scope);
448
+ scope = rb_ary_pop(scopes_ary);
449
+ }
450
+
451
+ return scopes_to_enter;
452
+ }
453
+
454
+ /*
455
+ * @method #exit_method_scope!
456
+ *
457
+ * Iterates over the method policy's scopes and exits each one.
458
+ *
459
+ * @param scopes_to_exit [Array<Symbol>] Scopes form method_policy#scopes_to_exit
460
+ * for the scope current method policy
461
+ * @return scopes_to_exit [Array<Symbol>]
462
+ *
463
+ * [Ruby definition]
464
+ *
465
+ * def enter_method_scope! scopes_to_exit
466
+ * scopes_to_exit.each do |scope|
467
+ * enter_scope!(scope)
468
+ * end
469
+ * end
470
+ */
471
+ VALUE inst_methods_exit_method_scope(VALUE self, VALUE scopes_to_exit) {
472
+ VALUE scopes_ary, scope;
473
+
474
+ scopes_ary = rb_ary_dup(scopes_to_exit);
475
+ scope = rb_ary_pop(scopes_ary);
476
+
477
+ while(!RB_TYPE_P(scope, T_NIL)){
478
+ inst_methods_exit_scope(self, scope);
479
+ scope = rb_ary_pop(scopes_ary);
480
+ }
481
+
482
+ return scopes_to_exit;
483
+ }
484
+
485
+ /* For the InstanceMethods we need to call all the scope methods from the current ec context
486
+ * All methods bellow are with same names as Contrast::Agent::Scope class with the difference
487
+ * that they act as forwarders:
488
+ * exp:
489
+ * def in_contrast_scope?
490
+ * scope_for_current_ec.in_contrast_scope?
491
+ * end
492
+ */
493
+ VALUE inst_methods_in_cntr_scope(VALUE self, VALUE args) {
494
+ return is_in_scope(FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope)));
495
+ }
496
+
497
+ VALUE inst_methods_enter_cntr_scope(VALUE self, VALUE args) {
498
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope));
499
+ rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope, scope_increase(scope));
500
+
501
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope);
502
+ }
503
+
504
+ VALUE inst_methods_exit_cntr_scope(VALUE self, VALUE args) {
505
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope));
506
+ rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope, scope_decrease(scope));
507
+
508
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_cntr_scope);
509
+ }
510
+
511
+ VALUE inst_methods_in_split_scope(VALUE self, VALUE args) {
512
+ return is_in_scope(FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope)));
513
+ }
514
+
515
+ VALUE inst_methods_enter_split_scope(VALUE self, VALUE args) {
516
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope));
517
+
518
+ return rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope, scope_increase(scope));
519
+ }
520
+
521
+ VALUE inst_methods_exit_split_scope(VALUE self, VALUE args) {
522
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope));
523
+ rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope, scope_decrease(scope));
524
+
525
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope);
526
+ }
527
+
528
+ VALUE inst_methods_split_scope_depth(VALUE self, VALUE args) {
529
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_split_scope);
530
+ }
531
+
532
+ VALUE inst_methods_in_dsrl_scope(VALUE self, VALUE args) {
533
+ return is_in_scope(FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope)));
534
+ }
535
+
536
+ VALUE inst_methods_enter_dsrl_scope(VALUE self, VALUE args) {
537
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope));
538
+ rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope, scope_increase(scope));
539
+
540
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope);
541
+ }
542
+
543
+ VALUE inst_methods_exit_dsrl_scope(VALUE self, VALUE args) {
544
+ int scope = FIX2INT(rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope));
545
+ rb_iv_set(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope, scope_decrease(scope));
546
+
547
+ return rb_iv_get(contrast_scope_for_current_ec(self, 0), rb_iv_dslr_scope);
548
+ }
549
+
550
+ VALUE inst_methods_in_scope(VALUE self, VALUE method_scope_sym) {
551
+ if (method_scope_sym == rb_sym_contrast) {
552
+ inst_methods_in_cntr_scope(self, 0);
553
+ } else if (method_scope_sym == rb_sym_deserialization) {
554
+ inst_methods_in_dsrl_scope(self, 0);
555
+ } else if (method_scope_sym == rb_sym_split) {
556
+ inst_methods_in_split_scope(self, 0);
557
+ } else {
558
+ rb_raise_scope_no_method_err(method_scope_sym);
559
+ }
560
+ }
561
+
562
+ VALUE inst_methods_enter_scope(VALUE self, VALUE method_scope_sym) {
563
+ if (method_scope_sym == rb_sym_contrast) {
564
+ inst_methods_enter_cntr_scope(self, 0);
565
+ } else if (method_scope_sym == rb_sym_deserialization) {
566
+ inst_methods_enter_dsrl_scope(self, 0);
567
+ } else if (method_scope_sym == rb_sym_split) {
568
+ inst_methods_enter_split_scope(self, 0);
569
+ } else {
570
+ rb_raise_scope_no_method_err(method_scope_sym);
571
+ }
572
+ }
573
+
574
+ VALUE inst_methods_exit_scope(VALUE self, VALUE method_scope_sym) {
575
+ if (method_scope_sym == rb_sym_contrast) {
576
+ inst_methods_exit_cntr_scope(self, 0);
577
+ } else if (method_scope_sym == rb_sym_deserialization) {
578
+ inst_methods_exit_dsrl_scope(self, 0);
579
+ } else if (method_scope_sym == rb_sym_split) {
580
+ inst_methods_exit_split_scope(self, 0);
581
+ } else {
582
+ rb_raise_scope_no_method_err(method_scope_sym);
583
+ }
584
+ }
585
+
586
+ /*
587
+ * @module Contrast::Components::Scope
588
+ *
589
+ * TODO: RUBY-534, #sweep_dead_ecs compensates for a lack of weak tables. when we can use WeakRef, we should
590
+ * investigate removing this call and instead use the WeakRef for the Execution Context's Keys or using our
591
+ * Finalizers Hash for Fibers
592
+ *
593
+ * [Ruby definition]
594
+ *
595
+ * MONITOR.synchronize do
596
+ * EXECUTION_CONTEXT.delete_if do |ec, _scope|
597
+ * !ec.alive?
598
+ * end
599
+ * end
600
+ * end
601
+ */
602
+ VALUE scope_mod_sweep_dead_ecs(VALUE self, VALUE args) {
603
+ VALUE mutex, ec, ec_keys, key, test;
604
+
605
+ mutex = rb_const_get(scope_mod, rb_intern(rb_const_mon));
606
+ ec = rb_const_get(scope_mod, rb_intern(rb_const_ec));
607
+ ec_keys = rb_const_get(scope_mod, rb_intern(rb_const_ec_keys));
608
+
609
+ /* Check if the key is dead (terminated fiber) and delete if true. */
610
+ int i = 0;
611
+ int size = rb_hash_size(ec_keys);
612
+
613
+ for (i = 0; i < size; ++i) {
614
+ key = rb_ary_entry(ec_keys, i);
615
+ test = key;
616
+ if (!RB_TYPE_P(key, T_NIL)) {
617
+ if(!rb_fiber_alive_p(key)) {
618
+ rb_hash_delete(ec, key);
619
+ }
620
+ }
621
+ }
622
+
623
+ return ec;
624
+ }
625
+
626
+ void Init_cs__scope() {
627
+ /* ivs */
628
+ rb_iv_cntr_scope = "@contrast_scope";
629
+ rb_iv_dslr_scope = "@deserialization_scope";
630
+ rb_iv_split_scope = "@split_scope";
631
+
632
+ /* constants */
633
+ rb_const_mon = "MONITOR";
634
+ rb_const_ec = "EXECUTION_CONTEXT";
635
+ rb_const_ec_keys = "EC_KEYS";
636
+
637
+ /* Symbols */
638
+ rb_sym_scope_mod = rb_intern("Scope");
639
+ rb_sym_contrast = ID2SYM(rb_intern("contrast"));
640
+ rb_sym_deserialization = ID2SYM(rb_intern("deserialization"));
641
+ rb_sym_split = ID2SYM(rb_intern("split"));
642
+
643
+ /* method names */
644
+ rb_method_name_init = "initialize";
645
+ rb_method_name_in_scope = "in_scope?";
646
+ rb_method_name_enter_scope = "enter_scope!";
647
+ rb_method_name_exit_scope = "exit_scope!";
648
+ rb_method_name_scope_for_current_ec = "scope_for_current_ec";
649
+ rb_method_name_in_cntr_scope = "in_contrast_scope?";
650
+ rb_method_name_enter_cntr_scope = "enter_contrast_scope!";
651
+ rb_method_name_exit_cntr_scope = "exit_contrast_scope!";
652
+ rb_method_name_in_dslr_scope = "in_deserialization_scope?";
653
+ rb_method_name_enter_dslr_scope = "enter_deserialization_scope!";
654
+ rb_method_name_exit_dslr_scope = "exit_deserialization_scope!";
655
+ rb_method_name_in_split_scope = "in_split_scope?";
656
+ rb_method_name_enter_split_scope = "enter_split_scope!";
657
+ rb_method_name_exit_split_scope = "exit_split_scope!";
658
+ rb_method_name_split_scope_depth = "split_scope_depth";
659
+
660
+ /* Define the new scope modules and objects */
661
+ contrast = rb_define_module("Contrast");
662
+ agent = rb_define_module_under(contrast, "Agent");
663
+ /* components => Contrast::Components */
664
+ components = rb_define_module_under(contrast, "Components");
665
+ /* scope_mod => Contrast::Components::Scope */
666
+ scope_mod = rb_define_module_under(components, "Scope");
667
+ /* scope_interface => Contrast::Components::Scope::Interface */
668
+ scope_interface = rb_define_class_under(scope_mod, "Interface", rb_cObject);
669
+ /* scope_inst_methods => Contrast::Components::Scope::InstanceMethods */
670
+ scope_inst_methods = rb_define_module_under(scope_mod, "InstanceMethods");
671
+ /* scope_klass => Contrast::Agent::Scope */
672
+ scope_klass = rb_define_class_under(agent, "Scope", rb_cObject);
673
+
674
+ /*
675
+ * @class Contrast::Agent::Scope
676
+ */
677
+
678
+ /* Instance methods: */
679
+ rb_define_method(scope_klass, rb_method_name_init, contrast_scope_klass_init, 0);
680
+ rb_define_method(scope_klass, rb_method_name_in_cntr_scope, in_cntr_scope, 0);
681
+ rb_define_method(scope_klass, rb_method_name_enter_cntr_scope, enter_cntr_scope, 0);
682
+ rb_define_method(scope_klass, rb_method_name_exit_cntr_scope, exit_cntr_scope, 0);
683
+ rb_define_method(scope_klass, rb_method_name_in_dslr_scope, in_dslr_scope, 0);
684
+ rb_define_method(scope_klass, rb_method_name_enter_dslr_scope, enter_dsrl_scope, 0);
685
+ rb_define_method(scope_klass, rb_method_name_exit_dslr_scope, exit_dsrl_scope, 0);
686
+ rb_define_method(scope_klass, rb_method_name_in_split_scope, in_split_scope, 0);
687
+ rb_define_method(scope_klass, rb_method_name_enter_split_scope, enter_split_scope, 0);
688
+ rb_define_method(scope_klass, rb_method_name_exit_split_scope, exit_split_scope, 0);
689
+ rb_define_method(scope_klass, rb_method_name_split_scope_depth, split_scope_depth, 0);
690
+ rb_define_method(scope_klass, rb_method_name_in_scope, scope_klass_in_scope, 1);
691
+ rb_define_method(scope_klass, rb_method_name_enter_scope, scope_klass_enter_scope, 1);
692
+ rb_define_method(scope_klass, rb_method_name_exit_scope, scope_klass_exit_scope, 1);
693
+
694
+ /*
695
+ * @class Contrast::Components::Interface
696
+ */
697
+
698
+ /* Interface#initialize */
699
+ rb_define_method(scope_interface, rb_method_name_init, contrast_scope_interface_init, 0);
700
+ /* Interface#scope_for_current_ec */
701
+ rb_define_method(scope_interface, rb_method_name_scope_for_current_ec, contrast_scope_for_current_ec, 0);
702
+
703
+ /*
704
+ * @module Contrast::Components::Scope
705
+ */
706
+
707
+ /* Constants */
708
+
709
+ /* Contrast::Components::Scope::EC_KEYS */
710
+ rb_const_set(scope_mod, rb_intern(rb_const_ec_keys), rb_ary_new());
711
+ /* Contrast::Components::Scope::EXECUTION_CONTEXT => {} */
712
+ rb_define_const(scope_mod, rb_const_ec, rb_hash_new());
713
+ /* Contrast::Components::Scope::MONITOR => Mutex.new */
714
+ rb_define_const(scope_mod, rb_const_mon, rb_mutex_new());
715
+
716
+ /*
717
+ * @module Contrast::Components::Scope::InstanceMethods
718
+ */
719
+
720
+ /* InstanceMethods#scope_for_current_ec */
721
+ rb_define_method(scope_inst_methods, rb_method_name_scope_for_current_ec, contrast_scope_for_current_ec, 0);
722
+ /* Forwarders */
723
+ rb_define_method(scope_inst_methods, rb_method_name_in_cntr_scope, inst_methods_in_cntr_scope, 0);
724
+ rb_define_method(scope_inst_methods, rb_method_name_enter_cntr_scope, inst_methods_enter_cntr_scope, 0);
725
+ rb_define_method(scope_inst_methods, rb_method_name_exit_cntr_scope, inst_methods_exit_cntr_scope, 0);
726
+ rb_define_method(scope_inst_methods, rb_method_name_in_dslr_scope, inst_methods_in_dsrl_scope, 0);
727
+ rb_define_method(scope_inst_methods, rb_method_name_enter_dslr_scope, inst_methods_enter_dsrl_scope, 0);
728
+ rb_define_method(scope_inst_methods, rb_method_name_exit_dslr_scope, inst_methods_exit_dsrl_scope, 0);
729
+ rb_define_method(scope_inst_methods, rb_method_name_in_split_scope, inst_methods_in_split_scope, 0);
730
+ rb_define_method(scope_inst_methods, rb_method_name_enter_split_scope, inst_methods_enter_split_scope, 0);
731
+ rb_define_method(scope_inst_methods, rb_method_name_exit_split_scope, inst_methods_exit_split_scope, 0);
732
+ rb_define_method(scope_inst_methods, rb_method_name_split_scope_depth, inst_methods_split_scope_depth, 0);
733
+ rb_define_method(scope_inst_methods, rb_method_name_in_scope, inst_methods_in_scope, 1);
734
+ rb_define_method(scope_inst_methods, rb_method_name_enter_scope, inst_methods_enter_scope, 1);
735
+ rb_define_method(scope_inst_methods, rb_method_name_exit_scope, inst_methods_exit_scope, 1);
736
+
737
+ /*
738
+ * @module Contrast::Components::Scope
739
+ */
740
+ rb_define_singleton_method(scope_mod, "sweep_dead_ecs", scope_mod_sweep_dead_ecs, 0);
741
+
742
+ /*
743
+ * @module Contrast::Components::Scope::InstanceMethods
744
+ */
745
+ rb_define_method(scope_inst_methods, "contrast_enter_method_scopes!", inst_methods_enter_method_scope, 1);
746
+ rb_define_method(scope_inst_methods, "contrast_exit_method_scopes!", inst_methods_exit_method_scope, 1);
747
+ }