libsqreen 0.3.0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: cbb56500787a0d15c668257164ca25170ba8121cfca9245b5c4416534245cf8a
+  data.tar.gz: d238a6f72450a914cf6fe6b2a62aa8fc322972083ab5d6a2e6c9765b461c26f4
+SHA512:
+  metadata.gz: c765d809b966a065a1b89df955ece005c668d259a46594f234fa77d25d97e0bf2c6e6178bbbf546424fed649c5b13c864546ddc7267373d7d1eaf923ed2a454c
+  data.tar.gz: c7a42810d5012ed06f6cbd5bd7ce17a5dd908f2395cca19d43b784847325a10a65f3f23a56cf59a765d3614e6c7422eeabf4386899584bed20319649fff1484d

data/.gitignore

@@ -0,0 +1,6 @@
+*.bundle
+*.so
+Gemfile.lock
+/pkg
+/tmp
+.location.yml

data/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "vendor/libsqreen"]
+	path = vendor/libsqreen
+	url = ../PowerWAF

data/CHANGELOG.md

@@ -0,0 +1,13 @@
+# libsqreen v0.3.0.0.3
+
+- Prevent libc++ symbol exposure
+- Fix installation path issue
+
+# libsqreen v0.3.0.0.2
+
+- Add support for strings with NULL bytes
+- Handle unsupported types gracefully
+
+# libsqreen v0.3.0.0.1
+
+- Implement In-App WAF core binding functions for macOS and Linux

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gemspec

data/LICENSE

@@ -0,0 +1,7 @@
+Sqreen for Ruby is free-to-use, proprietary software.
+
+Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+## Vendored dependencies
+
+Please refer to LICENSE files in the vendor directory

data/Makefile

@@ -0,0 +1,206 @@
+LIBSQREEN_VERSION := 0.3.0
+LIBSQREEN_PLATFORM := $(shell ruby -e 'puts case RUBY_PLATFORM; when /-linux-musl/; "Linux-x86_64-muslc"; when /-linux(-gnu|)/; "Linux-x86_64-glibc"; when /-darwin\d+/; "Darwin-x86_64"; when /-mingw64/; "Windows-AMD64"; else "UNSUPPORTED"; end')
+RUBY_PLATFORM := $(shell ruby -e 'puts RUBY_PLATFORM')
+RUBY_VERSION := $(shell ruby -e 'puts RUBY_VERSION')
+RUBY_API_VERSION := $(shell ruby -e 'RUBY_VERSION =~ /^(\d+\.\d+)/ && puts($$1)')
+
+all:
+
+.PHONY: vars
+vars:
+	@echo $(LIBSQREEN_VERSION)
+	@echo $(LIBSQREEN_PLATFORM)
+	@echo $(RUBY_PLATFORM)
+	@echo $(RUBY_VERSION)
+	@echo $(RUBY_API_VERSION)
+
+.PHONY: vendor
+vendor: vendor/libsqreen
+
+vendor/libsqreen/git:
+	git submodule init
+	git submodule update
+	cd vendor/libsqreen && git submodule init && git submodule update
+
+vendor/libsqreen/build/Makefile: vendor/libsqreen
+	cd vendor/libsqreen/build && cmake ..
+
+vendor/libsqreen/build/libSqreenStatic.a: vendor/libsqreen/build/Makefile
+	cd vendor/libsqreen/build && make
+	cd vendor/libsqreen/build && rm -f libSqreen.{so,dylib}
+
+vendor/libsqreen/build/libSqreen.a: vendor/libsqreen/build/libSqreenStatic.a
+	cd vendor/libsqreen/build && ln -sf libSqreenStatic.a libSqreen.a
+
+vendor/libsqreen/include/PowerWAF.h: vendor/libsqreen
+
+vendor/libsqreen/include/Sqreen.h: vendor/libsqreen/include/PowerWAF.h
+	cd vendor/libsqreen/include && ln -sf PowerWAF.h Sqreen.h
+
+.PHONY: vendor/compile
+vendor/compile: vendor/libsqreen/build/libSqreen.a vendor/libsqreen/include/Sqreen.h
+
+tmp/fetch:
+	mkdir -p tmp/fetch
+
+tmp/fetch/SqreenLibrary/SqreenLibrary-$(LIBSQREEN_VERSION)-$(LIBSQREEN_PLATFORM).tar.gz:
+	$(eval export AWS_ACCESS_KEY := $(shell test -f s3auth && cat s3auth | grep access_key | sed 's/^.*= //'))
+	$(eval export AWS_SECRET_KEY := $(shell test -f s3auth && cat s3auth | grep secret_key | sed 's/^.*= //'))
+	./s3get sqreen-download-private.s3-eu-west-1.amazonaws.com/SqreenLibrary/SqreenLibrary-$(LIBSQREEN_VERSION)-$(LIBSQREEN_PLATFORM).tar.gz tmp/fetch/
+
+.PHONY: fetch
+fetch: tmp/fetch/SqreenLibrary/SqreenLibrary-$(LIBSQREEN_VERSION)-$(LIBSQREEN_PLATFORM).tar.gz
+
+.PHONY: vendor/libsqreen/fetch
+vendor/libsqreen/fetch: fetch
+	mkdir -p vendor/libsqreen
+	tar -xvz -C vendor/libsqreen -f tmp/fetch/SqreenLibrary/SqreenLibrary-$(LIBSQREEN_VERSION)-$(LIBSQREEN_PLATFORM).tar.gz --strip-components 1 >/dev/null
+
+.PHONY: vendor/fetch
+vendor/fetch: vendor/libsqreen/fetch vendor/libsqreen/include/Sqreen.h
+
+.PHONY: compile
+compile:
+	bundle exec rake compile
+
+compile/darwin/1.9.3:
+	source /opt/arch/share/chruby/chruby.sh; chruby 1.9.3; make bundle compile
+
+compile/darwin/2.0:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.0.; make bundle compile
+
+compile/darwin/2.1:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.1.; make bundle compile
+
+compile/darwin/2.2:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.2.; make bundle compile
+
+compile/darwin/2.3:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.3.; make bundle compile
+
+compile/darwin/2.4:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.4.; make bundle compile
+
+compile/darwin/2.5:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.5.; make bundle compile
+
+compile/darwin/2.6:
+	source /opt/arch/share/chruby/chruby.sh; chruby 2.6.; make bundle compile
+
+compile/linux/1.9.3:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:1.9.3 make bundle compile
+
+compile/linux/2.0:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.0 make bundle compile
+
+compile/linux/2.1:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.1 make bundle compile
+
+compile/linux/2.2:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.2 make bundle compile
+
+compile/linux/2.3:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.3 make bundle compile
+
+compile/linux/2.4:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.4 make bundle compile
+
+compile/linux/2.5:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.5 make bundle compile
+
+compile/linux/2.6:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.6 make bundle compile
+
+compile/linux-musl/2.4:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.4-alpine make bundle compile
+
+compile/linux-musl/2.5:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.5-alpine make bundle compile
+
+compile/linux-musl/2.6:
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/ruby:2.6-alpine make bundle compile
+
+compile/darwin/all: compile/darwin/1.9.3 compile/darwin/2.0 compile/darwin/2.1 compile/darwin/2.2 compile/darwin/2.3 compile/darwin/2.4 compile/darwin/2.5 compile/darwin/2.6
+compile/linux/all: compile/linux/1.9.3 compile/linux/2.0 compile/linux/2.1 compile/linux/2.2 compile/linux/2.3 compile/linux/2.4 compile/linux/2.5 compile/linux/2.6
+compile/linux-musl/all: compile/linux-musl/2.4 compile/linux-musl/2.5 compile/linux-musl/2.6
+
+.PHONY: gem
+gem:
+	bundle exec rake build
+
+.PHONY: test
+test:
+	bundle exec ruby test/test_libsqreen.rb
+
+.PHONY: pry
+pry:
+	bundle exec ruby -I ext:lib -r libsqreen -r pry -e 'binding.pry'
+
+.PHONY: clean/gem
+clean/gem:
+	rm -rvf pkg
+
+.PHONY: clean/vendor/compile
+clean/vendor/compile:
+	cd vendor/libsqreen && git clean -f -d -x
+
+.PHONY: clean/compile
+clean/compile:
+	rm -rvf tmp lib/ext/$(RUBY_PLATFORM)
+
+.PHONY: clean/compile/all
+clean/compile/all:
+	rm -rvf tmp lib/ext/*
+
+.PHONY: clean
+clean: clean/gem clean/compile/all
+
+bundle:
+	bundle install
+
+docker/ruby/1.9.3/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=1.9.3-p551 -t sqreen/native/ruby:1.9.3 docker
+docker/ruby/2.0/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.0.0-p648 -t sqreen/native/ruby:2.0 docker
+docker/ruby/2.1/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.1.10 -t sqreen/native/ruby:2.1 docker
+docker/ruby/2.2/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.2.10 -t sqreen/native/ruby:2.2 docker
+docker/ruby/2.3/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.3.8 -t sqreen/native/ruby:2.3 docker
+docker/ruby/2.4/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.4.7 -t sqreen/native/ruby:2.4 docker
+docker/ruby/2.5/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.5.6 -t sqreen/native/ruby:2.5 docker
+docker/ruby/2.6/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.6.4 -t sqreen/native/ruby:2.6 docker
+docker/ruby/2.7/image:
+	docker build -f docker/Dockerfile.ruby --build-arg RUBY_VERSION=2.7.0-preview1 -t sqreen/native/ruby:2.7 docker
+docker/ruby/image: docker/ruby/1.9.3/image docker/ruby/2.0/image docker/ruby/2.1/image docker/ruby/2.2/image docker/ruby/2.3/image docker/ruby/2.4/image docker/ruby/2.5/image docker/ruby/2.6/image docker/ruby/2.7/image
+
+docker/ruby/2.4-alpine/image:
+	docker build -f docker/Dockerfile.ruby-alpine --build-arg RUBY_VERSION=2.4.7 -t sqreen/native/ruby:2.4-alpine docker
+docker/ruby/2.5-alpine/image:
+	docker build -f docker/Dockerfile.ruby-alpine --build-arg RUBY_VERSION=2.5.6 -t sqreen/native/ruby:2.5-alpine docker
+docker/ruby/2.6-alpine/image:
+	docker build -f docker/Dockerfile.ruby-alpine --build-arg RUBY_VERSION=2.6.4 -t sqreen/native/ruby:2.6-alpine docker
+docker/ruby/2.7-alpine/image:
+	docker build -f docker/Dockerfile.ruby-alpine --build-arg RUBY_VERSION=2.7.0-preview1 -t sqreen/native/ruby:2.7-alpine docker
+
+docker/debian/image:
+	docker build -f docker/Dockerfile.debian9 -t sqreen/native/debian docker
+
+docker/arch/image:
+	docker build -f docker/Dockerfile.arch -t sqreen/native/arch docker
+
+docker/alpine/image:
+	docker build -f docker/Dockerfile.alpine3 -t sqreen/native/alpine docker
+
+docker/debian: docker/debian/image
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/debian /bin/bash
+
+docker/alpine: docker/alpine/image
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/alpine /bin/sh
+
+docker/arch: docker/arch/image
+	docker run --rm -it -v $$PWD:/libsqreen -w /libsqreen sqreen/native/arch /bin/bash

data/README.md

@@ -0,0 +1 @@
+# ruby-libsqreen

data/Rakefile

@@ -0,0 +1,33 @@
+require 'bundler/gem_tasks'
+require "rake/testtask"
+require "rake/extensiontask"
+
+Bundler::GemHelper.install_tasks
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.libs << 'lib'
+  t.test_files = FileList['test/**/*_test.rb']
+end
+
+DISTRIBUTIONS = [
+  'x86_64-linux',
+  'x86-linux',
+  'x86_64-freebsd-10',
+  'x86_64-freebsd-11',
+  'amd64-freebsd-10',
+  'amd64-freebsd-11',
+  'arm-linux',
+  'aarch64-linux',
+  'x86_64-linux-musl'
+]
+
+gem = Gem::Specification.load(File.dirname(__FILE__) + '/libsqreen.gemspec')
+Rake::ExtensionTask.new('libsqreen', gem) do |ext|
+  RUBY_VERSION =~ /^(\d+\.\d+)/
+  ext.lib_dir = "lib/ext/#{RUBY_PLATFORM}/#{$1}"
+end
+Rake::ExtensionTask.new('libsqreen_extension', gem) do |ext|
+  RUBY_VERSION =~ /^(\d+\.\d+)/
+  ext.lib_dir = "lib/ext/#{RUBY_PLATFORM}/#{$1}"
+end

data/azure-pipelines.yml

@@ -0,0 +1,28 @@
+strategy:
+  matrix:
+    Ubuntu:
+      imageName: 'ubuntu-latest'
+    macOS High Sierra:
+      imageName: 'macos-10.13'
+    macOS Mojave:
+      imageName: 'macos-10.14'
+pool:
+  vmImage: $(imageName)
+steps:
+- checkout: self
+  clean: true
+  submodules: recursive
+- script: if uname -s | grep -i -v darwin; then sudo apt-get install -y build-essential ruby ruby-dev cmake git curl; fi
+- script: sudo gem install bundler --version '< 2.0' --no-document
+- script: bundle install
+- script: make compile
+- script: make gem
+- script: make test
+- script: sudo gem install pkg/*.gem
+- script: ls -l pkg
+- script: cp -v pkg/*.gem $(Build.ArtifactStagingDirectory)/
+- task: PublishBuildArtifacts@1
+  displayName: Save Artifacts
+  inputs:
+    pathtoPublish: "$(Build.ArtifactStagingDirectory)"
+    artifactName: "$(Agent.JobName) Gem"

data/ext/libsqreen/arch.rb

@@ -0,0 +1,23 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+require 'rubygems'
+
+module LibSqreen
+  module Arch
+    module_function
+
+    def libsqreen_arch
+      case Gem::Platform.local.cpu
+      when /^arm(v6.*|v7.*)*$/ then 'arm'
+      when /^a(rm|arch)64$/    then 'arm64'
+      when /^x86$/             then 'ia32'
+      when /^(x86_64|amd64)$/  then 'x64'
+      when /^universal$/       then 'x64' # OS X
+      else
+        warn "Unsupported target: #{Gem::Platform.local.cpu}"
+        Gem::Platform.local.cpu
+      end
+    end
+  end
+end

data/ext/libsqreen/extconf.rb

@@ -0,0 +1,20 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+require 'mkmf'
+create_makefile('libsqreen')
+
+require File.expand_path '../location', __FILE__
+
+begin
+  location = LibSqreen::Location::Vendor.new
+  location.install!
+rescue LibSqreen::Location::Vendor::HeaderNotFound => reason
+  puts 'could not find header. fallback to stubbing.'
+  location = LibSqreen::Location::Stub.new(reason)
+  location.install!
+rescue LibSqreen::Location::Vendor::ArchiveNotFound => reason
+  puts "could not find binary archive:  native features for platform #{RUBY_PLATFORM} not supported. fallback to stubbing."
+  location = LibSqreen::Location::Stub.new(reason)
+  location.install!
+end

data/ext/libsqreen/libsqreen.c

@@ -0,0 +1,29 @@
+// Copyright (c) 2015 Sqreen. All Rights Reserved.
+// Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+#include <ruby.h>
+
+void
+Init_libsqreen(void) {
+    VALUE mLibSqreen;
+
+    mLibSqreen = rb_define_module("LibSqreen");
+
+    // record load order
+    {
+        ID i_load_order;
+        VALUE load_order;
+
+        i_load_order = rb_intern("@load_order");
+        load_order = rb_ivar_get(mLibSqreen, i_load_order);
+        if (load_order == Qnil) {
+            load_order = rb_ary_new();
+            rb_ivar_set(mLibSqreen, i_load_order, load_order);
+        }
+
+        rb_ary_push(load_order, ID2SYM(rb_intern("libsqreen.c")));
+    }
+
+    // ensure libsqreen.rb is required too if this is loaded first
+    rb_require("libsqreen.rb");
+}

data/ext/libsqreen/location.rb

@@ -0,0 +1,78 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+require 'yaml'
+require 'pathname'
+require File.expand_path '../paths', __FILE__
+
+module LibSqreen
+  class Location
+    def install!
+      File.open(Pathname(__FILE__).dirname.join('.location.yml'), "w") do |f|
+        f.write(self.to_yaml)
+      end
+      return 0
+    end
+
+    def self.load!
+      File.open(Pathname(__FILE__).dirname.join('.location.yml')) do |f|
+        YAML.load(f)
+      end
+    end
+
+    class Stub < Location
+      def initialize(reason)
+        @reason = reason
+      end
+
+      def verify!
+        raise @reason
+      end
+    end
+
+    class Vendor < Location
+      def install!
+        verify!
+        super
+      end
+
+      def configure(context = MkmfContext.new)
+        context.incflags.insert(0, LibSqreen::Paths.include_paths.map { |p| "-I#{p}" }.join(" ")  + " ")
+        context.ldflags.insert(0, LibSqreen::Paths.object_paths.select { |p| File.exist?(p) }.join(" ") + " ")
+      end
+
+      def verify!
+        include_paths = LibSqreen::Paths.include_paths
+        header_files  = LibSqreen::Paths.header_files
+        object_paths  = LibSqreen::Paths.object_paths
+
+        header_files.each do |h|
+          unless include_paths.detect { |p| Pathname(p).join(h).exist? }
+            fail HeaderNotFound, "Unable to locate '#{h}' in the libsqreen header paths: #{include_paths.inspect}"
+          end
+        end
+        object_paths.each do |p|
+          fail(ArchiveNotFound, p) unless File.exist?(p)
+        end
+      end
+
+      class HeaderNotFound < StandardError; end
+
+      class ArchiveNotFound < StandardError
+        def initialize(filename)
+          super "Unable to find '#{filename}'"
+        end
+      end
+    end
+
+    class MkmfContext
+      def incflags
+        $INCFLAGS
+      end
+
+      def ldflags
+        $LDFLAGS
+      end
+    end
+  end
+end