Contents

/* Copyright (c) 2020 Contrast Security, Inc.  See
 * https://www.contrastsecurity.com/enduser-terms-0317a for more details. */

#include "cs__assess_kernel.h"
#include "../cs__common/cs__common.h"
#include <ruby.h>

VALUE
contrast_patched_kernel_exec(const int argc, const VALUE *argv,
                             const VALUE self) {
    int nested_scope =
        RTEST(rb_funcall(contrast_patcher(), rb_sym_in_scope, 0));

    if (!nested_scope && argc > 0) {
        rb_funcall(contrast_patcher(), rb_sym_enter_scope, 0);
        VALUE data = argv[0];
        rb_funcall(kernel_propagator, exec_apply_trigger, 1, data);
        rb_funcall(contrast_patcher(), rb_sym_exit_scope, 0);
    }

    /* maybe this should be rb_funcall2.  this works right now because *argv == argv[0].
     * exec shouldn't ever be called with != 1 argc, so not a huge problem */
    return rb_funcall(self, rb_sym_assess_kernel_exec, argc, *argv);
}

void Init_cs__assess_kernel(void) {
    kernel_propagator = rb_define_module("KernelPropagator");
    exec_apply_trigger = rb_intern("apply_trigger");

    rb_sym_assess_kernel_exec = contrast_register_patch("Kernel",
                                                        "exec",
                                                        contrast_patched_kernel_exec);

    /* should return the same value as above */
    rb_sym_assess_kernel_exec = contrast_register_singleton_patch("Kernel",
                                                                  "exec",
                                                                  contrast_patched_kernel_exec);
}

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
contrast-agent-3.11.0	ext/cs__assess_kernel/cs__assess_kernel.c