mirror of
https://github.com/QingdaoU/Judger.git
synced 2024-12-29 16:31:42 +00:00
81 lines
3.1 KiB
C
81 lines
3.1 KiB
C
////////////////////////////////////////////////////////////////////////////////
|
|
// Copyright (C) 2012-2015 Jun Wu <quark@zju.edu.cn>
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
// of this software and associated documentation files (the "Software"), to deal
|
|
// in the Software without restriction, including without limitation the rights
|
|
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
// copies of the Software, and to permit persons to whom the Software is
|
|
// furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
// THE SOFTWARE.
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
|
|
#define _BSD_SOURCE // readlink
|
|
#include <dlfcn.h>
|
|
#include <stdlib.h> // exit
|
|
#include <string.h> // strstr, memset
|
|
#include <link.h> // ElfW
|
|
#include <errno.h> // EPERM
|
|
#include <unistd.h> // readlink
|
|
#include <seccomp.h>
|
|
#include <stdio.h>
|
|
int syscalls_whitelist[] = {SCMP_SYS(read), SCMP_SYS(write), SCMP_SYS(open), SCMP_SYS(close),
|
|
SCMP_SYS(fstat), SCMP_SYS(mmap), SCMP_SYS(mprotect), SCMP_SYS(munmap),
|
|
SCMP_SYS(brk), SCMP_SYS(access), SCMP_SYS(exit_group), SCMP_SYS(arch_prctl)};
|
|
typedef int (*main_t)(int, char **, char **);
|
|
|
|
#ifndef __unbounded
|
|
# define __unbounded
|
|
#endif
|
|
|
|
int __libc_start_main(main_t main, int argc,
|
|
char *__unbounded *__unbounded ubp_av,
|
|
ElfW(auxv_t) *__unbounded auxvec,
|
|
__typeof (main) init,
|
|
void (*fini) (void),
|
|
void (*rtld_fini) (void), void *__unbounded
|
|
stack_end)
|
|
{
|
|
|
|
int i;
|
|
ssize_t len;
|
|
void *libc;
|
|
int whitelist_length = sizeof(syscalls_whitelist) / sizeof(int);
|
|
scmp_filter_ctx ctx = NULL;
|
|
int (*libc_start_main)(main_t main,
|
|
int,
|
|
char *__unbounded *__unbounded,
|
|
ElfW(auxv_t) *,
|
|
__typeof (main),
|
|
void (*fini) (void),
|
|
void (*rtld_fini) (void),
|
|
void *__unbounded stack_end);
|
|
|
|
// Get __libc_start_main entry point
|
|
libc = dlopen("libc.so.6", RTLD_LOCAL | RTLD_LAZY);
|
|
if (!libc) exit(-1);
|
|
|
|
libc_start_main = dlsym(libc, "__libc_start_main");
|
|
if (!libc_start_main) exit(-2);
|
|
|
|
ctx = seccomp_init(SCMP_ACT_KILL);
|
|
if (!ctx) goto out;
|
|
for(i = 0; i < whitelist_length; i++)
|
|
if (seccomp_rule_add(ctx, SCMP_ACT_ALLOW, syscalls_whitelist[i], 0)) goto out;
|
|
if (seccomp_load(ctx)) goto out;
|
|
out:
|
|
if (ctx) seccomp_release(ctx);
|
|
return ((*libc_start_main)(main, argc, ubp_av, auxvec,
|
|
init, fini, rtld_fini, stack_end));
|
|
}
|