mirror of
https://github.com/perlbot/perlbuut
synced 2025-06-07 17:05:43 -04:00
319 lines
7.1 KiB
Perl
319 lines
7.1 KiB
Perl
#!/usr/bin/perl
|
|
|
|
use strict;
|
|
use Data::Dumper;
|
|
use Scalar::Util; #Required by Data::Dumper
|
|
use BSD::Resource;
|
|
use File::Glob;
|
|
use POSIX;
|
|
|
|
# This sub is defined here so that it is defined before the 'use charnames'
|
|
# command. This causes extremely strange interactions that result in the
|
|
# deparse output being much longer than it should be.
|
|
sub deparse_perl_code {
|
|
my( $code ) = @_;
|
|
my $sub = eval "no strict; no warnings; no charnames; sub{ $code\n }";
|
|
if( $@ ) { print "Error: $@"; return }
|
|
|
|
my $dp = B::Deparse->new("-p", "-q", "-x7");
|
|
my $ret = $dp->coderef2text($sub);
|
|
|
|
$ret =~ s/\{//;
|
|
$ret =~ s/package (?:\w+(?:::)?)+;//;
|
|
$ret =~ s/ no warnings;//;
|
|
$ret =~ s/\s+/ /g;
|
|
$ret =~ s/\s*\}\s*$//;
|
|
|
|
print $ret;
|
|
}
|
|
|
|
use utf8; eval "\$\343\201\257 = 42"; # attempt to automatically load the utf8 libraries.
|
|
use charnames qw(:full);
|
|
use PerlIO;
|
|
use PerlIO::scalar;
|
|
|
|
# Required for perl_deparse
|
|
use B::Deparse;
|
|
|
|
# Javascript Libs
|
|
BEGIN{ eval "use JavaScript::SpiderMonkey;"; }
|
|
my $JSENV_CODE = do { local $/; open my $fh, "deps/env.js"; <$fh> };
|
|
require 'bytes_heavy.pl';
|
|
|
|
use Tie::Hash::NamedCapture;
|
|
|
|
uc "\x{666}"; #Attempt to load unicode libraries.
|
|
binmode STDOUT, ":utf8"; # Enable utf8 output.
|
|
|
|
BEGIN{ eval "use PHP::Interpreter;"; }
|
|
|
|
# Evil Ruby stuff
|
|
BEGIN{ eval "use Ruby qw/rb_eval/;"; }
|
|
BEGIN { $SIG{SEGV} = sub { die "Segmentation Fault\n"; } } #Attempt to override the handler Ruby installs.
|
|
|
|
# Evil K20 stuff
|
|
BEGIN {
|
|
local $@;
|
|
eval "use Language::K20;";
|
|
unless( $@ ) {
|
|
Language::K20::k20eval( "2+2\n" ); # This eval loads the dynamic components before the chroot.
|
|
# Note that k20eval always tries to output to stdout so we
|
|
# must end the command with a \n to prevent this output.
|
|
}
|
|
}
|
|
|
|
BEGIN { chdir "var/"; $0="../$0"; } # CHDIR to stop inline from creating stupid _Inline directories everywhere
|
|
# Inline::Lua doesn't seem to provide an eval function. SIGH.
|
|
BEGIN { eval 'use Inline Lua => "function lua_eval(str) return loadstring(str) end";'; }
|
|
BEGIN { chdir ".."; $0=~s/^\.\.\/// } # Assume our earlier chdir succeded. Yay!
|
|
|
|
|
|
# Evil python stuff
|
|
BEGIN { eval "use Inline::Python qw/py_eval/;"; }
|
|
|
|
# Evil J stuff
|
|
BEGIN { eval "use Jplugin;"; }
|
|
|
|
use Carp::Heavy;
|
|
use Storable qw/nfreeze/; nfreeze([]); #Preload Nfreeze since it's loaded on demand
|
|
|
|
my $code = do { local $/; <STDIN> };
|
|
|
|
|
|
# Close every other filehandle we may have open
|
|
# this is probably legacy code at this point since it was used
|
|
# inside the original bb2 which forked to execute this code.
|
|
opendir my $dh, "/proc/self/fd" or die $!;
|
|
while(my $fd = readdir($dh)) { next unless $fd > 2; POSIX::close($fd) }
|
|
|
|
# Get the nobody uid before we chroot.
|
|
my $nobody_uid = getpwnam("nobody");
|
|
die "Error, can't find a uid for 'nobody'. Replace with someone who exists" unless $nobody_uid;
|
|
|
|
# Set the CPU LIMIT.
|
|
# Do this before the chroot because some of the other
|
|
# setrlimit calls will prevent chroot from working
|
|
# however at the same time we need to preload an autload file
|
|
# that chroot will prevent, so do it here.
|
|
setrlimit(RLIMIT_CPU, 10,10);
|
|
|
|
# Root Check
|
|
if( $< != 0 )
|
|
{
|
|
die "Not root, can't chroot or take other precautions, dying\n";
|
|
}
|
|
|
|
# The chroot section
|
|
chdir("./jail") or
|
|
do {
|
|
mkdir "./jail";
|
|
chdir "./jail" or die "Failed to find a jail live in, couldn't make one either: $!\n";
|
|
};
|
|
|
|
chroot(".") or die $!;
|
|
|
|
# Here's where we actually drop our root privilege
|
|
$)="$nobody_uid $nobody_uid";
|
|
$(=$nobody_uid;
|
|
$<=$>=$nobody_uid;
|
|
POSIX::setgid($nobody_uid); #We just assume the uid is the same as the gid. Hot.
|
|
|
|
die "Failed to drop to nobody"
|
|
if $> != $nobody_uid
|
|
or $< != $nobody_uid;
|
|
|
|
my $kilo = 1024;
|
|
my $meg = $kilo * $kilo;
|
|
my $limit = 50 * $meg;
|
|
|
|
(
|
|
setrlimit(RLIMIT_DATA, $limit, $limit )
|
|
and
|
|
setrlimit(RLIMIT_STACK, $limit, $limit )
|
|
and
|
|
setrlimit(RLIMIT_NPROC, 1,1)
|
|
and
|
|
setrlimit(RLIMIT_NOFILE, 0,0)
|
|
and
|
|
setrlimit(RLIMIT_OFILE, 0,0)
|
|
and
|
|
setrlimit(RLIMIT_OPEN_MAX,0,0)
|
|
and
|
|
setrlimit(RLIMIT_LOCKS, 0,0)
|
|
and
|
|
setrlimit(RLIMIT_AS,$limit,$limit)
|
|
and
|
|
setrlimit(RLIMIT_VMEM,$limit, $limit)
|
|
and
|
|
setrlimit(RLIMIT_MEMLOCK,100,100)
|
|
and
|
|
setrlimit(RLIMIT_CPU, 10,10)
|
|
)
|
|
or die "Failed to set rlimit: $!";
|
|
|
|
#setrlimit(RLIMIT_MSGQUEUE,100,100);
|
|
|
|
die "Failed to drop root: $<" if $< == 0;
|
|
close STDIN;
|
|
|
|
$code =~ s/^\s*(\w+)\s*//
|
|
or die "Failed to parse code type! $code";
|
|
my $type = $1;
|
|
|
|
# Chomp code..
|
|
$code =~ s/\s*$//;
|
|
|
|
# Choose which type of evaluation to perform
|
|
# will probably be a dispatch table soon.
|
|
if( $type eq 'perl' or $type eq 'pl' ) {
|
|
perl_code($code);
|
|
}
|
|
elsif( $type eq 'javascript' ) {
|
|
javascript_code($code);
|
|
}
|
|
elsif( $type eq 'php' ) {
|
|
php_code($code);
|
|
}
|
|
elsif( $type eq 'deparse' ) {
|
|
deparse_perl_code($code);
|
|
}
|
|
elsif( $type eq 'k20' ) {
|
|
k20_code($code);
|
|
}
|
|
elsif( $type eq 'rb' or $type eq 'ruby' ) {
|
|
ruby_code($code);
|
|
}
|
|
elsif( $type eq 'py' or $type eq 'python' ) {
|
|
python_code($code);
|
|
}
|
|
elsif( $type eq 'lua' ) {
|
|
lua_code($code);
|
|
}
|
|
elsif( $type eq 'j' ) {
|
|
j_code($code);
|
|
}
|
|
|
|
exit;
|
|
|
|
#-----------------------------------------------------------------------------
|
|
# Evaluate the actual code
|
|
#-----------------------------------------------------------------------------
|
|
sub perl_code {
|
|
my( $code ) = @_;
|
|
local $@;
|
|
local @INC;
|
|
|
|
local $_;
|
|
$code = "no strict; no warnings; package main; $code";
|
|
my $ret = eval $code;
|
|
|
|
local $Data::Dumper::Terse = 1;
|
|
local $Data::Dumper::Quotekeys = 0;
|
|
local $Data::Dumper::Indent = 0;
|
|
local $Data::Dumper::Useqq = 1;
|
|
|
|
my $out = ref($ret) ? Dumper( $ret ) : "" . $ret;
|
|
|
|
print $out;
|
|
|
|
if( $@ ) { print "ERROR: $@" }
|
|
}
|
|
|
|
|
|
|
|
sub javascript_code {
|
|
my( $code ) = @_;
|
|
local $@;
|
|
|
|
my $js = JavaScript::SpiderMonkey->new;
|
|
$js->init;
|
|
# This is great evil!
|
|
JavaScript::SpiderMonkey::JS_ForceLatest( $js->{context} );
|
|
|
|
|
|
# Set up the Environment for ENVJS
|
|
$js->property_by_path("Envjs.profile", 0);
|
|
$js->function_set("print", sub { print @_ } );
|
|
|
|
for( qw/log debug info warn error/ ) {
|
|
$js->eval("Envjs.$_=function(x){}");
|
|
}
|
|
|
|
$js->eval($JSENV_CODE) or die $@;
|
|
|
|
|
|
|
|
my $modified_code = qq!
|
|
var ret = eval("\Q$code\E");
|
|
if( ret === null ) {
|
|
"null"
|
|
}
|
|
else if( typeof ret == "object" || typeof ret == "array" ) {
|
|
ret.toSource();
|
|
}
|
|
else { ret }
|
|
!;
|
|
|
|
print $js->ret_eval($modified_code);
|
|
|
|
if( $@ ) { print "ERROR: $@"; }
|
|
}
|
|
|
|
sub ruby_code {
|
|
my( $code ) = @_;
|
|
local $@;
|
|
|
|
print rb_eval( $code );
|
|
}
|
|
|
|
sub php_code {
|
|
my( $code ) = @_;
|
|
local $@;
|
|
|
|
#warn "PHP - [$code]";
|
|
|
|
my $php = PHP::Interpreter->new;
|
|
|
|
$php->set_output_handler(\ my $output );
|
|
|
|
$php->eval("$code;");
|
|
|
|
print $php->get_output;
|
|
|
|
#warn "ENDING";
|
|
|
|
if( $@ ) { print "ERROR: $@"; }
|
|
}
|
|
|
|
sub k20_code {
|
|
my( $code ) = @_;
|
|
|
|
$code =~ s/\r?\n//g;
|
|
|
|
|
|
Language::K20::k20eval( '."\\\\r ' . int(rand(2**31)) . '";' . "\n"); # set random seed
|
|
|
|
Language::K20::k20eval( $code );
|
|
}
|
|
|
|
sub python_code {
|
|
my( $code ) = @_;
|
|
|
|
py_eval( $code, 2 );
|
|
}
|
|
|
|
sub lua_code {
|
|
my( $code ) = @_;
|
|
|
|
#print lua_eval( $code )->();
|
|
|
|
my $ret = lua_eval( $code );
|
|
|
|
print ref $ret ? $ret->() : $ret;
|
|
}
|
|
|
|
sub j_code {
|
|
my( $code ) = @_;
|
|
|
|
Jplugin::jplugin( $code );
|
|
}
|