mirror of
https://github.com/burrowers/garble.git
synced 2025-12-24 12:58:05 +08:00
c8d61c772f
Finally, finally this is done. This allows import paths to be obfuscated by modifying object/archive files and garbling import paths contained within. The bulk of the code that makes parsing and writing Go object/archive files possible lives at https://github.com/Binject/debug/tree/master/goobj2, which I wrote as well. I have tested by garbling and checking for import paths via strings and grep (in order of difficulty) https://github.com/lu4p/binclude, garble itself, and https://github.com/dominikh/go-tools/tree/master/cmd/staticcheck. This only supports object/archive files produced from the Go 1.15 compiler. The object file format changed at 1.15, and 1.14 and earlier is not supported. Fixes #13.
133 lines
2.8 KiB
Plaintext
133 lines
2.8 KiB
Plaintext
# Note that this is the only test with a module where we rely on the detection
|
|
# of GOPRIVATE.
|
|
|
|
garble build -tags buildtag
|
|
exec ./main
|
|
cmp stdout main.stdout
|
|
|
|
! binsubstr main$exe 'ImportedVar' 'ImportedConst' 'ImportedFunc' 'ImportedType' 'main.go' 'test/main' 'imported.'
|
|
|
|
[short] stop # checking that the build is reproducible is slow
|
|
|
|
# Also check that the binary is reproducible when many imports are involved.
|
|
cp main$exe main_old$exe
|
|
rm main$exe
|
|
garble build -tags buildtag
|
|
bincmp main$exe main_old$exe
|
|
|
|
go build -tags buildtag
|
|
exec ./main
|
|
cmp stdout main.stdout
|
|
|
|
# Also check that -literals doesn't break anything
|
|
garble -literals build -tags buildtag
|
|
exec ./main
|
|
cmp stdout main.stdout
|
|
|
|
-- go.mod --
|
|
module test/main
|
|
-- main.go --
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
"reflect"
|
|
_ "unsafe"
|
|
|
|
"test/main/imported"
|
|
|
|
"rsc.io/quote"
|
|
)
|
|
|
|
//go:linkname linkedPrintln fmt.Println
|
|
func linkedPrintln(a ...interface{}) (n int, err error)
|
|
|
|
func main() {
|
|
fmt.Println(imported.ImportedVar)
|
|
fmt.Println(imported.ImportedConst)
|
|
fmt.Println(imported.ImportedFunc('x'))
|
|
fmt.Println(imported.ImportedType(3))
|
|
|
|
printfWithoutPackage("%T\n", imported.ReflectTypeOf(2))
|
|
printfWithoutPackage("%T\n", imported.ReflectTypeOfIndirect(4))
|
|
|
|
v := imported.ReflectValueOfVar
|
|
printfWithoutPackage("%#v\n", v)
|
|
method := reflect.ValueOf(&v).MethodByName("ExportedMethodName")
|
|
if method.IsValid() {
|
|
fmt.Println(method.Call(nil))
|
|
} else {
|
|
fmt.Println("method not found")
|
|
}
|
|
|
|
linkedPrintln(nil)
|
|
fmt.Println(quote.Go())
|
|
}
|
|
|
|
func printfWithoutPackage(format string, v interface{}) {
|
|
fmt.Print(strings.Split(fmt.Sprintf(format, v), ".")[1])
|
|
}
|
|
-- notag_fail.go --
|
|
// +build !buildtag
|
|
|
|
package main
|
|
|
|
var foo int = "should be omitted by -tags"
|
|
-- withtag_success.go --
|
|
// +build buildtag
|
|
|
|
package main
|
|
|
|
import "fmt"
|
|
|
|
func init() { fmt.Println("buildtag init func") }
|
|
-- imported/imported.go --
|
|
package imported
|
|
|
|
import "reflect"
|
|
|
|
var ImportedVar = "imported var value"
|
|
|
|
const ImportedConst = "imported const value"
|
|
|
|
func ImportedFunc(param rune) string {
|
|
return string(param)
|
|
}
|
|
|
|
type ReflectTypeOf int
|
|
|
|
var _ = reflect.TypeOf(ReflectTypeOf(0))
|
|
|
|
type ReflectTypeOfIndirect int
|
|
|
|
var _ = reflect.TypeOf(new([]*ReflectTypeOfIndirect))
|
|
|
|
type ReflectValueOf struct {
|
|
ExportedField string
|
|
|
|
unexportedField string
|
|
}
|
|
|
|
func (r *ReflectValueOf) ExportedMethodName() string { return "method: "+r.ExportedField }
|
|
|
|
var ReflectValueOfVar = ReflectValueOf{ExportedField: "abc"}
|
|
|
|
var _ = reflect.TypeOf(ReflectValueOfVar)
|
|
|
|
// ImportedType comes after the calls to reflect, to ensure no false positives.
|
|
type ImportedType int
|
|
|
|
-- main.stdout --
|
|
buildtag init func
|
|
imported var value
|
|
imported const value
|
|
x
|
|
3
|
|
ReflectTypeOf
|
|
ReflectTypeOfIndirect
|
|
ReflectValueOf{ExportedField:"abc", unexportedField:""}
|
|
[method: abc]
|
|
<nil>
|
|
Don't communicate by sharing memory, share memory by communicating.
|