Skip to content

Commit

Permalink
feat(judgingthread):check Windows Version
Browse files Browse the repository at this point in the history
  • Loading branch information
@alphagocc
alphagocc committed Aug 17, 2022
1 parent baeb2fd commit cbc3c2e
Show file tree
Hide file tree
Showing 2 changed files with 74 additions and 71 deletions.
2 changes: 1 addition & 1 deletion makespec/BUILDVERSION
View file
Original file line number Diff line number Diff line change
@@ -1 +1 @@
231
232
143 changes: 73 additions & 70 deletions src/core/judgingthread.cpp
View file
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@

#include <Psapi.h>
#include <UserEnv.h>
#include <VersionHelpers.h>
#include <accctrl.h>
#include <aclapi.h>
#include <windows.h>
Expand Down Expand Up @@ -621,102 +622,104 @@ void JudgingThread::runProgram() {
ZeroMemory(&sa, sizeof(sa));
sa.bInheritHandle = TRUE;

QElapsedTimer overheadTimer;
overheadTimer.start();
if (IsWindows8OrGreater()) {
// Create Window App Container (Windows 8+)

// Create Window App Container (Windows 8+)
PSID appContainerSID{nullptr};
QString appContainerName = "Lemonlime" + getRandomString(10);

PSID appContainerSID{nullptr};
QString appContainerName = "Lemonlime" + getRandomString(10);
auto hResult = CreateAppContainerProfile((const WCHAR *)(appContainerName.utf16()),
(const WCHAR *)(appContainerName.utf16()),
(const WCHAR *)(appContainerName.utf16()), nullptr, 0,
&appContainerSID); // Without any Permissions

auto hResult = CreateAppContainerProfile(
(const WCHAR *)(appContainerName.utf16()), (const WCHAR *)(appContainerName.utf16()),
(const WCHAR *)(appContainerName.utf16()), nullptr, 0, &appContainerSID); // Without any Permissions
if (hResult != S_OK) {
score = 0;
result = CannotStartProgram;
message = "Failed to create app container";
return;
}

if (hResult != S_OK) {
score = 0;
result = CannotStartProgram;
message = "Failed to create app container";
return;
}
auto cleanupContainer = qScopeGuard([&] {
FreeSid(appContainerSID);
DeleteAppContainerProfile((const WCHAR *)(appContainerName.utf16()));
});

auto cleanupContainer = qScopeGuard([&] {
FreeSid(appContainerSID);
DeleteAppContainerProfile((const WCHAR *)(appContainerName.utf16()));
});
SECURITY_CAPABILITIES sc;
ZeroMemory(&sc, sizeof(sc));

SECURITY_CAPABILITIES sc;
ZeroMemory(&sc, sizeof(sc));
sc.AppContainerSid = appContainerSID;

sc.AppContainerSid = appContainerSID;
SIZE_T attributesSize;

SIZE_T attributesSize;
InitializeProcThreadAttributeList(nullptr, 3, 0, &attributesSize);

InitializeProcThreadAttributeList(nullptr, 3, 0, &attributesSize);
auto attributesListBuffer = std::make_unique<std::byte[]>(attributesSize);
siex.lpAttributeList = reinterpret_cast<LPPROC_THREAD_ATTRIBUTE_LIST>(attributesListBuffer.get());

auto attributesListBuffer = std::make_unique<std::byte[]>(attributesSize);
siex.lpAttributeList = reinterpret_cast<LPPROC_THREAD_ATTRIBUTE_LIST>(attributesListBuffer.get());
if (! InitializeProcThreadAttributeList(siex.lpAttributeList, 3, 0, &attributesSize)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to InitializeProcThreadAttributeList())";
return;
}

if (! InitializeProcThreadAttributeList(siex.lpAttributeList, 3, 0, &attributesSize)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to InitializeProcThreadAttributeList())";
return;
}
// Make App Run in App Container
if (! UpdateProcThreadAttribute(siex.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES,
&sc, sizeof(sc), nullptr, nullptr)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to UpdateProcThreadAttribute())";
return;
}

// Make App Run in App Container
if (! UpdateProcThreadAttribute(siex.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES, &sc,
sizeof(sc), nullptr, nullptr)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to UpdateProcThreadAttribute())";
return;
}
// Ban Child Processs

// Ban Child Processs
DWORD childProcessAttribute = PROCESS_CREATION_CHILD_PROCESS_RESTRICTED;

DWORD childProcessAttribute = PROCESS_CREATION_CHILD_PROCESS_RESTRICTED;
if (! UpdateProcThreadAttribute(siex.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_CHILD_PROCESS_POLICY,
&childProcessAttribute, sizeof(childProcessAttribute), nullptr,
nullptr)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to UpdateProcThreadAttribute())";
return;
}

if (! UpdateProcThreadAttribute(siex.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_CHILD_PROCESS_POLICY,
&childProcessAttribute, sizeof(childProcessAttribute), nullptr,
nullptr)) {
score = 0;
result = CannotStartProgram;
message = "Internal error (Failed to UpdateProcThreadAttribute())";
return;
}
// Load dlls
// Todo: If there's too many files under the path it'll be very slow
for (auto f : environment.value("PATH").split(';')) {
grantFileAccessPermissions(appContainerSID, (WCHAR *)f.utf16(), FILE_ALL_ACCESS);
}

// Load libstdc++ dll
for (auto f : environment.value("PATH").split(';')) {
grantFileAccessPermissions(appContainerSID, (WCHAR *)f.utf16(), FILE_GENERIC_READ | FILE_TRAVERSE);
}
if (! task->getStandardInputCheck()) {
grantFileAccessPermissions(appContainerSID,
(WCHAR *)(workingDirectory + task->getInputFileName()).utf16(),
FILE_GENERIC_READ);
}

if (task->getStandardInputCheck()) {
siex.StartupInfo.hStdInput = CreateFileW((const WCHAR *)(inputFile.utf16()), GENERIC_READ,
FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, &sa,
OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
} else {
grantFileAccessPermissions(appContainerSID,
(WCHAR *)(workingDirectory + task->getInputFileName()).utf16(),
FILE_GENERIC_READ);
if (! task->getStandardOutputCheck()) {
grantFileAccessPermissions(appContainerSID, (WCHAR *)(workingDirectory).utf16(),
FILE_GENERIC_READ | FILE_ADD_FILE);
grantFileAccessPermissions(appContainerSID,
(WCHAR *)(workingDirectory + task->getOutputFileName()).utf16(),
FILE_GENERIC_READ | FILE_GENERIC_WRITE);
}

if (task->getStandardInputCheck()) {
siex.StartupInfo.hStdInput = CreateFileW((const WCHAR *)(inputFile.utf16()), GENERIC_READ,
FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
&sa, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
}
}

if (task->getStandardOutputCheck()) {
siex.StartupInfo.hStdOutput =
CreateFileW((const WCHAR *)((workingDirectory + "_tmpout").utf16()), GENERIC_WRITE,
FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, &sa, CREATE_ALWAYS,
FILE_ATTRIBUTE_NORMAL, NULL);
} else {
grantFileAccessPermissions(appContainerSID, (WCHAR *)(workingDirectory).utf16(),
FILE_GENERIC_READ | FILE_ADD_FILE);
grantFileAccessPermissions(appContainerSID,
(WCHAR *)(workingDirectory + task->getOutputFileName()).utf16(),
FILE_GENERIC_READ | FILE_GENERIC_WRITE);
}

qDebug() << overheadTimer.elapsed();
// TODO : Reduce Overhead(>500ms)

siex.StartupInfo.hStdError =
CreateFileW((const WCHAR *)((workingDirectory + "_tmperr").utf16()), GENERIC_WRITE,
FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, &sa, CREATE_ALWAYS,
Expand Down

0 comments on commit cbc3c2e

Please sign in to comment.