add guard-checker

Author: tequdev

.gitignore

@@ -5,5 +5,7 @@ docker/c2wasm-api
 docker/wasi-sdk
 docker/clangd
 docker/hook-cleaner
+docker/guard_checker
 docker/qjsc
+guard-checker/guard_checker
 wasi-sdk.ts

.gitmodules

@@ -13,3 +13,6 @@
 [submodule "c2wasm-api/clang/includes"]
 	path = c2wasm-api/clang/includes
 	url = https://github.com/Xahau/xahaud
+[submodule "guard-checker"]
+	path = guard-checker
+	url = https://github.com/RichardAH/guard-checker

Makefile

@@ -8,6 +8,7 @@ checkout:
 	git submodule update --init --recursive llvm-project
 	git submodule update --init --recursive wasi-sdk
 	git submodule update --init --recursive hook-cleaner-c
+	git submodule update --init --recursive guard-checker
 	git submodule update --init --recursive quickjslite
 	git submodule update --init --recursive c2wasm-api/clang/includes
 
@@ -23,6 +24,7 @@ build: bin
 	$(MAKE) -C clang-build
 	$(MAKE) -C clangd-build
 	$(MAKE) -C cleaner-build
+	$(MAKE) -C guard-checker-build
 	$(MAKE) -C qjsc-build
 	$(MAKE) -C docker
 
@@ -39,6 +41,8 @@ clean:
 	$(MAKE) -C clang-build clean
 	$(MAKE) -C clangd-build clean
 	$(MAKE) -C cleaner-build clean
+	$(MAKE) -C guard-checker-build clean
 	$(MAKE) -C qjsc-build clean
 	$(MAKE) -C docker clean
 	-rm -rf bin doc
+

README.md

@@ -56,7 +56,7 @@ unzip bin.zip
 ```
 
 - CD to docker folder `cd docker`
-- Run `make c2wasm-api && make clangd && make wasi-sdk && make hook-cleaner && make qjsc`
+- Run `make c2wasm-api && make clangd && make wasi-sdk && make hook-cleaner && make guard-checker  && make qjsc`
 - Run `docker-compose build`
 - Run `docker-compose up` or `docker-compose up -d`
 - This should start server at port `:9000`, the actual compiling endpoint is this: [http://localhost:9000/api/build](localhost:9000/api/build). Note that it takes a while to start.

c2wasm-api/src/chooks.ts

@@ -108,7 +108,7 @@ function get_optimization_options(options: string) {
       optimization_level += ' ' + o;
     }
   }
-  
+
   let safe_options = '';
   const _options = [
     '--shrink-level=100000000',
@@ -203,7 +203,7 @@ function link_c_files(source_files: string[], compile_options: string, link_opti
   const files = source_files.join(' ');
   const clang = llvmDir + '/bin/clang';
   let optimization_level = '';
-  
+
   for (let o of optimization_options) {
     if (compile_options.includes(o)) {
       optimization_level == o;
@@ -265,6 +265,27 @@ function clean_wasm(cwd: string, inplace: string, result_obj: Task) {
   return success;
 }
 
+function guard_check_wasm(cwd: string, inplace: string, result_obj: Task) {
+  const cmd = 'guard_checker ' + inplace;
+  const out = openSync(cwd + '/guardout.log', 'w');
+  let error = '';
+  let success = true;
+  try {
+    execSync(cmd, { cwd, stdio: [null, out, out], });
+  } catch (ex: unknown) {
+    success = false;
+    if (ex instanceof Error) {
+      error = ex?.message;
+    }
+  } finally {
+    closeSync(out);
+  }
+  const out_msg = readFileSync(cwd + '/guardout.log').toString() || error;
+  result_obj.console = sanitize_shell_output(out_msg);
+  result_obj.success = success;
+  return success;
+}
+
 export function build_project(project: RequestBody, base: string) {
   const output = project.output;
   const compress = project.compress;
@@ -377,6 +398,14 @@ export function build_project(project: RequestBody, base: string) {
     }
   }
 
+  const guard_result_obj = {
+    name: 'guard checking wasm'
+  };
+  build_result.tasks.push(guard_result_obj);
+  if (!guard_check_wasm(dir, result, guard_result_obj)) {
+    return complete(false, 'Guard checking error');
+  }
+
   build_result.output = serialize_file_data(result, compress || false);
 
   return complete(true, 'Success');

docker/Dockerfile

@@ -11,6 +11,7 @@ COPY c2wasm-api/tsconfig.json .
 COPY c2wasm-api/src ./src
 COPY wasi-sdk ./clang/wasi-sdk
 COPY hook-cleaner /usr/bin
+COPY guard_checker /usr/bin
 COPY wasm-opt /usr/bin
 COPY qjsc /usr/bin
 COPY run.sh .

docker/Makefile

@@ -27,6 +27,10 @@ hook-cleaner: ../bin/hook-cleaner
 	cp $< .
 	chmod +x hook-cleaner
 
+guard-checker: ../bin/guard_checker
+	cp $< .
+	chmod +x guard_checker
+
 c2wasm-api: ../c2wasm-api
 	cp -LR $< .
 

guard-checker

@@ -0,0 +1,5 @@
+FROM --platform=linux/amd64 node:17-alpine
+MAINTAINER Vaclav Barta "vaclav@equilibrium.co"
+RUN apk --no-cache add --update bash build-base
+ADD build.sh .
+CMD ./build.sh

guard-checker-build/Dockerfile

@@ -0,0 +1,17 @@
+# must be run as root
+
+GUARD_CHECKER_BUILD_CONTAINER_TAG?=guard-checker-build
+
+all: build1 build2 install
+
+build1:
+	docker build -t $(GUARD_CHECKER_BUILD_CONTAINER_TAG) .
+
+build2:
+	docker run -v $(realpath ../guard-checker):/mnt/guard-checker $(GUARD_CHECKER_BUILD_CONTAINER_TAG):latest
+
+install:
+	cp ../guard-checker/guard_checker ../bin
+
+clean:
+	-rm ../guard-checker/guard_checker