Files
reverse-engineering-anything/src/domain/javascript/javascriptStaticAnalysisInvocationIteration.test.ts
T
morlutoandShuaixinHuang b46f4fcebd fix(javascript): preserve loader authority for exact suffixes (#9477)
* fix(javascript): require exact loader suffix case

* fix(javascript): share exact loader mode across import resolution

* test(process): align symlink fixture with filesystem checkpoints

* test(javascript): normalize the module resolution oracle path separators

* test(frida): assert the CLI spawn Evidence contract

* test(mcp): use an unsupported analysis-view parent

* test(browser): separate source-location line bounds from parity

* fix(javascript): preserve uncertain loader provenance

* test(javascript): cover uncertain require resolution

* fix(javascript): retain conditional Electron evidence

* fix(javascript): preserve timed semantic provenance

* fix(javascript): retain conditional builtin effects

* test(javascript): distinguish bundled host authority

* fix(javascript): preserve nested loader invocation identity

* test(javascript): qualify Electron fixture authority

* fix(javascript): preserve loader invocation authority

* fix(javascript): respect source order for resolver escapes

* fix(javascript): check nested loader callable mutations

* fix(javascript): retain conditional constructor requests

* fix(reference): retain constructor loader relationships

* fix(reference): follow nested loader callable paths

* refactor(javascript): share callable mutation interpretation

* fix(javascript): require exact package loader suffixes

* refactor(javascript): unify conditional relation evidence

* refactor(javascript): unify conditional node evidence

* fix(javascript): retain unknown authority for mixed case sources

* fix(javascript): preserve loader uncertainty for dotfiles

* fix(reference): classify javascript suffix dotfiles

* test(reference): cover suffix dotfiles through cli

* fix(javascript): retain equivalent conditional built-in origins

* fix(javascript): preserve wrapped resolver operation

* fix(javascript): retain nested conditional built-in receivers

* test(javascript): declare CommonJS in native addon fixtures

* fix(javascript): retain wrapped resolver candidates

* style: format merged native command schema

* fix(javascript): preserve uncertain loader authority

* test(javascript): require candidate preload evidence

* test(javascript): cover reference loader member writes

---------

Co-authored-by: ShuaixinHuang <1836656514@qq.com>
2026-11-09 13:21:24 +08:00

227 lines
6.8 KiB
TypeScript

import { runInNewContext } from "node:vm";
import * as t from "@babel/types";
import { indexJavaScriptBindingsWithReceiversSteps } from "./javascriptSemanticAnalysis.js";
import { completeSemanticSteps } from "./javascriptSemanticTraversal.js";
import { semanticRequireCallAt } from "./javascriptSemanticRequireOrigin.js";
import { expect, it } from "vitest";
import {
analyzeJavaScriptStaticSource,
analyzeParsedJavaScriptStaticSource,
} from "./javascriptStaticAnalysis.js";
import { parseJavaScriptSource } from "./javascriptSourceParser.js";
const changedIterator =
"Array.prototype[Symbol.iterator]=function*(){yield '../shared/window.cjs'};";
const cases = [
[
"ordinary spread",
"",
"require(...['./inert.cjs'])",
"./inert.cjs",
"./inert.cjs",
],
[
"ordinary nested spread",
"",
"require(...[...['./inert.cjs']])",
"./inert.cjs",
"./inert.cjs",
],
[
"changed direct spread",
changedIterator,
"require(...['./inert.cjs'])",
"../shared/window.cjs",
null,
],
[
"changed nested spread",
changedIterator,
"require(...[...['./inert.cjs']])",
"../shared/window.cjs",
null,
],
[
"changed generic call spread",
changedIterator,
"require.call(null,...['./inert.cjs'])",
"../shared/window.cjs",
null,
],
[
"changed apply argument spread",
changedIterator,
"require.apply(null,[...['./inert.cjs']])",
"../shared/window.cjs",
null,
],
[
"changed reflected argument spread",
changedIterator,
"Reflect.apply(require,null,[...['./inert.cjs']])",
"../shared/window.cjs",
null,
],
[
"apply arraylike without spread",
changedIterator,
"require.apply(null,['./inert.cjs'])",
"./inert.cjs",
"./inert.cjs",
],
[
"reflected arraylike without spread",
changedIterator,
"Reflect.apply(require,null,['./inert.cjs'])",
"./inert.cjs",
"./inert.cjs",
],
[
"known argument before custom spread",
changedIterator,
"require('./inert.cjs',...[])",
"./inert.cjs",
"./inert.cjs",
],
[
"shadowed Array mutation",
"const Array={prototype:{}};Array.prototype[Symbol.iterator]=function*(){yield '../shared/window.cjs'};",
"require(...['./inert.cjs'])",
"./inert.cjs",
"./inert.cjs",
],
[
"ordinary captured generic spread",
"const get=()=>module;const invoke=get.call;",
"invoke.call(...[get,null]).require('./inert.cjs')",
"./inert.cjs",
null,
],
[
"changed captured generic spread receiver",
"const get=()=>({});const invoke=get.call;Array.prototype[Symbol.iterator]=function*(){yield ()=>module;yield null;};",
"invoke.call(...[get,null]).require('./inert.cjs')",
"./inert.cjs",
null,
],
] as const;
it.each(cases)(
"retains invocation iterator authority for %s",
(_name, setup, call, actual, specifier) => {
const source = `${setup}${call};`;
expect(
runInNewContext(
source,
{
require: (request: string) => request,
module: { require: (request: string) => request },
},
{ timeout: 1_000 },
),
).toBe(actual);
const analysis = analyzeJavaScriptStaticSource(source);
expect(analysis.parse_error_count).toBe(0);
expect(analysis.references).toEqual([
expect.objectContaining({
kind: "require",
specifier,
...(specifier === null ? {} : { loader_authority: "candidate" }),
}),
]);
},
);
it.each(["call", "apply"])(
"keeps overwritten require.%s unresolved",
(method) => {
for (const path of ["fixture.MJS", "fixture.cjs"]) {
const argument =
method === "call" ? 'null,"./a.cjs"' : 'null,["./a.cjs"]';
const source = `require.${method}=custom;require.${method}(${argument});`;
const unrelated = `require.other=custom;require.${method}(${argument});`;
const parse = (text: string) => {
const parsed = parseJavaScriptSource(text, path);
if (parsed === null) throw new Error("fixture did not parse");
return analyzeParsedJavaScriptStaticSource(text, parsed).references.at(
-1,
);
};
expect(parse(source)).toMatchObject({ kind: "require", specifier: null });
expect(parse(unrelated)).toMatchObject({
kind: "require",
specifier: "./a.cjs",
...(path === "fixture.MJS"
? { loader_authority: "candidate" }
: { loader: "commonjs-loader" }),
});
}
},
);
it("does not prove invocation members before the mutation index is complete", () => {
const source = 'require.call=custom;require?.call(null,"./a.cjs");';
const parsed = parseJavaScriptSource(source, "fixture.cjs");
if (parsed === null) throw new Error("fixture did not parse");
const index = completeSemanticSteps(
indexJavaScriptBindingsWithReceiversSteps(parsed.program),
);
const statement = parsed.program.body[1];
if (
!t.isExpressionStatement(statement) ||
!t.isOptionalCallExpression(statement.expression)
)
throw new Error("expected optional call");
const fact = semanticRequireCallAt(
statement.expression,
index.bindings,
new Set(),
index,
);
expect(fact).toMatchObject({ loader: "unknown", memberUnproven: true });
});
it("does not turn a mutated local callable into a loader candidate", () => {
const source =
'const f=()=>0;f.call=()=>0;const addon=f.call(null,"./x.node");';
const parsed = parseJavaScriptSource(source, "fixture.cjs");
if (parsed === null) throw new Error("fixture did not parse");
const result = analyzeParsedJavaScriptStaticSource(source, parsed);
expect(result.references).toEqual([]);
expect(result.electron.native_addon_bindings).toEqual([]);
expect(result.parse_status).toBe("complete");
});
it.each(["fixture.cjs", "fixture.MJS"])(
"does not invent nested loader requests after an inner invocation member is replaced: %s",
(path) => {
const parse = (source: string) => {
const parsed = parseJavaScriptSource(source, path);
if (parsed === null) throw new Error("fixture did not parse");
return analyzeParsedJavaScriptStaticSource(source, parsed);
};
const changed = parse(
'require.call=custom;const addon=require.call.call(require,"./receiver.cjs","./actual.node");',
);
expect(
changed.references.every(
(ref) =>
ref.specifier !== "./actual.node" &&
ref.specifier !== "./receiver.cjs",
),
).toBe(true);
expect(changed.electron.native_addon_bindings).toEqual([]);
const intact = parse('require.call.call(require,null,"./actual.node");');
expect(intact.references).toContainEqual(
expect.objectContaining({
kind: "require",
specifier: "./actual.node",
...(path.endsWith(".MJS")
? { loader_authority: "candidate" }
: { loader: "commonjs-loader" }),
}),
);
},
);