DeadCodeInjectionTransformer.ts 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419
  1. import { inject, injectable, } from 'inversify';
  2. import { ServiceIdentifiers } from '../../container/ServiceIdentifiers';
  3. import * as estraverse from '@javascript-obfuscator/estraverse';
  4. import * as ESTree from 'estree';
  5. import { TDeadNodeInjectionCustomNodeFactory } from '../../types/container/custom-nodes/TDeadNodeInjectionCustomNodeFactory';
  6. import { TInitialData } from '../../types/TInitialData';
  7. import { TNodeWithStatements } from '../../types/node/TNodeWithStatements';
  8. import { ICustomNode } from '../../interfaces/custom-nodes/ICustomNode';
  9. import { IOptions } from '../../interfaces/options/IOptions';
  10. import { IRandomGenerator } from '../../interfaces/utils/IRandomGenerator';
  11. import { INodeTransformersRunner } from '../../interfaces/node-transformers/INodeTransformersRunner';
  12. import { IVisitor } from '../../interfaces/node-transformers/IVisitor';
  13. import { DeadCodeInjectionCustomNode } from '../../enums/custom-nodes/DeadCodeInjectionCustomNode';
  14. import { NodeTransformer } from '../../enums/node-transformers/NodeTransformer';
  15. import { NodeType } from '../../enums/node/NodeType';
  16. import { NodeTransformationStage } from '../../enums/node-transformers/NodeTransformationStage';
  17. import { AbstractNodeTransformer } from '../AbstractNodeTransformer';
  18. import { BlockStatementDeadCodeInjectionNode } from '../../custom-nodes/dead-code-injection-nodes/BlockStatementDeadCodeInjectionNode';
  19. import { NodeFactory } from '../../node/NodeFactory';
  20. import { NodeGuards } from '../../node/NodeGuards';
  21. import { NodeStatementUtils } from '../../node/NodeStatementUtils';
  22. import { NodeUtils } from '../../node/NodeUtils';
  23. @injectable()
  24. export class DeadCodeInjectionTransformer extends AbstractNodeTransformer {
  25. /**
  26. * @type {string}
  27. */
  28. private static readonly deadCodeInjectionRootAstHostNodeName: string = 'deadCodeInjectionRootAstHostNode';
  29. /**
  30. * @type {number}
  31. */
  32. private static readonly maxNestedBlockStatementsCount: number = 4;
  33. /**
  34. * @type {number}
  35. */
  36. private static readonly minCollectedBlockStatementsCount: number = 5;
  37. /**
  38. * @type {NodeTransformer[]}
  39. */
  40. private static readonly transformersToRenameBlockScopeIdentifiers: NodeTransformer[] = [
  41. NodeTransformer.DeadCodeInjectionIdentifiersTransformer,
  42. NodeTransformer.LabeledStatementTransformer,
  43. NodeTransformer.ScopeIdentifiersTransformer
  44. ];
  45. /**
  46. * @type {WeakSet <BlockStatement>}
  47. */
  48. private readonly deadCodeInjectionRootAstHostNodeSet: WeakSet <ESTree.BlockStatement> = new WeakSet();
  49. /**
  50. * @type {ESTree.BlockStatement[]}
  51. */
  52. private readonly collectedBlockStatements: ESTree.BlockStatement[] = [];
  53. /**
  54. * @type {number}
  55. */
  56. private collectedBlockStatementsTotalLength: number = 0;
  57. /**
  58. * @type {TDeadNodeInjectionCustomNodeFactory}
  59. */
  60. private readonly deadCodeInjectionCustomNodeFactory: TDeadNodeInjectionCustomNodeFactory;
  61. /**
  62. * @type {INodeTransformersRunner}
  63. */
  64. private readonly transformersRunner: INodeTransformersRunner;
  65. /**
  66. * @param {TDeadNodeInjectionCustomNodeFactory} deadCodeInjectionCustomNodeFactory
  67. * @param {INodeTransformersRunner} transformersRunner
  68. * @param {IRandomGenerator} randomGenerator
  69. * @param {IOptions} options
  70. */
  71. public constructor (
  72. @inject(ServiceIdentifiers.Factory__IDeadCodeInjectionCustomNode)
  73. deadCodeInjectionCustomNodeFactory: TDeadNodeInjectionCustomNodeFactory,
  74. @inject(ServiceIdentifiers.INodeTransformersRunner) transformersRunner: INodeTransformersRunner,
  75. @inject(ServiceIdentifiers.IRandomGenerator) randomGenerator: IRandomGenerator,
  76. @inject(ServiceIdentifiers.IOptions) options: IOptions
  77. ) {
  78. super(randomGenerator, options);
  79. this.deadCodeInjectionCustomNodeFactory = deadCodeInjectionCustomNodeFactory;
  80. this.transformersRunner = transformersRunner;
  81. }
  82. /**
  83. * @param {Node} targetNode
  84. * @returns {boolean}
  85. */
  86. private static isProhibitedNodeInsideCollectedBlockStatement (targetNode: ESTree.Node): boolean {
  87. return NodeGuards.isFunctionDeclarationNode(targetNode) // can break code on strict mode
  88. || NodeGuards.isBreakStatementNode(targetNode)
  89. || NodeGuards.isContinueStatementNode(targetNode)
  90. || NodeGuards.isAwaitExpressionNode(targetNode)
  91. || NodeGuards.isYieldExpressionNode(targetNode)
  92. || NodeGuards.isSuperNode(targetNode)
  93. || (NodeGuards.isForOfStatementNode(targetNode) && targetNode.await)
  94. || NodeGuards.isPrivateIdentifierNode(targetNode);
  95. }
  96. /**
  97. * @param {Node} targetNode
  98. * @returns {boolean}
  99. */
  100. private static isScopeHoistingFunctionDeclaration (targetNode: ESTree.Node): boolean {
  101. if (!NodeGuards.isFunctionDeclarationNode(targetNode)) {
  102. return false;
  103. }
  104. const scopeNode: TNodeWithStatements = NodeStatementUtils.getScopeOfNode(targetNode);
  105. const scopeBody: ESTree.Statement[] = !NodeGuards.isSwitchCaseNode(scopeNode)
  106. ? <ESTree.Statement[]>scopeNode.body
  107. : scopeNode.consequent;
  108. const indexInScope: number = scopeBody.indexOf(targetNode);
  109. if (indexInScope === 0) {
  110. return false;
  111. }
  112. const slicedBody: ESTree.Statement[] = scopeBody.slice(0, indexInScope);
  113. const hostBlockStatementNode: ESTree.BlockStatement = NodeFactory.blockStatementNode(slicedBody);
  114. const functionDeclarationName: string = targetNode.id.name;
  115. let isScopeHoistedFunctionDeclaration: boolean = false;
  116. estraverse.traverse(hostBlockStatementNode, {
  117. enter: (node: ESTree.Node): estraverse.VisitorOption | void => {
  118. if (NodeGuards.isIdentifierNode(node) && node.name === functionDeclarationName) {
  119. isScopeHoistedFunctionDeclaration = true;
  120. return estraverse.VisitorOption.Break;
  121. }
  122. }
  123. });
  124. return isScopeHoistedFunctionDeclaration;
  125. }
  126. /**
  127. * @param {BlockStatement} blockStatementNode
  128. * @returns {boolean}
  129. */
  130. private static isValidCollectedBlockStatementNode (blockStatementNode: ESTree.BlockStatement): boolean {
  131. if (!blockStatementNode.body.length) {
  132. return false;
  133. }
  134. let nestedBlockStatementsCount: number = 0;
  135. let isValidBlockStatementNode: boolean = true;
  136. estraverse.traverse(blockStatementNode, {
  137. enter: (node: ESTree.Node): estraverse.VisitorOption | void => {
  138. if (NodeGuards.isBlockStatementNode(node)) {
  139. nestedBlockStatementsCount++;
  140. }
  141. if (
  142. nestedBlockStatementsCount > DeadCodeInjectionTransformer.maxNestedBlockStatementsCount
  143. || DeadCodeInjectionTransformer.isProhibitedNodeInsideCollectedBlockStatement(node)
  144. || DeadCodeInjectionTransformer.isScopeHoistingFunctionDeclaration(node)
  145. ) {
  146. isValidBlockStatementNode = false;
  147. return estraverse.VisitorOption.Break;
  148. }
  149. }
  150. });
  151. return isValidBlockStatementNode;
  152. }
  153. /**
  154. * @param {BlockStatement} blockStatementNode
  155. * @returns {boolean}
  156. */
  157. private static isValidWrappedBlockStatementNode (blockStatementNode: ESTree.BlockStatement): boolean {
  158. if (!blockStatementNode.body.length) {
  159. return false;
  160. }
  161. let isValidBlockStatementNode: boolean = true;
  162. estraverse.traverse(blockStatementNode, {
  163. enter: (node: ESTree.Node): estraverse.VisitorOption | void => {
  164. if (DeadCodeInjectionTransformer.isScopeHoistingFunctionDeclaration(node)) {
  165. isValidBlockStatementNode = false;
  166. return estraverse.VisitorOption.Break;
  167. }
  168. }
  169. });
  170. if (!isValidBlockStatementNode) {
  171. return false;
  172. }
  173. const parentNodeWithStatements: TNodeWithStatements = NodeStatementUtils
  174. .getParentNodeWithStatements(blockStatementNode);
  175. return parentNodeWithStatements.type !== NodeType.Program;
  176. }
  177. /**
  178. * @param {NodeTransformationStage} nodeTransformationStage
  179. * @returns {IVisitor | null}
  180. */
  181. public getVisitor (nodeTransformationStage: NodeTransformationStage): IVisitor | null {
  182. switch (nodeTransformationStage) {
  183. case NodeTransformationStage.DeadCodeInjection:
  184. return {
  185. enter: (node: ESTree.Node, parentNode: ESTree.Node | null): ESTree.Node | undefined => {
  186. if (parentNode && NodeGuards.isProgramNode(node)) {
  187. this.prepareNode(node, parentNode);
  188. return node;
  189. }
  190. },
  191. leave: (
  192. node: ESTree.Node,
  193. parentNode: ESTree.Node | null
  194. ): ESTree.Node | estraverse.VisitorOption | undefined => {
  195. if (parentNode && NodeGuards.isBlockStatementNode(node)) {
  196. return this.transformNode(node, parentNode);
  197. }
  198. }
  199. };
  200. case NodeTransformationStage.StringArray:
  201. return {
  202. enter: (
  203. node: ESTree.Node,
  204. parentNode: ESTree.Node | null
  205. ): ESTree.Node | estraverse.VisitorOption |undefined => {
  206. if (parentNode && this.isDeadCodeInjectionRootAstHostNode(node)) {
  207. return this.restoreNode(node, parentNode);
  208. }
  209. }
  210. };
  211. default:
  212. return null;
  213. }
  214. }
  215. /**
  216. * @param {NodeGuards} programNode
  217. * @param {NodeGuards} parentNode
  218. */
  219. public prepareNode (programNode: ESTree.Node, parentNode: ESTree.Node): void {
  220. estraverse.traverse(programNode, {
  221. enter: (node: ESTree.Node): void => {
  222. if (!NodeGuards.isBlockStatementNode(node)) {
  223. return;
  224. }
  225. const clonedBlockStatementNode: ESTree.BlockStatement = NodeUtils.clone(node);
  226. if (!DeadCodeInjectionTransformer.isValidCollectedBlockStatementNode(clonedBlockStatementNode)) {
  227. return;
  228. }
  229. /**
  230. * We should transform identifiers in the dead code block statement to avoid conflicts with original code
  231. */
  232. const transformedBlockStatementNode: ESTree.BlockStatement =
  233. this.makeClonedBlockStatementNodeUnique(clonedBlockStatementNode);
  234. this.collectedBlockStatements.push(transformedBlockStatementNode);
  235. }
  236. });
  237. this.collectedBlockStatementsTotalLength = this.collectedBlockStatements.length;
  238. }
  239. /**
  240. * @param {BlockStatement} blockStatementNode
  241. * @param {NodeGuards} parentNode
  242. * @returns {NodeGuards | VisitorOption}
  243. */
  244. public transformNode (
  245. blockStatementNode: ESTree.BlockStatement,
  246. parentNode: ESTree.Node
  247. ): ESTree.Node | estraverse.VisitorOption {
  248. const canBreakTraverse: boolean = !this.collectedBlockStatements.length
  249. || this.collectedBlockStatementsTotalLength < DeadCodeInjectionTransformer.minCollectedBlockStatementsCount;
  250. if (canBreakTraverse) {
  251. return estraverse.VisitorOption.Break;
  252. }
  253. if (
  254. this.randomGenerator.getMathRandom() > this.options.deadCodeInjectionThreshold
  255. || !DeadCodeInjectionTransformer.isValidWrappedBlockStatementNode(blockStatementNode)
  256. ) {
  257. return blockStatementNode;
  258. }
  259. const minInteger: number = 0;
  260. const maxInteger: number = this.collectedBlockStatements.length - 1;
  261. const randomIndex: number = this.randomGenerator.getRandomInteger(minInteger, maxInteger);
  262. const randomBlockStatementNode: ESTree.BlockStatement = this.collectedBlockStatements.splice(randomIndex, 1)[0];
  263. const isDuplicateBlockStatementNodes: boolean = randomBlockStatementNode === blockStatementNode;
  264. if (isDuplicateBlockStatementNodes) {
  265. return blockStatementNode;
  266. }
  267. return this.replaceBlockStatementNode(blockStatementNode, randomBlockStatementNode, parentNode);
  268. }
  269. /**
  270. * @param {FunctionExpression} deadCodeInjectionRootAstHostNode
  271. * @param {Node} parentNode
  272. * @returns {Node}
  273. */
  274. public restoreNode (deadCodeInjectionRootAstHostNode: ESTree.BlockStatement, parentNode: ESTree.Node): ESTree.Node {
  275. const hostNodeFirstStatement: ESTree.Statement = deadCodeInjectionRootAstHostNode.body[0];
  276. if (!NodeGuards.isFunctionDeclarationNode(hostNodeFirstStatement)) {
  277. throw new Error('Wrong dead code injection root AST host node. Host node should contain `FunctionDeclaration` node');
  278. }
  279. return hostNodeFirstStatement.body;
  280. }
  281. /**
  282. * @param {Node} node
  283. * @returns {boolean}
  284. */
  285. private isDeadCodeInjectionRootAstHostNode (node: ESTree.Node): node is ESTree.BlockStatement {
  286. const isDeadCodeInjectionRootAstHostNode = NodeGuards.isBlockStatementNode(node) && this.deadCodeInjectionRootAstHostNodeSet.has(node);
  287. if (isDeadCodeInjectionRootAstHostNode) {
  288. this.deadCodeInjectionRootAstHostNodeSet.delete(node);
  289. }
  290. return isDeadCodeInjectionRootAstHostNode;
  291. }
  292. /**
  293. * Make all identifiers in cloned block statement unique
  294. *
  295. * @param {BlockStatement} clonedBlockStatementNode
  296. * @returns {BlockStatement}
  297. */
  298. private makeClonedBlockStatementNodeUnique (clonedBlockStatementNode: ESTree.BlockStatement): ESTree.BlockStatement {
  299. // should wrap cloned block statement node into function node for correct scope encapsulation
  300. const hostNode: ESTree.Program = NodeFactory.programNode([
  301. NodeFactory.expressionStatementNode(
  302. NodeFactory.functionExpressionNode([], clonedBlockStatementNode)
  303. )
  304. ]);
  305. NodeUtils.parentizeAst(hostNode);
  306. NodeUtils.parentizeNode(hostNode, hostNode);
  307. this.transformersRunner.transform(
  308. hostNode,
  309. DeadCodeInjectionTransformer.transformersToRenameBlockScopeIdentifiers,
  310. NodeTransformationStage.RenameIdentifiers
  311. );
  312. return clonedBlockStatementNode;
  313. }
  314. /**
  315. * @param {BlockStatement} blockStatementNode
  316. * @param {BlockStatement} randomBlockStatementNode
  317. * @param {Node} parentNode
  318. * @returns {BlockStatement}
  319. */
  320. private replaceBlockStatementNode (
  321. blockStatementNode: ESTree.BlockStatement,
  322. randomBlockStatementNode: ESTree.BlockStatement,
  323. parentNode: ESTree.Node
  324. ): ESTree.BlockStatement {
  325. /**
  326. * Should wrap original random block statement node into the parent block statement node (ast root host node)
  327. * with function declaration node. This function declaration node will create block scope for all identifiers
  328. * inside random block statement node and this identifiers won't affect identifiers of the rest AST tree.
  329. */
  330. const deadCodeInjectionRootAstHostNode: ESTree.BlockStatement = NodeFactory.blockStatementNode([
  331. NodeFactory.functionDeclarationNode(
  332. DeadCodeInjectionTransformer.deadCodeInjectionRootAstHostNodeName,
  333. [],
  334. randomBlockStatementNode
  335. )
  336. ]);
  337. /**
  338. * Should store that host node and then extract random block statement node on the `finalizing` stage
  339. */
  340. this.deadCodeInjectionRootAstHostNodeSet.add(deadCodeInjectionRootAstHostNode);
  341. const blockStatementDeadCodeInjectionCustomNode: ICustomNode<TInitialData<BlockStatementDeadCodeInjectionNode>> =
  342. this.deadCodeInjectionCustomNodeFactory(DeadCodeInjectionCustomNode.BlockStatementDeadCodeInjectionNode);
  343. blockStatementDeadCodeInjectionCustomNode.initialize(blockStatementNode, deadCodeInjectionRootAstHostNode);
  344. const newBlockStatementNode: ESTree.BlockStatement = <ESTree.BlockStatement>blockStatementDeadCodeInjectionCustomNode.getNode()[0];
  345. NodeUtils.parentizeNode(newBlockStatementNode, parentNode);
  346. return newBlockStatementNode;
  347. }
  348. }