Skip to content

Latest commit

 

History

History
46 lines (37 loc) · 1.06 KB

README.md

File metadata and controls

46 lines (37 loc) · 1.06 KB
Raw

qeval

qeval is a toy to safely-ish (beware bugs and hardware limitations) execute malicious/untrusted code. It's inspired by shbot, but none of the code was taken from there.

There are currently evaluators for

  • Perl 5
  • Rust nightly
  • Go
  • C (gcc)
  • C (tcc)
  • C++ (gcc)
  • Java (openjdk)
  • Python 3
  • Python 2
  • Ruby
  • Bash
  • Ash (from busybox)
  • NodeJS
  • Lua
  • PHP
  • Racket
  • Guile
  • Haskell
  • Qalculate (which doesn't really need the sandboxing)

Perl is currently the fastest evaluator, taking 0.16s on my laptop for a simple print 42.

Example usage

# This may build Linux, QEMU, and Perl. Use evaluators.sh if you're impatient
$ cd $(nix-build --no-out-link . -A evaluators.all)
$ bin/sh id
uid=0(root) gid=0 groups=0

Todo

  • Disk hotplug to reduce amount of disk suspensions (and be able to mlock the remaining one)
  • More sophisticated control processes
    • Quicker abort when output has reached size limit
    • Report exit status, memory usage (and OOM), other statistics (count syscalls?)
    • Multi-line input