refactor: 配置文件引擎迁移至 mlua 并优化环境变量注入
- 配置文件解析引擎由 shim 替换为 mlua (Lua 5.4) - 优化路由策略:统一以根目录 shims.lua 为入口,支持 tools/ 目录模块化降级探测 - 自动注入 __SHIM_DIR__ 绝对路径与 package.path 模块搜索路径 - 环境变量改用 Command::envs 安全注入,并在 UAC 提权时透传
This commit is contained in:
57
src/main.rs
57
src/main.rs
@@ -3,9 +3,11 @@ use std::{
|
||||
ffi::CString,
|
||||
mem::size_of,
|
||||
path::Path,
|
||||
process::{exit, Command},
|
||||
process::{Command, exit},
|
||||
ptr::null_mut,
|
||||
};
|
||||
mod shims;
|
||||
use shims::Shim;
|
||||
|
||||
use winapi::{
|
||||
shared::minwindef::{BOOL, DWORD, FALSE, TRUE},
|
||||
@@ -14,7 +16,7 @@ use winapi::{
|
||||
consoleapi,
|
||||
objbase::{COINIT_APARTMENTTHREADED, COINIT_DISABLE_OLE1DDE},
|
||||
processthreadsapi::GetExitCodeProcess,
|
||||
shellapi::{ShellExecuteExA, SEE_MASK_NOASYNC, SEE_MASK_NOCLOSEPROCESS, SHELLEXECUTEINFOA},
|
||||
shellapi::{SEE_MASK_NOASYNC, SEE_MASK_NOCLOSEPROCESS, SHELLEXECUTEINFOA, ShellExecuteExA},
|
||||
synchapi::WaitForSingleObject,
|
||||
winbase::INFINITE,
|
||||
wincon,
|
||||
@@ -30,15 +32,12 @@ unsafe extern "system" fn routine_handler(evt: DWORD) -> BOOL {
|
||||
wincon::CTRL_LOGOFF_EVENT => TRUE, //eprintln!("ctrl_logoff handled!"),
|
||||
wincon::CTRL_SHUTDOWN_EVENT => TRUE, //eprintln!("ctrl_shutdown handled!"),
|
||||
other => {
|
||||
eprintln!("unknown event number: {}, unhandled!", other);
|
||||
return FALSE;
|
||||
eprintln!("未知的系统事件编号: {},未处理!", other);
|
||||
FALSE
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
mod shims;
|
||||
use shims::Shim;
|
||||
|
||||
const EXIT_FAILED_LOAD_SHIM: i32 = 1;
|
||||
const EXIT_FAILED_SPAWN_PROG: i32 = 2;
|
||||
const EXIT_FAILED_WAIT_PROG: i32 = 3;
|
||||
@@ -48,31 +47,42 @@ const ERROR_ELEVATION_REQUIRED: i32 = 740;
|
||||
fn main() {
|
||||
let res: BOOL = unsafe { consoleapi::SetConsoleCtrlHandler(Some(routine_handler), TRUE) };
|
||||
if res == FALSE {
|
||||
eprintln!("shim: register Ctrl handler failed.");
|
||||
eprintln!("警告: 注册控制台中断事件处理器失败。");
|
||||
}
|
||||
|
||||
let calling_args: Vec<_> = env::args().skip(1).collect();
|
||||
let shim = match Shim::init() {
|
||||
Ok(v) => v,
|
||||
Err(e) => {
|
||||
eprintln!("Error while loading shim: {}", e);
|
||||
eprintln!("加载代理(shim)配置时发生错误: {}", e);
|
||||
exit(EXIT_FAILED_LOAD_SHIM);
|
||||
}
|
||||
};
|
||||
|
||||
let args = if let Some(mut shim_args) = shim.args {
|
||||
shim_args.extend_from_slice(calling_args.as_slice());
|
||||
shim_args
|
||||
} else {
|
||||
calling_args
|
||||
};
|
||||
let mut cmd = match Command::new(&shim.target_path).args(&args).spawn() {
|
||||
// ======= 【修改位置 1:构建 Command 并注入环境变量】 =======
|
||||
let mut cmd_builder = Command::new(&shim.target_path);
|
||||
cmd_builder.args(&args);
|
||||
|
||||
// 仅作用于目标子进程,完全 Safe 且隔离
|
||||
if let Some(ref envs) = shim.envs {
|
||||
cmd_builder.envs(envs);
|
||||
}
|
||||
let mut cmd = match cmd_builder.spawn() {
|
||||
Ok(v) => v,
|
||||
Err(e) if e.raw_os_error() == Some(ERROR_ELEVATION_REQUIRED) => {
|
||||
exit(execute_elevated(&shim.target_path, &args))
|
||||
}
|
||||
Err(e) if e.raw_os_error() == Some(ERROR_ELEVATION_REQUIRED) => exit(execute_elevated(
|
||||
&shim.target_path,
|
||||
&args,
|
||||
shim.envs.as_ref(),
|
||||
)),
|
||||
Err(e) => {
|
||||
eprintln!(
|
||||
"Error while spawning target program `{}`: {}",
|
||||
"启动目标程序 [{}] 时发生错误: {}",
|
||||
shim.target_path.to_string_lossy(),
|
||||
e
|
||||
);
|
||||
@@ -83,7 +93,7 @@ fn main() {
|
||||
Ok(v) => v,
|
||||
Err(e) => {
|
||||
eprintln!(
|
||||
"Error while waiting target program `{}`: {}",
|
||||
"等待目标程序 [{}] 执行完毕时发生错误: {}",
|
||||
shim.target_path.to_string_lossy(),
|
||||
e
|
||||
);
|
||||
@@ -93,7 +103,20 @@ fn main() {
|
||||
exit(status.code().unwrap_or(EXIT_PROG_TERMINATED))
|
||||
}
|
||||
|
||||
fn execute_elevated(program: &Path, args: &[String]) -> i32 {
|
||||
fn execute_elevated(
|
||||
program: &Path,
|
||||
args: &[String],
|
||||
envs: Option<&std::collections::HashMap<String, String>>,
|
||||
) -> i32 {
|
||||
// 若提权启动,在此处将环境变量设置给当前进程(即将弹窗 UAC 的进程,随后会被子进程继承)
|
||||
if let Some(env_map) = envs {
|
||||
for (k, v) in env_map {
|
||||
unsafe {
|
||||
env::set_var(k, v);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
let runas = CString::new("runas").unwrap();
|
||||
let program = CString::new(program.to_str().unwrap()).unwrap();
|
||||
let mut params = String::new();
|
||||
@@ -141,5 +164,5 @@ fn execute_elevated(program: &Path, args: &[String]) -> i32 {
|
||||
return EXIT_FAILED_WAIT_PROG;
|
||||
}
|
||||
}
|
||||
return code as i32;
|
||||
code as i32
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user