你的系统里还藏着什么？——从一块 90 年代 PostgreSQL 扩展的缓冲区溢出说起

-- 在每个数据库上执行，列出已安装扩展
SELECT extname AS extension_name,
       extversion AS version,
       n.nspname AS schema
  FROM pg_extension e
  JOIN pg_namespace n ON e.extnamespace = n.oid
 ORDER BY extname;

 extension_name | version | schema
----------------+---------+--------
 plpgsql        | 1.0     | pg_catalog
 pgcrypto       | 1.3     | public
 pg_stat_statements | 1.9 | public
 some_old_ext   | 0.4     | public

# 列出所有扩展对应的 .so 文件路径
for ext in $(psql -At -c "SELECT extname FROM pg_extension"); do
  control_file="/usr/share/postgresql/extension/${ext}.control"
  if [ -f "$control_file" ]; then
    module=$(grep -E '^module_pathname' "$control_file" | cut -d= -f2 | tr -d "'")
    echo "$ext -> $module"
  else
    echo "$ext -> [control file missing]"
  fi
done

# 在扩展源码目录中扫描常见危险模式
scan_dir="/usr/share/postgresql/extension"

echo "=== 固定大小缓冲区 (strcpy / sprintf) ==="
grep -rn 'strcpy\|sprintf\|gets' "$scan_dir" --include='*.c' || echo "未发现"

echo "=== 未校验长度的 memcpy ==="
grep -rn 'memcpy' "$scan_dir" --include='*.c' | \
  grep -v 'sizeof' || echo "需人工复查"

echo "=== 硬编码路径或权限 ==="
grep -rn '/tmp/\|chmod 777\|0700' "$scan_dir" --include='*.c' || echo "未发现"

#!/bin/bash
# dependency-xray.sh — 依赖栈 X 光扫描
set -euo pipefail

echo "========== 系统包 =========="
apt list --installed 2>/dev/null | wc -l
echo "（总数）"

echo "========== Python 依赖树 =========="
if command -v pip &>/dev/null; then
  pip audit 2>/dev/null || echo "pip-audit 未安装，运行: pip install pip-audit"
fi

echo "========== Node 依赖 =========="
if [ -f package-lock.json ]; then
  npm audit --production 2>/dev/null || true
fi

echo "========== Docker 镜像层 =========="
if command -v docker &>/dev/null; then
  for img in $(docker images --format '{{.Repository}}:{{.Tag}}' | head -5); do
    echo "--- $img ---"
    docker run --rm "$img" apt list --installed 2>/dev/null | wc -l || true
  done
fi

echo "========== PostgreSQL 扩展 =========="
for db in $(psql -At -c "SELECT datname FROM pg_database WHERE datistemplate = false"); do
  echo "--- 数据库: $db ---"
  psql -d "$db" -At -c \
    "SELECT extname || ' ' || extversion FROM pg_extension ORDER BY extname"
done