Skip to content

fix(detector): add SYS_GETFRAME detection for RED #42 #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
SarahLacard wants to merge 2 commits into from
Closed

fix(detector): add SYS_GETFRAME detection for RED #42 #20

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e90a8da
fix(detector): add SYS_GETFRAME detection for RED #42
SarahLacard May 1, 2026
9f32482
chore: trigger blue-pr-sync re-evaluation
SarahLacard May 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 17 additions & 2 deletions kernelguard.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1688,7 +1688,7 @@ def detect_introspection_exploit(code: str | SubmissionFacts) -> list[dict]:
):
frame_namespace_aliases.add(target.id)

# inspect.currentframe() / inspect.stack()
# inspect.currentframe() / inspect.stack() / sys._getframe()
if isinstance(node, ast.Call) and isinstance(node.func, ast.Attribute):
if (isinstance(node.func.value, ast.Name)
and node.func.value.id == "inspect"
Expand All @@ -1697,6 +1697,17 @@ def detect_introspection_exploit(code: str | SubmissionFacts) -> list[dict]:
if key not in seen_patterns:
seen_patterns.add(key)
saw_frame_access = True
elif (isinstance(node.func.value, ast.Name)
and node.func.value.id == "sys"
and node.func.attr == "_getframe"):
key = "sys._getframe"
if key not in seen_patterns:
seen_patterns.add(key)
matches.append({
"pattern": "SYS_GETFRAME",
"severity": "high",
"evidence": "sys._getframe() called (frame walk access)",
})

# f_back, f_globals, f_locals attribute access
if isinstance(node, ast.Attribute) and node.attr in ("f_back", "f_globals", "f_locals"):
Expand Down Expand Up @@ -3645,6 +3656,10 @@ class RulePolicy:
"SCORE_EXTREME_SPEEDUP", "score_anomaly", "support", SUSPICIOUS_ONLY, (),
(), "downgrade",
),
"SYS_GETFRAME": RulePolicy(
"SYS_GETFRAME", "evaluator_state_support", "hard", AUTO_FILTER, (),
(), "keep",
),
"DUPLICATE_SPAM": RulePolicy(
"DUPLICATE_SPAM", "administrative", "support", SUSPICIOUS_ONLY, (),
(), "downgrade",
Expand Down Expand Up @@ -4694,7 +4709,7 @@ def _worker_parquet(args: tuple) -> dict:

AUDIT_RULE_ORDER = [
"EVALUATOR_EXPLOIT", "HARNESS_RUNTIME_PATCHING", "MODULE_MUTATION", "GLOBALS_MUTATION", "CODE_REPLACEMENT",
"FRAME_WALK_ACCESS", "FRAME_WALK_MUTATION", "SYS_MODULES_ACCESS", "GLOBALS_ACCESS", "CODE_ACCESS",
"FRAME_WALK_ACCESS", "FRAME_WALK_MUTATION", "SYS_GETFRAME", "SYS_MODULES_ACCESS", "GLOBALS_ACCESS", "CODE_ACCESS",
"TRUSTED_MODULE_IMPORT",
"OUTPUT_REPLAY_CACHE", "LAST_CALL_REPLAY", "SHAPE_OUTPUT_REPLAY", "TIMED_INPUT_REPLAY", "CONFIG_CACHE_EXPLOIT", "POINTER_REPLAY", "RESULT_BANK_REPLAY", "PREPROCESS_CACHE", "WORKSPACE_CACHE",
"RUNNER_PLAN_CACHE", "CUDA_GRAPH_PYTHON", "CUDA_GRAPH_REPLAY",
Expand Down