߲j&UdZddlZddlZddlZddlZddlZddlmZmZejdk(Z ejdZ iZ eeefed<iZeeefed<daded <d Zd Zd Zd edefdZddZdedefdZdded edefdZdedefdZy)zGit Bash health probe + Mandatory-ASLR diagnostics (Windows), used by ``local._find_bash`` to pick a bash.exe that can actually launch MSYS children and to build the targeted remediation when none can.N)bounded_probe_runwindows_hide_flagsWindowsztools.environments.local_bash_starts_cache_bash_probe_details_cache bool | None_mandatory_aslr_enabled_cacheg.@z0/usr/bin/true; /usr/bin/cat --version >/dev/null)zdofork:z child_copy: 0xc0000142 0xc0000005detailsreturncT|jtfdtDS)zAMatch Git-for-Windows child-launch failures associated with ASLR.c3&K|]}|v yw)N).0markerlowereds K/home/ubuntu/.hermes/hermes-agent/tools/environments/local_gitbash_probe.py z1_looks_like_msys_spawn_failure..!sKVv Ks)lowerany_MSYS_SPAWN_FAILURE_MARKERS)r rs @r_looks_like_msys_spawn_failurers mmoG K/JK KKc ttStjdxsdddddg} tj|dddd d t tj }|jd k7ry|jxsdjj}ddddj|atS#t$r }tjd |Yd}~yd}~wwxYw)zEReturn Windows' system-wide ForceRelocateImages state when available.Nzpowershell.exez -NoProfilez-NonInteractivez-CommandzC(Get-ProcessMitigation -System).Aslr.ForceRelocateImages.ToString()Tzutf-8replace )capture_outputtextencodingerrorstimeout creationflagsstdinz0Could not query Windows Mandatory ASLR state: %srF)ONOFFNOTSET)r shutilwhich subprocessrunrDEVNULL Exceptionloggerdebug returncodestdoutstripupperget)cmdresultexcvalues r_mandatory_aslr_enabledr:$s%0,, <<( ) =-=|M^ \ ^CDtg'0"L^L`hrhzhz| A ]] b ' ' ) / / 1E+/$O$S$STY$Z! ((  GMs3B66 C?CCbashcltjtj|}tj|j dk7rtj|Stj|}tj|j dk(rtj|S|S)zAResolve Git's root from either /bin or /usr/bin bash.binusr)ntpathdirnamenormpathbasenamer)r;bin_dirparents r_git_root_from_bashrE8s~nnV__T23G w%%'50~~g&& ^^G $F%+__V%<%B%B%D%M6>>& !YSYYrcht|jdd}|rd|ddnd}d|d|d |d S) z:Build the targeted per-program Mandatory-ASLR remediation.'z''z Git Bash probe output: Nir%z Git Bash at z cannot launch required MSYS child processes while Windows Mandatory ASLR (ForceRelocateImages) is enabled, or its output matches that Git-for-Windows failure class.zw Reinstalling Git will not change the Windows mitigation policy. Open PowerShell as Administrator and run: $gitRoot = 'a=' Get-Item "$gitRoot\bin\bash.exe", "$gitRoot\usr\bin\*.exe" -ErrorAction SilentlyContinue | ForEach-Object { Set-ProcessMitigation -Name $_.FullName -Disable ForceRelocateImages } Then restart Hermes. If the override is blocked or later re-applied, ask your Windows administrator to allow this per-program exception.)rEr)r;r escaped_root detail_lines r_git_bash_aslr_helprJAs_&t,44S$?LAH-gdsm_=bK tf66A]C$n%N N rc|tvr t|S t|dddtgtd}|duxr|jdk(}|sc|0|j xsd|j xsdjn d td d }|dd t|<tjd ||dd|t|<|S#t$r8}t|dd t|<tjd||d}Yd}~Gd}~wwxYw)zTrue if *bash* can launch external MSYS programs (cached per path). ``--noprofile --norc`` so a broken login post-install (``Directory \drivers\etc``) does not falsely condemn an otherwise usable bash.z --noprofilez--norcz-cT)r"raise_on_spawn_failureNrr%zprobe timed out after gsizbash probe failed for %s: %szbash probe error for %s: %sF) rr_BASH_EXTERNAL_PROGRAM_PROBE_BASH_PROBE_TIMEOUTr1r2stderrr3rr/r0r.str)r;r7okcombinedr8s r _bash_startsrVTs !!!$''# =(D2N O'F4  :F$5$5$:QWQc6==.B/ 0C/DEKKM56I!5LAN .6uo %d + LL7x~ N "t I *-c(5D/!$' 2D#> sBB33 C4<.C//C4)r r)r%)__doc__loggingr?platformr)r+hermes_cli._subprocess_compatrrsystem _IS_WINDOWS getLoggerr/rdictrSbool__annotations__rr rQrPrrr:rErJrVrrrras8  Ohoo9,    5 6&(DdO(,.4S>./3}3 RTLCLDL )(ZcZcZcC&str