kubeshark/tap/tlstapper/ssllib_finder.go

package tlstapper

import (
	"bufio"
	"fmt"
	"os"
	"strings"

	"github.com/go-errors/errors"
	"github.com/up9inc/mizu/logger"
)

func findSsllib(procfs string, pid uint32) (string, error) {
	binary, err := os.Readlink(fmt.Sprintf("%s/%d/exe", procfs, pid))

	if err != nil {
		return "", errors.Wrap(err, 0)
	}

	logger.Log.Debugf("Binary file for %v = %v", pid, binary)

	if strings.HasSuffix(binary, "/node") {
		return findLibraryByPid(procfs, pid, binary)
	} else {
		return findLibraryByPid(procfs, pid, "libssl.so")
	}
}

func findLibraryByPid(procfs string, pid uint32, libraryName string) (string, error) {
	file, err := os.Open(fmt.Sprintf("%v/%v/maps", procfs, pid))

	if err != nil {
		return "", err
	}

	defer file.Close()
	scanner := bufio.NewScanner(file)
	scanner.Split(bufio.ScanLines)

	for scanner.Scan() {
		parts := strings.Fields(scanner.Text())

		if len(parts) <= 5 {
			continue
		}

		filepath := parts[5]

		if !strings.Contains(filepath, libraryName) {
			continue
		}

		fullpath := fmt.Sprintf("%v/%v/root/%v", procfs, pid, filepath)

		if _, err := os.Stat(fullpath); os.IsNotExist(err) {
			continue
		}

		return fullpath, nil
	}

	return "", errors.Errorf("%s not found for PID %d", libraryName, pid)
}