anti_debug.cpp

#include "shieldcore/anti_debug.hpp"

#include <atomic>
#include <thread>
#include <chrono>
#include <cstdlib>
#if defined(_WIN32)
#include <windows.h>
#else
#include <errno.h>
#include <signal.h>
#include <sys/ptrace.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <unistd.h>
#endif

namespace shieldcore {

namespace {
std::atomic<bool> debugCheckRunning{false};
std::thread* debugCheckThread = nullptr;
}

bool isDebuggerPresent() {
#if defined(_WIN32)
  if (IsDebuggerPresent() != FALSE) {
    return true;
  }

  BOOL remoteDebugger = FALSE;
  CheckRemoteDebuggerPresent(GetCurrentProcess(), &remoteDebugger);
  if (remoteDebugger != FALSE) {
    return true;
  }

  return false;
#else
  errno = 0;
  long result = ptrace(PTRACE_TRACEME, 0, nullptr, nullptr);
  if (result == -1 && errno == EPERM) {
    return true;
  }

  return false;
#endif
}

bool checkDebuggerPeriodically(int intervalSeconds) {
  if (debugCheckRunning.exchange(true)) {
    return false;
  }

  debugCheckThread = new std::thread([intervalSeconds]() {
    while (debugCheckRunning.load()) {
      std::this_thread::sleep_for(std::chrono::seconds(intervalSeconds));
      if (isDebuggerPresent()) {
        exit(1);
      }
    }
  });

  return true;
}

void stopPeriodicDebugCheck() {
  debugCheckRunning.store(false);
  if (debugCheckThread && debugCheckThread->joinable()) {
    debugCheckThread->join();
    delete debugCheckThread;
    debugCheckThread = nullptr;
  }
}

}  // namespace shieldcore