package main import ( "fmt" "os" "os/exec" "strconv" "strings" "sync" "github.com/langgenius/dify-sandbox/internal/static/nodejs_syscall" ) const ( SYSCALL_NUMS = 400 ) func run(allowed_syscalls []int) { os.Chdir("/tmp/sandbox-f5faacb9-f441-43ec-a077-a09a8b7cc7f0/var/sandbox/sandbox-nodejs/nodejs-project/node_temp/node_temp") nums := []string{} for _, syscall := range allowed_syscalls { nums = append(nums, strconv.Itoa(syscall)) } os.Setenv("ALLOWED_SYSCALLS", strings.Join(nums, ",")) _, err := exec.Command("node", "test.js", "65537", "1001", "{\"enable_network\":true}").Output() if err == nil { fmt.Println("success") } else { fmt.Println("failed") } } func find_syscall(syscall int, syscalls []int) int { for i, s := range syscalls { if s == syscall { return i } } return -1 } func main() { original := nodejs_syscall.ALLOW_SYSCALLS original = append(original, nodejs_syscall.ALLOW_NETWORK_SYSCALLS...) original = append(original, nodejs_syscall.ALLOW_ERROR_SYSCALLS...) // generate task list list := make([][]int, SYSCALL_NUMS) for i := 0; i < SYSCALL_NUMS; i++ { list[i] = make([]int, len(original)) copy(list[i], original) // add i if find_syscall(i, original) == -1 { list[i] = append(list[i], i) } for j := 0; j < 0; j++ { if find_syscall(j, list[i]) == -1 { list[i] = append(list[i], j) } } } lock := sync.Mutex{} wg := sync.WaitGroup{} i := 0 // run 4 tasks concurrently for j := 0; j < 4; j++ { wg.Add(1) go func() { defer wg.Done() for { lock.Lock() if i >= len(list) { lock.Unlock() return } task := list[i] i++ lock.Unlock() run(task) } }() } // wait for all tasks to finish wg.Wait() }