Dynamic (#77)

tests/dynamic_fixtures/json_parse/ruby/benign.rb

@@ -0,0 +1,9 @@
+# Phase 11 (Track J.9) — Ruby JSON_PARSE benign control fixture.
+#
+# JSON.parse then merge into a freshly allocated `Hash`, so the
+# canary trap on `SHARED` cannot fire.
+require 'json'
+
+def run(value)
+  JSON.parse(value).dup
+end

tests/dynamic_fixtures/json_parse/ruby/vuln.rb

@@ -0,0 +1,15 @@
+# Phase 11 (Track J.9) — Ruby JSON_PARSE vuln fixture.
+#
+# JSON.parse the attacker bytes then recursively merge into a shared
+# `OpenStruct`; the harness's instrumented `method_missing=` trap
+# observes the `__nyx_canary` write.
+require 'json'
+require 'ostruct'
+
+SHARED = OpenStruct.new
+
+def run(value)
+  parsed = JSON.parse(value)
+  parsed.each { |k, v| SHARED[k] = v }
+  SHARED
+end