зеркало из https://github.com/mozilla/pjs.git
1367 строки
38 KiB
C++
1367 строки
38 KiB
C++
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/*
|
|
* The contents of this file are subject to the Netscape Public
|
|
* License Version 1.1 (the "License"); you may not use this file
|
|
* except in compliance with the License. You may obtain a copy of
|
|
* the License at http://www.mozilla.org/NPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS
|
|
* IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
|
|
* implied. See the License for the specific language governing
|
|
* rights and limitations under the License.
|
|
*
|
|
* The Original Code is Mozilla Communicator client code,
|
|
* released March 31, 1998.
|
|
*
|
|
* The Initial Developer of the Original Code is Netscape Communications
|
|
* Corporation. Portions created by Netscape are
|
|
* Copyright (C) 1998 Netscape Communications Corporation. All
|
|
* Rights Reserved.
|
|
*
|
|
* Contributor(s):
|
|
* Daniel Veditz <dveditz@netscape.com>
|
|
* Samir Gehani <sgehani@netscape.com>
|
|
* Mitch Stoltz <mstoltz@netsape.com>
|
|
* Pierre Phaneuf <pp@ludusdesign.com>
|
|
*/
|
|
#include <string.h>
|
|
#include "nsJARInputStream.h"
|
|
#include "nsJAR.h"
|
|
#include "nsILocalFile.h"
|
|
#include "nsXPIDLString.h"
|
|
#include "nsReadableUtils.h"
|
|
#include "nsIServiceManager.h"
|
|
#include "plbase64.h"
|
|
#include "nsIConsoleService.h"
|
|
#include "nscore.h"
|
|
#include "nsCRT.h"
|
|
|
|
#ifdef XP_UNIX
|
|
#include <sys/stat.h>
|
|
#elif defined (XP_WIN) || defined(XP_OS2)
|
|
#include <io.h>
|
|
#endif
|
|
|
|
//----------------------------------------------
|
|
// Errors and other utility definitions
|
|
//----------------------------------------------
|
|
#ifndef __gen_nsIFile_h__
|
|
#define NS_ERROR_FILE_UNRECOGNIZED_PATH NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 1)
|
|
#define NS_ERROR_FILE_UNRESOLVABLE_SYMLINK NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 2)
|
|
#define NS_ERROR_FILE_EXECUTION_FAILED NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 3)
|
|
#define NS_ERROR_FILE_UNKNOWN_TYPE NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 4)
|
|
#define NS_ERROR_FILE_DESTINATION_NOT_DIR NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 5)
|
|
#define NS_ERROR_FILE_TARGET_DOES_NOT_EXIST NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 6)
|
|
#define NS_ERROR_FILE_COPY_OR_MOVE_FAILED NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 7)
|
|
#define NS_ERROR_FILE_ALREADY_EXISTS NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 8)
|
|
#define NS_ERROR_FILE_INVALID_PATH NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 9)
|
|
#define NS_ERROR_FILE_DISK_FULL NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 10)
|
|
#define NS_ERROR_FILE_CORRUPTED NS_ERROR_GENERATE_FAILURE(NS_ERROR_MODULE_FILES, 11)
|
|
#endif
|
|
|
|
static nsresult
|
|
ziperr2nsresult(PRInt32 ziperr)
|
|
{
|
|
switch (ziperr) {
|
|
case ZIP_OK: return NS_OK;
|
|
case ZIP_ERR_MEMORY: return NS_ERROR_OUT_OF_MEMORY;
|
|
case ZIP_ERR_DISK: return NS_ERROR_FILE_DISK_FULL;
|
|
case ZIP_ERR_CORRUPT: return NS_ERROR_FILE_CORRUPTED;
|
|
case ZIP_ERR_PARAM: return NS_ERROR_ILLEGAL_VALUE;
|
|
case ZIP_ERR_FNF: return NS_ERROR_FILE_TARGET_DOES_NOT_EXIST;
|
|
case ZIP_ERR_UNSUPPORTED: return NS_ERROR_NOT_IMPLEMENTED;
|
|
default: return NS_ERROR_FAILURE;
|
|
}
|
|
}
|
|
|
|
//-- PR_Free doesn't null the pointer.
|
|
// This macro takes care of that.
|
|
#define JAR_NULLFREE(_ptr) \
|
|
{ \
|
|
PR_FREEIF(_ptr); \
|
|
_ptr = nsnull; \
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsJARManifestItem declaration
|
|
//----------------------------------------------
|
|
/*
|
|
* nsJARManifestItem contains meta-information pertaining
|
|
* to an individual JAR entry, taken from the
|
|
* META-INF/MANIFEST.MF and META-INF/ *.SF files.
|
|
* This is security-critical information, defined here so it is not
|
|
* accessible from anywhere else.
|
|
*/
|
|
typedef enum
|
|
{
|
|
JAR_INVALID = 1,
|
|
JAR_INTERNAL = 2,
|
|
JAR_EXTERNAL = 3
|
|
} JARManifestItemType;
|
|
|
|
class nsJARManifestItem
|
|
{
|
|
public:
|
|
JARManifestItemType mType;
|
|
|
|
// True if the second step of verification (VerifyEntry)
|
|
// has taken place:
|
|
PRBool entryVerified;
|
|
|
|
// Not signed, valid, or failure code
|
|
PRInt16 status;
|
|
|
|
// Internal storage of digests
|
|
char* calculatedSectionDigest;
|
|
char* storedEntryDigest;
|
|
|
|
nsJARManifestItem();
|
|
virtual ~nsJARManifestItem();
|
|
};
|
|
|
|
//-------------------------------------------------
|
|
// nsJARManifestItem constructors and destructor
|
|
//-------------------------------------------------
|
|
nsJARManifestItem::nsJARManifestItem(): mType(JAR_INTERNAL),
|
|
entryVerified(PR_FALSE),
|
|
status(nsIJAR::NOT_SIGNED),
|
|
calculatedSectionDigest(nsnull),
|
|
storedEntryDigest(nsnull)
|
|
{
|
|
}
|
|
|
|
nsJARManifestItem::~nsJARManifestItem()
|
|
{
|
|
// Delete digests if necessary
|
|
PR_FREEIF(calculatedSectionDigest);
|
|
PR_FREEIF(storedEntryDigest);
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsJAR constructor/destructor
|
|
//----------------------------------------------
|
|
PR_STATIC_CALLBACK(PRBool)
|
|
DeleteManifestEntry(nsHashKey* aKey, void* aData, void* closure)
|
|
{
|
|
//-- deletes an entry in mManifestData.
|
|
PR_FREEIF(aData);
|
|
return PR_TRUE;
|
|
}
|
|
|
|
// The following initialization makes a guess of 10 entries per jarfile.
|
|
nsJAR::nsJAR(): mManifestData(nsnull, nsnull, DeleteManifestEntry, nsnull, 10),
|
|
mParsedManifest(PR_FALSE), mGlobalStatus(nsIJAR::NOT_SIGNED),
|
|
mReleaseTime(PR_INTERVAL_NO_TIMEOUT),
|
|
mCache(nsnull),
|
|
mLock(nsnull),
|
|
mTotalItemsInManifest(0),
|
|
mFd(nsnull)
|
|
{
|
|
}
|
|
|
|
nsJAR::~nsJAR()
|
|
{
|
|
Close();
|
|
if (mLock)
|
|
PR_DestroyLock(mLock);
|
|
}
|
|
|
|
NS_IMPL_THREADSAFE_QUERY_INTERFACE2(nsJAR, nsIZipReader, nsIJAR)
|
|
NS_IMPL_THREADSAFE_ADDREF(nsJAR)
|
|
|
|
// Custom Release method works with nsZipReaderCache...
|
|
nsrefcnt nsJAR::Release(void)
|
|
{
|
|
nsrefcnt count;
|
|
NS_PRECONDITION(0 != mRefCnt, "dup release");
|
|
count = PR_AtomicDecrement((PRInt32 *)&mRefCnt);
|
|
NS_LOG_RELEASE(this, count, "nsJAR");
|
|
if (0 == count) {
|
|
mRefCnt = 1; /* stabilize */
|
|
/* enable this to find non-threadsafe destructors: */
|
|
/* NS_ASSERT_OWNINGTHREAD(_class); */
|
|
NS_DELETEXPCOM(this);
|
|
return 0;
|
|
}
|
|
else if (1 == count && mCache) {
|
|
nsresult rv = mCache->ReleaseZip(this);
|
|
NS_ASSERTION(NS_SUCCEEDED(rv), "failed to release zip file");
|
|
}
|
|
return count;
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsIZipReader implementation
|
|
//----------------------------------------------
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::Init(nsIFile* zipFile)
|
|
{
|
|
mZipFile = zipFile;
|
|
mLock = PR_NewLock();
|
|
return mLock ? NS_OK : NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::GetFile(nsIFile* *result)
|
|
{
|
|
*result = mZipFile;
|
|
NS_ADDREF(*result);
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::Open()
|
|
{
|
|
nsresult rv;
|
|
nsCOMPtr<nsILocalFile> localFile = do_QueryInterface(mZipFile, &rv);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = localFile->OpenNSPRFileDesc(PR_RDONLY, 0664, &mFd);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
PRInt32 err = mZip.OpenArchiveWithFileDesc(mFd);
|
|
|
|
return ziperr2nsresult(err);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::Close()
|
|
{
|
|
#ifdef STANDALONE
|
|
// nsZipReadState::CloseArchive closes the file descriptor
|
|
#else
|
|
if (mFd)
|
|
PR_Close(mFd);
|
|
#endif
|
|
mFd = nsnull;
|
|
PRInt32 err = mZip.CloseArchive();
|
|
return ziperr2nsresult(err);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::Test(const char *aEntryName)
|
|
{
|
|
NS_ASSERTION(mFd, "File isn't open!");
|
|
|
|
PRInt32 err = mZip.Test(aEntryName, mFd);
|
|
return ziperr2nsresult(err);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::Extract(const char *zipEntry, nsIFile* outFile)
|
|
{
|
|
// nsZipArchive and zlib are not thread safe
|
|
// we need to use a lock to prevent bug #51267
|
|
nsAutoLock lock(mLock);
|
|
|
|
nsresult rv;
|
|
nsCOMPtr<nsILocalFile> localFile = do_QueryInterface(outFile, &rv);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
PRFileDesc* fd;
|
|
rv = localFile->OpenNSPRFileDesc(PR_RDWR | PR_CREATE_FILE, 0664, &fd);
|
|
if (NS_FAILED(rv)) return NS_ERROR_FILE_ACCESS_DENIED;
|
|
|
|
nsZipItem *item = 0;
|
|
PRInt32 err = mZip.ExtractFileToFileDesc(zipEntry, fd, &item, mFd);
|
|
PR_Close(fd);
|
|
|
|
if (err != ZIP_OK)
|
|
outFile->Remove(PR_FALSE);
|
|
else
|
|
{
|
|
#if defined(XP_UNIX)
|
|
nsCAutoString path;
|
|
rv = outFile->GetNativePath(path);
|
|
if (NS_SUCCEEDED(rv))
|
|
{
|
|
if (item->flags & ZIFLAG_SYMLINK)
|
|
{
|
|
err = mZip.ResolveSymlink(path.get(),item);
|
|
}
|
|
chmod(path.get(), item->mode);
|
|
}
|
|
#endif
|
|
|
|
PRTime prtime = item->GetModTime();
|
|
// nsIFile needs usecs.
|
|
PRTime conversion = LL_ZERO;
|
|
PRTime newTime = LL_ZERO;
|
|
LL_I2L(conversion, PR_USEC_PER_MSEC);
|
|
LL_DIV(newTime, prtime, conversion);
|
|
// non-fatal if this fails, ignore errors
|
|
outFile->SetLastModifiedTime(newTime);
|
|
}
|
|
|
|
return ziperr2nsresult(err);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::GetEntry(const char *zipEntry, nsIZipEntry* *result)
|
|
{
|
|
nsZipItem* zipItem;
|
|
PRInt32 err = mZip.GetItem(zipEntry, &zipItem);
|
|
if (err != ZIP_OK) return ziperr2nsresult(err);
|
|
|
|
nsJARItem* jarItem = new nsJARItem();
|
|
if (jarItem == nsnull)
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
NS_ADDREF(jarItem);
|
|
jarItem->Init(zipItem);
|
|
*result = jarItem;
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::FindEntries(const char *aPattern, nsISimpleEnumerator **result)
|
|
{
|
|
if (!result)
|
|
return NS_ERROR_INVALID_POINTER;
|
|
|
|
nsZipFind *find = mZip.FindInit(aPattern);
|
|
if (!find)
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
|
|
nsISimpleEnumerator *zipEnum = new nsJAREnumerator(find);
|
|
if (!zipEnum)
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
NS_ADDREF( zipEnum );
|
|
|
|
*result = zipEnum;
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::GetInputStream(const char* aFilename, nsIInputStream** result)
|
|
{
|
|
// nsZipArchive and zlib are not thread safe
|
|
// we need to use a lock to prevent bug #51267
|
|
nsAutoLock lock(mLock);
|
|
|
|
NS_ENSURE_ARG_POINTER(result);
|
|
nsJARInputStream* jis = new nsJARInputStream();
|
|
if (!jis) return NS_ERROR_FAILURE;
|
|
|
|
// addref now so we can delete if the Init() fails
|
|
*result = NS_STATIC_CAST(nsIInputStream*,jis);
|
|
NS_ADDREF(*result);
|
|
|
|
nsresult rv;
|
|
rv = jis->Init(this, aFilename);
|
|
|
|
if (NS_FAILED(rv)) {
|
|
NS_RELEASE(*result);
|
|
return NS_ERROR_FAILURE;
|
|
}
|
|
|
|
return NS_OK;
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsIJAR implementation
|
|
//----------------------------------------------
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::GetCertificatePrincipal(const char* aFilename, nsIPrincipal** aPrincipal)
|
|
{
|
|
//-- Parameter check
|
|
if (!aPrincipal)
|
|
return NS_ERROR_NULL_POINTER;
|
|
*aPrincipal = nsnull;
|
|
|
|
//-- Get the signature verifier service
|
|
nsresult rv;
|
|
nsCOMPtr<nsISignatureVerifier> verifier =
|
|
do_GetService(SIGNATURE_VERIFIER_CONTRACTID, &rv);
|
|
if (NS_FAILED(rv)) // No signature verifier available
|
|
return NS_OK;
|
|
|
|
//-- Parse the manifest
|
|
rv = ParseManifest(verifier);
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (mGlobalStatus == nsIJAR::NO_MANIFEST)
|
|
return NS_OK;
|
|
|
|
PRInt16 requestedStatus;
|
|
if (aFilename)
|
|
{
|
|
//-- Find the item
|
|
nsCStringKey key(aFilename);
|
|
nsJARManifestItem* manItem = NS_STATIC_CAST(nsJARManifestItem*, mManifestData.Get(&key));
|
|
if (!manItem)
|
|
return NS_OK;
|
|
//-- Verify the item against the manifest
|
|
if (!manItem->entryVerified)
|
|
{
|
|
nsXPIDLCString entryData;
|
|
PRUint32 entryDataLen;
|
|
rv = LoadEntry(aFilename, getter_Copies(entryData), &entryDataLen);
|
|
if (NS_FAILED(rv)) return rv;
|
|
rv = VerifyEntry(verifier, manItem, entryData, entryDataLen);
|
|
if (NS_FAILED(rv)) return rv;
|
|
}
|
|
requestedStatus = manItem->status;
|
|
}
|
|
else // User wants identity of signer w/o verifying any entries
|
|
requestedStatus = mGlobalStatus;
|
|
|
|
if (requestedStatus != nsIJAR::VALID)
|
|
ReportError(aFilename, requestedStatus);
|
|
else // Valid signature
|
|
{
|
|
*aPrincipal = mPrincipal;
|
|
NS_IF_ADDREF(*aPrincipal);
|
|
}
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsJAR::GetManifestEntriesCount(PRUint32* count)
|
|
{
|
|
*count = mTotalItemsInManifest;
|
|
return NS_OK;
|
|
}
|
|
|
|
PRFileDesc*
|
|
nsJAR::OpenFile()
|
|
{
|
|
nsresult rv;
|
|
nsCOMPtr<nsILocalFile> localFile = do_QueryInterface(mZipFile, &rv);
|
|
if (NS_FAILED(rv)) return nsnull;
|
|
|
|
PRFileDesc* fd;
|
|
rv = localFile->OpenNSPRFileDesc(PR_RDONLY, 0664, &fd);
|
|
if (NS_FAILED(rv)) return nsnull;
|
|
|
|
return fd;
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsJAR private implementation
|
|
//----------------------------------------------
|
|
nsresult
|
|
nsJAR::LoadEntry(const char* aFilename, char** aBuf, PRUint32* aBufLen)
|
|
{
|
|
//-- Get a stream for reading the file
|
|
nsresult rv;
|
|
nsCOMPtr<nsIInputStream> manifestStream;
|
|
rv = GetInputStream(aFilename, getter_AddRefs(manifestStream));
|
|
if (NS_FAILED(rv)) return NS_ERROR_FILE_TARGET_DOES_NOT_EXIST;
|
|
|
|
//-- Read the manifest file into memory
|
|
char* buf;
|
|
PRUint32 len;
|
|
rv = manifestStream->Available(&len);
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (len == PRUint32(-1))
|
|
return NS_ERROR_FILE_CORRUPTED; // bug 164695
|
|
buf = (char*)PR_MALLOC(len+1);
|
|
if (!buf) return NS_ERROR_OUT_OF_MEMORY;
|
|
PRUint32 bytesRead;
|
|
rv = manifestStream->Read(buf, len, &bytesRead);
|
|
if (bytesRead != len)
|
|
rv = NS_ERROR_FILE_CORRUPTED;
|
|
if (NS_FAILED(rv)) {
|
|
PR_FREEIF(buf);
|
|
return rv;
|
|
}
|
|
buf[len] = '\0'; //Null-terminate the buffer
|
|
*aBuf = buf;
|
|
if (aBufLen)
|
|
*aBufLen = len;
|
|
return NS_OK;
|
|
}
|
|
|
|
|
|
PRInt32
|
|
nsJAR::ReadLine(const char** src)
|
|
{
|
|
//--Moves pointer to beginning of next line and returns line length
|
|
// not including CR/LF.
|
|
PRInt32 length;
|
|
char* eol = PL_strpbrk(*src, "\r\n");
|
|
|
|
if (eol == nsnull) // Probably reached end of file before newline
|
|
{
|
|
length = PL_strlen(*src);
|
|
if (length == 0) // immediate end-of-file
|
|
*src = nsnull;
|
|
else // some data left on this line
|
|
*src += length;
|
|
}
|
|
else
|
|
{
|
|
length = eol - *src;
|
|
if (eol[0] == '\r' && eol[1] == '\n') // CR LF, so skip 2
|
|
*src = eol+2;
|
|
else // Either CR or LF, so skip 1
|
|
*src = eol+1;
|
|
}
|
|
return length;
|
|
}
|
|
|
|
//-- The following #defines are used by ParseManifest()
|
|
// and ParseOneFile(). The header strings are defined in the JAR specification.
|
|
#define JAR_MF 1
|
|
#define JAR_SF 2
|
|
#define JAR_MF_SEARCH_STRING "(M|/M)ETA-INF/(M|m)(ANIFEST|anifest).(MF|mf)$"
|
|
#define JAR_SF_SEARCH_STRING "(M|/M)ETA-INF/*.(SF|sf)$"
|
|
#define JAR_MF_HEADER (const char*)"Manifest-Version: 1.0"
|
|
#define JAR_SF_HEADER (const char*)"Signature-Version: 1.0"
|
|
|
|
nsresult
|
|
nsJAR::ParseManifest(nsISignatureVerifier* verifier)
|
|
{
|
|
//-- Verification Step 1
|
|
if (mParsedManifest)
|
|
return NS_OK;
|
|
//-- (1)Manifest (MF) file
|
|
nsresult rv;
|
|
nsCOMPtr<nsISimpleEnumerator> files;
|
|
rv = FindEntries(JAR_MF_SEARCH_STRING, getter_AddRefs(files));
|
|
if (!files) rv = NS_ERROR_FAILURE;
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
//-- Load the file into memory
|
|
nsCOMPtr<nsJARItem> file;
|
|
rv = files->GetNext(getter_AddRefs(file));
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (!file)
|
|
{
|
|
mGlobalStatus = nsIJAR::NO_MANIFEST;
|
|
mParsedManifest = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
PRBool more;
|
|
rv = files->HasMoreElements(&more);
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (more)
|
|
{
|
|
mParsedManifest = PR_TRUE;
|
|
return NS_ERROR_FILE_CORRUPTED; // More than one MF file
|
|
}
|
|
nsXPIDLCString manifestFilename;
|
|
rv = file->GetName(getter_Copies(manifestFilename));
|
|
if (!manifestFilename || NS_FAILED(rv)) return rv;
|
|
nsXPIDLCString manifestBuffer;
|
|
rv = LoadEntry(manifestFilename, getter_Copies(manifestBuffer));
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
//-- Parse it
|
|
rv = ParseOneFile(verifier, manifestBuffer, JAR_MF);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
//-- (2)Signature (SF) file
|
|
// If there are multiple signatures, we select one.
|
|
rv = FindEntries(JAR_SF_SEARCH_STRING, getter_AddRefs(files));
|
|
if (!files) rv = NS_ERROR_FAILURE;
|
|
if (NS_FAILED(rv)) return rv;
|
|
//-- Get an SF file
|
|
rv = files->GetNext(getter_AddRefs(file));
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (!file)
|
|
{
|
|
mGlobalStatus = nsIJAR::NO_MANIFEST;
|
|
mParsedManifest = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
rv = file->GetName(getter_Copies(manifestFilename));
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
PRUint32 manifestLen;
|
|
rv = LoadEntry(manifestFilename, getter_Copies(manifestBuffer), &manifestLen);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
//-- Get its corresponding signature file
|
|
nsCAutoString sigFilename( NS_STATIC_CAST(const char*, manifestFilename) );
|
|
PRInt32 extension = sigFilename.RFindChar('.') + 1;
|
|
NS_ASSERTION(extension != 0, "Manifest Parser: Missing file extension.");
|
|
(void)sigFilename.Cut(extension, 2);
|
|
nsXPIDLCString sigBuffer;
|
|
PRUint32 sigLen;
|
|
{
|
|
nsCAutoString tempFilename(sigFilename); tempFilename.Append("rsa", 3);
|
|
rv = LoadEntry(tempFilename.get(), getter_Copies(sigBuffer), &sigLen);
|
|
}
|
|
if (NS_FAILED(rv))
|
|
{
|
|
nsCAutoString tempFilename(sigFilename); tempFilename.Append("RSA", 3);
|
|
rv = LoadEntry(tempFilename.get(), getter_Copies(sigBuffer), &sigLen);
|
|
}
|
|
if (NS_FAILED(rv))
|
|
{
|
|
mGlobalStatus = nsIJAR::NO_MANIFEST;
|
|
mParsedManifest = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
|
|
//-- Verify that the signature file is a valid signature of the SF file
|
|
PRInt32 verifyError;
|
|
rv = verifier->VerifySignature(sigBuffer, sigLen, manifestBuffer, manifestLen,
|
|
&verifyError, getter_AddRefs(mPrincipal));
|
|
if (NS_FAILED(rv)) return rv;
|
|
if (mPrincipal && verifyError == 0)
|
|
mGlobalStatus = nsIJAR::VALID;
|
|
else if (verifyError == nsISignatureVerifier::VERIFY_ERROR_UNKNOWN_CA)
|
|
mGlobalStatus = nsIJAR::INVALID_UNKNOWN_CA;
|
|
else
|
|
mGlobalStatus = nsIJAR::INVALID_SIG;
|
|
|
|
//-- Parse the SF file. If the verification above failed, principal
|
|
// is null, and ParseOneFile will mark the relevant entries as invalid.
|
|
// if ParseOneFile fails, then it has no effect, and we can safely
|
|
// continue to the next SF file, or return.
|
|
ParseOneFile(verifier, manifestBuffer, JAR_SF);
|
|
mParsedManifest = PR_TRUE;
|
|
|
|
return NS_OK;
|
|
}
|
|
|
|
nsresult
|
|
nsJAR::ParseOneFile(nsISignatureVerifier* verifier,
|
|
const char* filebuf, PRInt16 aFileType)
|
|
{
|
|
//-- Check file header
|
|
const char* nextLineStart = filebuf;
|
|
nsCAutoString curLine;
|
|
PRInt32 linelen;
|
|
linelen = ReadLine(&nextLineStart);
|
|
curLine.Assign(filebuf, linelen);
|
|
|
|
if ( ((aFileType == JAR_MF) && !curLine.Equals(JAR_MF_HEADER) ) ||
|
|
((aFileType == JAR_SF) && !curLine.Equals(JAR_SF_HEADER) ) )
|
|
return NS_ERROR_FILE_CORRUPTED;
|
|
|
|
//-- Skip header section
|
|
do {
|
|
linelen = ReadLine(&nextLineStart);
|
|
} while (linelen > 0);
|
|
|
|
//-- Set up parsing variables
|
|
const char* curPos;
|
|
const char* sectionStart = nextLineStart;
|
|
|
|
nsJARManifestItem* curItemMF = nsnull;
|
|
PRBool foundName = PR_FALSE;
|
|
if (aFileType == JAR_MF)
|
|
curItemMF = new nsJARManifestItem();
|
|
nsCAutoString curItemName;
|
|
nsCAutoString storedSectionDigest;
|
|
|
|
for(;;)
|
|
{
|
|
curPos = nextLineStart;
|
|
linelen = ReadLine(&nextLineStart);
|
|
curLine.Assign(curPos, linelen);
|
|
if (linelen == 0)
|
|
// end of section (blank line or end-of-file)
|
|
{
|
|
if (aFileType == JAR_MF)
|
|
{
|
|
mTotalItemsInManifest++;
|
|
if (curItemMF->mType != JAR_INVALID)
|
|
{
|
|
//-- Did this section have a name: line?
|
|
if(!foundName)
|
|
curItemMF->mType = JAR_INVALID;
|
|
else
|
|
{
|
|
if (curItemMF->mType == JAR_INTERNAL)
|
|
{
|
|
//-- If it's an internal item, it must correspond
|
|
// to a valid jar entry
|
|
nsIZipEntry* entry;
|
|
PRInt32 result = GetEntry(curItemName.get(), &entry);
|
|
if (result != ZIP_OK || !entry)
|
|
curItemMF->mType = JAR_INVALID;
|
|
}
|
|
//-- Check for duplicates
|
|
nsCStringKey key(curItemName);
|
|
if (mManifestData.Exists(&key))
|
|
curItemMF->mType = JAR_INVALID;
|
|
}
|
|
}
|
|
|
|
if (curItemMF->mType == JAR_INVALID)
|
|
delete curItemMF;
|
|
else //-- calculate section digest
|
|
{
|
|
PRUint32 sectionLength = curPos - sectionStart;
|
|
CalculateDigest(verifier, sectionStart, sectionLength,
|
|
&(curItemMF->calculatedSectionDigest));
|
|
//-- Save item in the hashtable
|
|
nsCStringKey itemKey(curItemName);
|
|
mManifestData.Put(&itemKey, (void*)curItemMF);
|
|
}
|
|
if (nextLineStart == nsnull) // end-of-file
|
|
break;
|
|
|
|
sectionStart = nextLineStart;
|
|
curItemMF = new nsJARManifestItem();
|
|
} // (aFileType == JAR_MF)
|
|
else
|
|
//-- file type is SF, compare digest with calculated
|
|
// section digests from MF file.
|
|
{
|
|
if (foundName)
|
|
{
|
|
nsJARManifestItem* curItemSF;
|
|
nsCStringKey key(curItemName);
|
|
curItemSF = (nsJARManifestItem*)mManifestData.Get(&key);
|
|
if(curItemSF)
|
|
{
|
|
NS_ASSERTION(curItemSF->status == nsJAR::NOT_SIGNED,
|
|
"SECURITY ERROR: nsJARManifestItem not correctly initialized");
|
|
curItemSF->status = mGlobalStatus;
|
|
if (curItemSF->status == nsIJAR::VALID)
|
|
{ // Compare digests
|
|
if (storedSectionDigest.IsEmpty())
|
|
curItemSF->status = nsIJAR::NOT_SIGNED;
|
|
else
|
|
{
|
|
if (!storedSectionDigest.Equals((const char*)curItemSF->calculatedSectionDigest))
|
|
curItemSF->status = nsIJAR::INVALID_MANIFEST;
|
|
JAR_NULLFREE(curItemSF->calculatedSectionDigest)
|
|
storedSectionDigest = "";
|
|
}
|
|
} // (aPrincipal != nsnull)
|
|
} // if(curItemSF)
|
|
} // if(foundName)
|
|
|
|
if(nextLineStart == nsnull) // end-of-file
|
|
break;
|
|
} // aFileType == JAR_SF
|
|
foundName = PR_FALSE;
|
|
continue;
|
|
} // if(linelen == 0)
|
|
|
|
//-- Look for continuations (beginning with a space) on subsequent lines
|
|
// and append them to the current line.
|
|
while(*nextLineStart == ' ')
|
|
{
|
|
curPos = nextLineStart;
|
|
PRInt32 continuationLen = ReadLine(&nextLineStart) - 1;
|
|
nsCAutoString continuation(curPos+1, continuationLen);
|
|
curLine += continuation;
|
|
linelen += continuationLen;
|
|
}
|
|
|
|
//-- Find colon in current line, this separates name from value
|
|
PRInt32 colonPos = curLine.FindChar(':');
|
|
if (colonPos == -1) // No colon on line, ignore line
|
|
continue;
|
|
//-- Break down the line
|
|
nsCAutoString lineName;
|
|
curLine.Left(lineName, colonPos);
|
|
nsCAutoString lineData;
|
|
curLine.Mid(lineData, colonPos+2, linelen - (colonPos+2));
|
|
|
|
//-- Lines to look for:
|
|
// (1) Digest:
|
|
if (lineName.Equals(NS_LITERAL_CSTRING("SHA1-Digest"),
|
|
nsCaseInsensitiveCStringComparator()))
|
|
//-- This is a digest line, save the data in the appropriate place
|
|
{
|
|
if(aFileType == JAR_MF)
|
|
{
|
|
curItemMF->storedEntryDigest = (char*)PR_MALLOC(lineData.Length()+1);
|
|
if (!(curItemMF->storedEntryDigest))
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
PL_strcpy(curItemMF->storedEntryDigest, lineData.get());
|
|
}
|
|
else
|
|
storedSectionDigest = lineData;
|
|
continue;
|
|
}
|
|
|
|
// (2) Name: associates this manifest section with a file in the jar.
|
|
if (!foundName && lineName.Equals(NS_LITERAL_CSTRING("Name"),
|
|
nsCaseInsensitiveCStringComparator()))
|
|
{
|
|
curItemName = lineData;
|
|
foundName = PR_TRUE;
|
|
continue;
|
|
}
|
|
|
|
// (3) Magic: this may be an inline Javascript.
|
|
// We can't do any other kind of magic.
|
|
if ( aFileType == JAR_MF &&
|
|
lineName.Equals(NS_LITERAL_CSTRING("Magic"),
|
|
nsCaseInsensitiveCStringComparator()))
|
|
{
|
|
if(lineData.Equals(NS_LITERAL_CSTRING("javascript"),
|
|
nsCaseInsensitiveCStringComparator()))
|
|
curItemMF->mType = JAR_EXTERNAL;
|
|
else
|
|
curItemMF->mType = JAR_INVALID;
|
|
continue;
|
|
}
|
|
|
|
} // for (;;)
|
|
return NS_OK;
|
|
} //ParseOneFile()
|
|
|
|
nsresult
|
|
nsJAR::VerifyEntry(nsISignatureVerifier* verifier,
|
|
nsJARManifestItem* aManItem, const char* aEntryData,
|
|
PRUint32 aLen)
|
|
{
|
|
if (aManItem->status == nsIJAR::VALID)
|
|
{
|
|
if(!aManItem->storedEntryDigest)
|
|
// No entry digests in manifest file. Entry is unsigned.
|
|
aManItem->status = nsIJAR::NOT_SIGNED;
|
|
else
|
|
{ //-- Calculate and compare digests
|
|
char* calculatedEntryDigest;
|
|
nsresult rv = CalculateDigest(verifier, aEntryData, aLen, &calculatedEntryDigest);
|
|
if (NS_FAILED(rv)) return NS_ERROR_FAILURE;
|
|
if (PL_strcmp(aManItem->storedEntryDigest, calculatedEntryDigest) != 0)
|
|
aManItem->status = nsIJAR::INVALID_ENTRY;
|
|
JAR_NULLFREE(calculatedEntryDigest)
|
|
JAR_NULLFREE(aManItem->storedEntryDigest)
|
|
}
|
|
}
|
|
aManItem->entryVerified = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
|
|
void nsJAR::ReportError(const char* aFilename, PRInt16 errorCode)
|
|
{
|
|
//-- Generate error message
|
|
nsAutoString message;
|
|
message.Assign(NS_LITERAL_STRING("Signature Verification Error: the signature on "));
|
|
if (aFilename)
|
|
message.AppendWithConversion(aFilename);
|
|
else
|
|
message.Append(NS_LITERAL_STRING("this .jar archive"));
|
|
message.Append(NS_LITERAL_STRING(" is invalid because "));
|
|
switch(errorCode)
|
|
{
|
|
case nsIJAR::NOT_SIGNED:
|
|
message.Append(NS_LITERAL_STRING("the archive did not contain a valid PKCS7 signature."));
|
|
break;
|
|
case nsIJAR::INVALID_SIG:
|
|
message.Append(NS_LITERAL_STRING("the digital signature (*.RSA) file is not a valid signature of the signature instruction file (*.SF)."));
|
|
break;
|
|
case nsIJAR::INVALID_UNKNOWN_CA:
|
|
message.Append(NS_LITERAL_STRING("the certificate used to sign this file has an unrecognized issuer."));
|
|
break;
|
|
case nsIJAR::INVALID_MANIFEST:
|
|
message.Append(NS_LITERAL_STRING("the signature instruction file (*.SF) does not contain a valid hash of the MANIFEST.MF file."));
|
|
break;
|
|
case nsIJAR::INVALID_ENTRY:
|
|
message.Append(NS_LITERAL_STRING("the MANIFEST.MF file does not contain a valid hash of the file being verified."));
|
|
break;
|
|
default:
|
|
message.Append(NS_LITERAL_STRING("of an unknown problem."));
|
|
}
|
|
|
|
// Report error in JS console
|
|
nsCOMPtr<nsIConsoleService> console(do_GetService("@mozilla.org/consoleservice;1"));
|
|
if (console)
|
|
{
|
|
console->LogStringMessage(message.get());
|
|
}
|
|
#ifdef DEBUG
|
|
char* messageCstr = ToNewCString(message);
|
|
if (!messageCstr) return;
|
|
fprintf(stderr, "%s\n", messageCstr);
|
|
nsMemory::Free(messageCstr);
|
|
#endif
|
|
}
|
|
|
|
|
|
nsresult nsJAR::CalculateDigest(nsISignatureVerifier* verifier,
|
|
const char* aInBuf, PRUint32 aLen,
|
|
char** digest)
|
|
{
|
|
*digest = nsnull;
|
|
nsresult rv;
|
|
|
|
//-- Calculate the digest
|
|
HASHContextStr* id;
|
|
rv = verifier->HashBegin(nsISignatureVerifier::SHA1, &id);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = verifier->HashUpdate(id, aInBuf, aLen);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
PRUint32 len;
|
|
unsigned char* rawDigest = (unsigned char*)PR_MALLOC(nsISignatureVerifier::SHA1_LENGTH);
|
|
if (rawDigest == nsnull) return NS_ERROR_OUT_OF_MEMORY;
|
|
rv = verifier->HashEnd(id, &rawDigest, &len, nsISignatureVerifier::SHA1_LENGTH);
|
|
if (NS_FAILED(rv)) { PR_FREEIF(rawDigest); return rv; }
|
|
|
|
//-- Encode the digest in base64
|
|
*digest = PL_Base64Encode((char*)rawDigest, len, *digest);
|
|
if (!(*digest)) { PR_FREEIF(rawDigest); return NS_ERROR_OUT_OF_MEMORY; }
|
|
|
|
PR_FREEIF(rawDigest);
|
|
return NS_OK;
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// Debugging functions
|
|
//----------------------------------------------
|
|
#if 0
|
|
PR_STATIC_CALLBACK(PRBool)
|
|
PrintManItem(nsHashKey* aKey, void* aData, void* closure)
|
|
{
|
|
nsJARManifestItem* manItem = (nsJARManifestItem*)aData;
|
|
if (manItem)
|
|
{
|
|
nsCStringKey* key2 = (nsCStringKey*)aKey;
|
|
char* name = ToNewCString(key2->GetString());
|
|
if (!(PL_strcmp(name, "") == 0))
|
|
printf("%s s=%i\n",name, manItem->status);
|
|
}
|
|
return PR_TRUE;
|
|
}
|
|
#endif
|
|
|
|
void nsJAR::DumpMetadata(const char* aMessage)
|
|
{
|
|
#if 0
|
|
printf("### nsJAR::DumpMetadata at %s ###\n", aMessage);
|
|
if (mPrincipal)
|
|
{
|
|
char* toStr;
|
|
mPrincipal->ToString(&toStr);
|
|
printf("Principal: %s.\n", toStr);
|
|
PR_FREEIF(toStr);
|
|
}
|
|
else
|
|
printf("No Principal. \n");
|
|
mManifestData.Enumerate(PrintManItem);
|
|
printf("\n");
|
|
#endif
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsJAREnumerator constructor and destructor
|
|
//----------------------------------------------
|
|
nsJAREnumerator::nsJAREnumerator(nsZipFind *aFind)
|
|
: mFind(aFind),
|
|
mCurr(nsnull),
|
|
mIsCurrStale(PR_TRUE)
|
|
{
|
|
mArchive = mFind->GetArchive();
|
|
}
|
|
|
|
nsJAREnumerator::~nsJAREnumerator()
|
|
{
|
|
mArchive->FindFree(mFind);
|
|
}
|
|
|
|
NS_IMPL_ISUPPORTS1(nsJAREnumerator, nsISimpleEnumerator)
|
|
|
|
//----------------------------------------------
|
|
// nsJAREnumerator::HasMoreElements
|
|
//----------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJAREnumerator::HasMoreElements(PRBool* aResult)
|
|
{
|
|
PRInt32 err;
|
|
|
|
if (!mFind)
|
|
return NS_ERROR_NOT_INITIALIZED;
|
|
|
|
// try to get the next element
|
|
if (mIsCurrStale)
|
|
{
|
|
err = mArchive->FindNext( mFind, &mCurr );
|
|
if (err == ZIP_ERR_FNF)
|
|
{
|
|
*aResult = PR_FALSE;
|
|
return NS_OK;
|
|
}
|
|
if (err != ZIP_OK)
|
|
return NS_ERROR_FAILURE; // no error translation
|
|
|
|
mIsCurrStale = PR_FALSE;
|
|
}
|
|
|
|
*aResult = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
|
|
//----------------------------------------------
|
|
// nsJAREnumerator::GetNext
|
|
//----------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJAREnumerator::GetNext(nsISupports** aResult)
|
|
{
|
|
nsresult rv;
|
|
PRBool bMore;
|
|
|
|
// check if the current item is "stale"
|
|
if (mIsCurrStale)
|
|
{
|
|
rv = HasMoreElements( &bMore );
|
|
if (NS_FAILED(rv))
|
|
return rv;
|
|
if (bMore == PR_FALSE)
|
|
{
|
|
*aResult = nsnull; // null return value indicates no more elements
|
|
return NS_OK;
|
|
}
|
|
}
|
|
|
|
// pack into an nsIJARItem
|
|
nsJARItem* jarItem = new nsJARItem();
|
|
if(jarItem)
|
|
{
|
|
NS_ADDREF(jarItem);
|
|
jarItem->Init(mCurr);
|
|
*aResult = jarItem;
|
|
mIsCurrStale = PR_TRUE; // we just gave this one away
|
|
return NS_OK;
|
|
}
|
|
else
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
//-------------------------------------------------
|
|
// nsJARItem constructors and destructor
|
|
//-------------------------------------------------
|
|
nsJARItem::nsJARItem()
|
|
{
|
|
}
|
|
|
|
nsJARItem::~nsJARItem()
|
|
{
|
|
}
|
|
|
|
NS_IMPL_ISUPPORTS1(nsJARItem, nsIZipEntry)
|
|
|
|
void nsJARItem::Init(nsZipItem* aZipItem)
|
|
{
|
|
mZipItem = aZipItem;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// nsJARItem::GetName
|
|
//------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJARItem::GetName(char * *aName)
|
|
{
|
|
char *namedup;
|
|
|
|
if ( !aName )
|
|
return NS_ERROR_NULL_POINTER;
|
|
if ( !mZipItem->name )
|
|
return NS_ERROR_FAILURE;
|
|
|
|
namedup = PL_strdup( mZipItem->name );
|
|
if ( !namedup )
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
|
|
*aName = namedup;
|
|
return NS_OK;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// nsJARItem::GetCompression
|
|
//------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJARItem::GetCompression(PRUint16 *aCompression)
|
|
{
|
|
if (!aCompression)
|
|
return NS_ERROR_NULL_POINTER;
|
|
if (!mZipItem->compression)
|
|
return NS_ERROR_FAILURE;
|
|
|
|
*aCompression = mZipItem->compression;
|
|
return NS_OK;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// nsJARItem::GetSize
|
|
//------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJARItem::GetSize(PRUint32 *aSize)
|
|
{
|
|
if (!aSize)
|
|
return NS_ERROR_NULL_POINTER;
|
|
if (!mZipItem->size)
|
|
return NS_ERROR_FAILURE;
|
|
|
|
*aSize = mZipItem->size;
|
|
return NS_OK;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// nsJARItem::GetRealSize
|
|
//------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJARItem::GetRealSize(PRUint32 *aRealsize)
|
|
{
|
|
if (!aRealsize)
|
|
return NS_ERROR_NULL_POINTER;
|
|
if (!mZipItem->realsize)
|
|
return NS_ERROR_FAILURE;
|
|
|
|
*aRealsize = mZipItem->realsize;
|
|
return NS_OK;
|
|
}
|
|
|
|
//------------------------------------------
|
|
// nsJARItem::GetCrc32
|
|
//------------------------------------------
|
|
NS_IMETHODIMP
|
|
nsJARItem::GetCRC32(PRUint32 *aCrc32)
|
|
{
|
|
if (!aCrc32)
|
|
return NS_ERROR_NULL_POINTER;
|
|
if (!mZipItem->crc32)
|
|
return NS_ERROR_FAILURE;
|
|
|
|
*aCrc32 = mZipItem->crc32;
|
|
return NS_OK;
|
|
}
|
|
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
// nsIZipReaderCache
|
|
|
|
NS_IMPL_THREADSAFE_ISUPPORTS3(nsZipReaderCache, nsIZipReaderCache, nsIObserver, nsISupportsWeakReference)
|
|
|
|
nsZipReaderCache::nsZipReaderCache()
|
|
: mLock(nsnull),
|
|
mZips(16)
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
,
|
|
mZipCacheLookups(0),
|
|
mZipCacheHits(0),
|
|
mZipCacheFlushes(0),
|
|
mZipSyncMisses(0)
|
|
#endif
|
|
{
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsZipReaderCache::Init(PRUint32 cacheSize)
|
|
{
|
|
nsresult rv;
|
|
mCacheSize = cacheSize;
|
|
|
|
// Register as a memory pressure observer
|
|
nsCOMPtr<nsIObserverService> os =
|
|
do_GetService("@mozilla.org/observer-service;1", &rv);
|
|
if (NS_SUCCEEDED(rv))
|
|
{
|
|
rv = os->AddObserver(this, "memory-pressure", PR_TRUE);
|
|
}
|
|
// ignore failure of the observer registration.
|
|
|
|
mLock = PR_NewLock();
|
|
return mLock ? NS_OK : NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
static PRBool PR_CALLBACK
|
|
DropZipReaderCache(nsHashKey *aKey, void *aData, void* closure)
|
|
{
|
|
nsJAR* zip = (nsJAR*)aData;
|
|
zip->SetZipReaderCache(nsnull);
|
|
return PR_TRUE;
|
|
}
|
|
|
|
nsZipReaderCache::~nsZipReaderCache()
|
|
{
|
|
if (mLock)
|
|
PR_DestroyLock(mLock);
|
|
mZips.Enumerate(DropZipReaderCache, nsnull);
|
|
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
printf("nsZipReaderCache size=%d hits=%d lookups=%d rate=%f%% flushes=%d missed %d\n",
|
|
mCacheSize, mZipCacheHits, mZipCacheLookups,
|
|
(float)mZipCacheHits / mZipCacheLookups,
|
|
mZipCacheFlushes, mZipSyncMisses);
|
|
#endif
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsZipReaderCache::GetZip(nsIFile* zipFile, nsIZipReader* *result)
|
|
{
|
|
nsresult rv;
|
|
nsAutoLock lock(mLock);
|
|
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
mZipCacheLookups++;
|
|
#endif
|
|
|
|
nsCAutoString path;
|
|
rv = zipFile->GetNativePath(path);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
nsCStringKey key(path);
|
|
nsJAR* zip = NS_STATIC_CAST(nsJAR*, NS_STATIC_CAST(nsIZipReader*,mZips.Get(&key))); // AddRefs
|
|
if (zip) {
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
mZipCacheHits++;
|
|
#endif
|
|
zip->ClearReleaseTime();
|
|
}
|
|
else {
|
|
zip = new nsJAR();
|
|
if (zip == nsnull)
|
|
return NS_ERROR_OUT_OF_MEMORY;
|
|
NS_ADDREF(zip);
|
|
zip->SetZipReaderCache(this);
|
|
|
|
rv = zip->Init(zipFile);
|
|
if (NS_FAILED(rv)) {
|
|
NS_RELEASE(zip);
|
|
return rv;
|
|
}
|
|
rv = zip->Open();
|
|
if (NS_FAILED(rv)) {
|
|
NS_RELEASE(zip);
|
|
return rv;
|
|
}
|
|
|
|
PRBool collision = mZips.Put(&key, NS_STATIC_CAST(nsIZipReader*, zip)); // AddRefs to 2
|
|
NS_ASSERTION(!collision, "horked");
|
|
}
|
|
*result = zip;
|
|
return rv;
|
|
}
|
|
|
|
static PRBool PR_CALLBACK
|
|
FindOldestZip(nsHashKey *aKey, void *aData, void* closure)
|
|
{
|
|
nsJAR** oldestPtr = (nsJAR**)closure;
|
|
nsJAR* oldest = *oldestPtr;
|
|
nsJAR* current = (nsJAR*)aData;
|
|
PRIntervalTime currentReleaseTime = current->GetReleaseTime();
|
|
if (currentReleaseTime != PR_INTERVAL_NO_TIMEOUT) {
|
|
if (oldest == nsnull ||
|
|
currentReleaseTime < oldest->GetReleaseTime()) {
|
|
*oldestPtr = current;
|
|
}
|
|
}
|
|
return PR_TRUE;
|
|
}
|
|
|
|
struct ZipFindData {nsJAR* zip; PRBool found;};
|
|
|
|
static PRBool PR_CALLBACK
|
|
FindZip(nsHashKey *aKey, void *aData, void* closure)
|
|
{
|
|
ZipFindData* find_data = (ZipFindData*)closure;
|
|
|
|
if (find_data->zip == (nsJAR*)aData) {
|
|
find_data->found = PR_TRUE;
|
|
return PR_FALSE;
|
|
}
|
|
return PR_TRUE;
|
|
}
|
|
|
|
nsresult
|
|
nsZipReaderCache::ReleaseZip(nsJAR* zip)
|
|
{
|
|
nsresult rv;
|
|
nsAutoLock lock(mLock);
|
|
|
|
// It is possible that two thread compete for this zip. The dangerous
|
|
// case is where one thread Releases the zip and discovers that the ref
|
|
// count has gone to one. Before it can call this ReleaseZip method
|
|
// another thread calls our GetZip method. The ref count goes to two. That
|
|
// second thread then Releases the zip and the ref coutn goes to one. It
|
|
// Then tries to enter this ReleaseZip method and blocks while the first
|
|
// thread is still here. The first thread continues and remove the zip from
|
|
// the cache and calls its Release method sending the ref count to 0 and
|
|
// deleting the zip. However, the second thread is still blocked at the
|
|
// start of ReleaseZip, but the 'zip' param now hold a reference to a
|
|
// deleted zip!
|
|
//
|
|
// So, we are going to try safegaurding here by searching our hashtable while
|
|
// locked here for the zip. We return fast if it is not found.
|
|
|
|
ZipFindData find_data = {zip, PR_FALSE};
|
|
mZips.Enumerate(FindZip, &find_data);
|
|
if (!find_data.found) {
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
mZipSyncMisses++;
|
|
#endif
|
|
return NS_OK;
|
|
}
|
|
|
|
zip->SetReleaseTime();
|
|
|
|
if (mZips.Count() <= mCacheSize)
|
|
return NS_OK;
|
|
|
|
nsJAR* oldest = nsnull;
|
|
mZips.Enumerate(FindOldestZip, &oldest);
|
|
|
|
// Because of the craziness above it is possible that there is no zip that
|
|
// needs removing.
|
|
if (!oldest)
|
|
return NS_OK;
|
|
|
|
#ifdef ZIP_CACHE_HIT_RATE
|
|
mZipCacheFlushes++;
|
|
#endif
|
|
|
|
// Clear the cache pointer in case we gave out this oldest guy while
|
|
// his Release call was being made. Otherwise we could nest on ReleaseZip
|
|
// when the second owner calls Release and we are still here in this lock.
|
|
oldest->SetZipReaderCache(nsnull);
|
|
|
|
// remove from hashtable
|
|
nsCOMPtr<nsIFile> zipFile;
|
|
rv = oldest->GetFile(getter_AddRefs(zipFile));
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
nsCAutoString path;
|
|
rv = zipFile->GetNativePath(path);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
nsCStringKey key(path);
|
|
PRBool removed = mZips.Remove(&key); // Releases
|
|
NS_ASSERTION(removed, "botched");
|
|
|
|
return NS_OK;
|
|
}
|
|
|
|
static PRBool PR_CALLBACK
|
|
FindFlushableZip(nsHashKey *aKey, void *aData, void* closure)
|
|
{
|
|
nsHashKey** flushableKeyPtr = (nsHashKey**)closure;
|
|
nsJAR* current = (nsJAR*)aData;
|
|
|
|
if (current->GetReleaseTime() != PR_INTERVAL_NO_TIMEOUT) {
|
|
*flushableKeyPtr = aKey;
|
|
current->SetZipReaderCache(nsnull);
|
|
return PR_FALSE;
|
|
}
|
|
return PR_TRUE;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsZipReaderCache::Observe(nsISupports *aSubject,
|
|
const char *aTopic,
|
|
const PRUnichar *aSomeData)
|
|
{
|
|
if (nsCRT::strcmp(aTopic, "memory-pressure") == 0) {
|
|
nsAutoLock lock(mLock);
|
|
while (PR_TRUE) {
|
|
nsHashKey* flushable = nsnull;
|
|
mZips.Enumerate(FindFlushableZip, &flushable);
|
|
if ( ! flushable )
|
|
break;
|
|
PRBool removed = mZips.Remove(flushable); // Releases
|
|
NS_ASSERTION(removed, "botched");
|
|
|
|
#ifdef xDEBUG_jband
|
|
printf("flushed something from the jar cache\n");
|
|
#endif
|
|
}
|
|
}
|
|
return NS_OK;
|
|
}
|
|
|
|
////////////////////////////////////////////////////////////////////////////////
|