1/* 2 * Copyright (c) 2006-2007,2011 Apple Inc. All Rights Reserved. 3 * 4 * @APPLE_LICENSE_HEADER_START@ 5 * 6 * This file contains Original Code and/or Modifications of Original Code 7 * as defined in and that are subject to the Apple Public Source License 8 * Version 2.0 (the 'License'). You may not use this file except in 9 * compliance with the License. Please obtain a copy of the License at 10 * http://www.opensource.apple.com/apsl/ and read it before using this 11 * file. 12 * 13 * The Original Code and all software distributed under the License are 14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER 15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, 16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, 17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. 18 * Please see the License for the specific language governing rights and 19 * limitations under the License. 20 * 21 * @APPLE_LICENSE_HEADER_END@ 22 */ 23 24// 25// reqparser - interface to Requirement language parser/compiler 26// 27#include "reqparser.h" 28#include "antlrplugin.h" 29#include "cserror.h" 30#include "codesigning_dtrace.h" 31#include <CoreFoundation/CoreFoundation.h> 32#include <security_utilities/osxcode.h> 33 34namespace Security { 35namespace CodeSigning { 36 37 38struct PluginHost { 39 PluginHost(); 40 RefPointer<LoadableBundle> plugin; 41 AntlrPlugin *antlr; 42}; 43 44ModuleNexus<PluginHost> plugin; 45 46 47// 48// The PluginHost constructor runs under the protection of ModuleNexus's constructor, 49// so it doesn't have to worry about thread safety and such. 50// 51PluginHost::PluginHost() 52{ 53 if (CFBundleRef securityFramework = CFBundleGetBundleWithIdentifier(CFSTR("com.apple.security"))) 54 if (CFRef<CFURLRef> plugins = CFBundleCopyBuiltInPlugInsURL(securityFramework)) 55 if (CFRef<CFURLRef> pluginURL = makeCFURL("csparser.bundle", true, plugins)) { 56 plugin = new LoadableBundle(cfString(pluginURL).c_str()); 57 plugin->load(); 58 CODESIGN_LOAD_ANTLR(); 59 antlr = reinterpret_cast<FindAntlrPlugin *>(plugin->lookupSymbol(FINDANTLRPLUGIN))(); 60 return; 61 } 62 63 // can't load plugin - fail 64 MacOSError::throwMe(errSecCSInternalError); 65} 66 67 68// 69// Drive a parsing function through the plugin harness and translate any errors 70// into a CFError exception. 71// 72template <class Result, class Source> 73const Result *parse(Source source, const Result *(*AntlrPlugin::*func)(Source, string &)) 74{ 75 string errors; 76 if (const Result *result = (plugin().antlr->*func)(source, errors)) 77 return result; 78 else 79 CSError::throwMe(errSecCSReqInvalid, kSecCFErrorRequirementSyntax, CFTempString(errors)); 80} 81 82 83// 84// Implement the template instances by passing them through the plugin's eye-of-the-needle. 85// Any other combination of input and output types will cause linker errors. 86// 87template <> 88const Requirement *RequirementParser<Requirement>::operator () (std::FILE *source) 89{ 90 return parse(source, &AntlrPlugin::fileRequirement); 91} 92 93template <> 94const Requirement *RequirementParser<Requirement>::operator () (const std::string &source) 95{ 96 return parse(source, &AntlrPlugin::stringRequirement); 97} 98 99template <> 100const Requirements *RequirementParser<Requirements>::operator () (std::FILE *source) 101{ 102 return parse(source, &AntlrPlugin::fileRequirements); 103} 104 105template <> 106const Requirements *RequirementParser<Requirements>::operator () (const std::string &source) 107{ 108 return parse(source, &AntlrPlugin::stringRequirements); 109} 110 111template <> 112const BlobCore *RequirementParser<BlobCore>::operator () (std::FILE *source) 113{ 114 return parse(source, &AntlrPlugin::fileGeneric); 115} 116 117template <> 118const BlobCore *RequirementParser<BlobCore>::operator () (const std::string &source) 119{ 120 return parse(source, &AntlrPlugin::stringGeneric); 121} 122 123 124} // CodeSigning 125} // Security 126