1/*
2 * Copyright (c) 1998, 2017, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.  Oracle designates this
8 * particular file as subject to the "Classpath" exception as provided
9 * by Oracle in the LICENSE file that accompanied this code.
10 *
11 * This code is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
14 * version 2 for more details (a copy is included in the LICENSE file that
15 * accompanied this code).
16 *
17 * You should have received a copy of the GNU General Public License version
18 * 2 along with this work; if not, write to the Free Software Foundation,
19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 *
21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 * or visit www.oracle.com if you need additional information or have any
23 * questions.
24 */
25
26#include <sys/socket.h>
27#include <netinet/in.h>
28#include <arpa/inet.h>
29#include <objc/objc-runtime.h>
30
31#include <Security/AuthSession.h>
32#include <CoreFoundation/CoreFoundation.h>
33#include <SystemConfiguration/SystemConfiguration.h>
34#include <Foundation/Foundation.h>
35
36#include "java_props_macosx.h"
37
38char *getPosixLocale(int cat) {
39    char *lc = setlocale(cat, NULL);
40    if ((lc == NULL) || (strcmp(lc, "C") == 0)) {
41        lc = getenv("LANG");
42    }
43    if (lc == NULL) return NULL;
44    return strdup(lc);
45}
46
47#define LOCALEIDLENGTH  128
48char *getMacOSXLocale(int cat) {
49    const char* retVal = NULL;
50    char localeString[LOCALEIDLENGTH];
51
52    switch (cat) {
53    case LC_MESSAGES:
54        {
55            // get preferred language code
56            CFArrayRef languages = CFLocaleCopyPreferredLanguages();
57            if (languages == NULL) {
58                return NULL;
59            }
60            if (CFArrayGetCount(languages) <= 0) {
61                CFRelease(languages);
62                return NULL;
63            }
64
65            CFStringRef primaryLanguage = (CFStringRef)CFArrayGetValueAtIndex(languages, 0);
66            if (primaryLanguage == NULL) {
67                CFRelease(languages);
68                return NULL;
69            }
70            char languageString[LOCALEIDLENGTH];
71            if (CFStringGetCString(primaryLanguage, languageString,
72                                   LOCALEIDLENGTH, CFStringGetSystemEncoding()) == false) {
73                CFRelease(languages);
74                return NULL;
75            }
76            CFRelease(languages);
77
78            // Explicitly supply region, if there is none
79            char *hyphenPos = strchr(languageString, '-');
80            int langStrLen = strlen(languageString);
81
82            if (hyphenPos == NULL || // languageString contains ISO639 only, e.g., "en"
83                languageString + langStrLen - hyphenPos == 5) { // ISO639-ScriptCode, e.g., "en-Latn"
84                CFStringGetCString(CFLocaleGetIdentifier(CFLocaleCopyCurrent()),
85                               localeString, LOCALEIDLENGTH, CFStringGetSystemEncoding());
86                char *underscorePos = strrchr(localeString, '_');
87                char *region = NULL;
88
89                if (underscorePos != NULL) {
90                    region = underscorePos + 1;
91                }
92
93                if (region != NULL) {
94                    strcat(languageString, "-");
95                    strcat(languageString, region);
96                }
97            }
98
99            retVal = languageString;
100        }
101        break;
102
103    default:
104        {
105            if (!CFStringGetCString(CFLocaleGetIdentifier(CFLocaleCopyCurrent()),
106                                    localeString, LOCALEIDLENGTH, CFStringGetSystemEncoding())) {
107                return NULL;
108            }
109
110            retVal = localeString;
111        }
112        break;
113    }
114
115    if (retVal != NULL) {
116        return strdup(convertToPOSIXLocale(retVal));
117    }
118
119    return NULL;
120}
121
122/* Language IDs use the language designators and (optional) region
123 * and script designators of BCP 47.  So possible formats are:
124 *
125 * "en"         (language designator only)
126 * "haw"        (3-letter lanuage designator)
127 * "en-GB"      (language with alpha-2 region designator)
128 * "es-419"     (language with 3-digit UN M.49 area code)
129 * "zh-Hans"    (language with ISO 15924 script designator)
130 * "zh-Hans-US"  (language with ISO 15924 script designator and region)
131 * "zh-Hans-419" (language with ISO 15924 script designator and UN M.49)
132 *
133 * convert these tags into POSIX conforming locale string, i.e.,
134 * lang{_region}{@script}. e.g., for "zh-Hans-US" into "zh_US@Hans"
135 */
136const char * convertToPOSIXLocale(const char* src) {
137    char* scriptRegion = strchr(src, '-');
138    if (scriptRegion != NULL) {
139        int length = strlen(scriptRegion);
140        char* region = strchr(scriptRegion + 1, '-');
141        char* atMark = NULL;
142
143        if (region == NULL) {
144            // CFLocaleGetIdentifier() returns '_' before region
145            region = strchr(scriptRegion + 1, '_');
146        }
147
148        *scriptRegion = '_';
149        if (length > 5) {
150            // Region and script both exist.
151            char tmpScript[4];
152            int regionLength = length - 6;
153            atMark = scriptRegion + 1 + regionLength;
154            memcpy(tmpScript, scriptRegion + 1, 4);
155            memmove(scriptRegion + 1, region + 1, regionLength);
156            memcpy(atMark + 1, tmpScript, 4);
157        } else if (length == 5) {
158            // script only
159            atMark = scriptRegion;
160        }
161
162        if (atMark != NULL) {
163            *atMark = '@';
164
165            // assert script code
166            assert(isalpha(atMark[1]) &&
167                   isalpha(atMark[2]) &&
168                   isalpha(atMark[3]) &&
169                   isalpha(atMark[4]));
170        }
171
172        assert(((length == 3 || length == 8) &&
173            // '_' followed by a 2 character region designator
174                isalpha(scriptRegion[1]) &&
175                isalpha(scriptRegion[2])) ||
176                ((length == 4 || length == 9) &&
177            // '_' followed by a 3-digit UN M.49 area code
178                isdigit(scriptRegion[1]) &&
179                isdigit(scriptRegion[2]) &&
180                isdigit(scriptRegion[3])) ||
181            // '@' followed by a 4 character script code (already validated above)
182                (length == 5));
183    }
184
185    return src;
186}
187
188char *setupMacOSXLocale(int cat) {
189    char * ret = getMacOSXLocale(cat);
190
191    if (ret == NULL) {
192        return getPosixLocale(cat);
193    } else {
194        return ret;
195    }
196}
197
198int isInAquaSession() {
199    // environment variable to bypass the aqua session check
200    char *ev = getenv("AWT_FORCE_HEADFUL");
201    if (ev && (strncasecmp(ev, "true", 4) == 0)) {
202        // if "true" then tell the caller we're in an Aqua session without actually checking
203        return 1;
204    }
205    // Is the WindowServer available?
206    SecuritySessionId session_id;
207    SessionAttributeBits session_info;
208    OSStatus status = SessionGetInfo(callerSecuritySession, &session_id, &session_info);
209    if (status == noErr) {
210        if (session_info & sessionHasGraphicAccess) {
211            return 1;
212        }
213    }
214    return 0;
215}
216
217// 10.9 SDK does not include the NSOperatingSystemVersion struct.
218// For now, create our own
219typedef struct {
220        NSInteger majorVersion;
221        NSInteger minorVersion;
222        NSInteger patchVersion;
223} OSVerStruct;
224
225void setOSNameAndVersion(java_props_t *sprops) {
226    // Hardcode os_name, and fill in os_version
227    sprops->os_name = strdup("Mac OS X");
228
229    char* osVersionCStr = NULL;
230    // Mac OS 10.9 includes the [NSProcessInfo operatingSystemVersion] function,
231    // but it's not in the 10.9 SDK.  So, call it via objc_msgSend_stret.
232    if ([[NSProcessInfo processInfo] respondsToSelector:@selector(operatingSystemVersion)]) {
233        OSVerStruct (*procInfoFn)(id rec, SEL sel) = (OSVerStruct(*)(id, SEL))objc_msgSend_stret;
234        OSVerStruct osVer = procInfoFn([NSProcessInfo processInfo],
235                                       @selector(operatingSystemVersion));
236        NSString *nsVerStr;
237        if (osVer.patchVersion == 0) { // Omit trailing ".0"
238            nsVerStr = [NSString stringWithFormat:@"%ld.%ld",
239                    (long)osVer.majorVersion, (long)osVer.minorVersion];
240        } else {
241            nsVerStr = [NSString stringWithFormat:@"%ld.%ld.%ld",
242                    (long)osVer.majorVersion, (long)osVer.minorVersion, (long)osVer.patchVersion];
243        }
244        // Copy out the char*
245        osVersionCStr = strdup([nsVerStr UTF8String]);
246    }
247    // Fallback if running on pre-10.9 Mac OS
248    if (osVersionCStr == NULL) {
249        NSDictionary *version = [NSDictionary dictionaryWithContentsOfFile :
250                                 @"/System/Library/CoreServices/SystemVersion.plist"];
251        if (version != NULL) {
252            NSString *nsVerStr = [version objectForKey : @"ProductVersion"];
253            if (nsVerStr != NULL) {
254                osVersionCStr = strdup([nsVerStr UTF8String]);
255            }
256        }
257    }
258    if (osVersionCStr == NULL) {
259        osVersionCStr = strdup("Unknown");
260    }
261    sprops->os_version = osVersionCStr;
262}
263
264
265static Boolean getProxyInfoForProtocol(CFDictionaryRef inDict, CFStringRef inEnabledKey,
266                                       CFStringRef inHostKey, CFStringRef inPortKey,
267                                       CFStringRef *outProxyHost, int *ioProxyPort) {
268    /* See if the proxy is enabled. */
269    CFNumberRef cf_enabled = CFDictionaryGetValue(inDict, inEnabledKey);
270    if (cf_enabled == NULL) {
271        return false;
272    }
273
274    int isEnabled = false;
275    if (!CFNumberGetValue(cf_enabled, kCFNumberIntType, &isEnabled)) {
276        return isEnabled;
277    }
278
279    if (!isEnabled) return false;
280    *outProxyHost = CFDictionaryGetValue(inDict, inHostKey);
281
282    // If cf_host is null, that means the checkbox is set,
283    //   but no host was entered. We'll treat that as NOT ENABLED.
284    // If cf_port is null or cf_port isn't a number, that means
285    //   no port number was entered. Treat this as ENABLED with the
286    //   protocol's default port.
287    if (*outProxyHost == NULL) {
288        return false;
289    }
290
291    if (CFStringGetLength(*outProxyHost) == 0) {
292        return false;
293    }
294
295    int newPort = 0;
296    CFNumberRef cf_port = NULL;
297    if ((cf_port = CFDictionaryGetValue(inDict, inPortKey)) != NULL &&
298        CFNumberGetValue(cf_port, kCFNumberIntType, &newPort) &&
299        newPort > 0) {
300        *ioProxyPort = newPort;
301    } else {
302        // bad port or no port - leave *ioProxyPort unchanged
303    }
304
305    return true;
306}
307
308static char *createUTF8CString(const CFStringRef theString) {
309    if (theString == NULL) return NULL;
310
311    const CFIndex stringLength = CFStringGetLength(theString);
312    const CFIndex bufSize = CFStringGetMaximumSizeForEncoding(stringLength, kCFStringEncodingUTF8) + 1;
313    char *returnVal = (char *)malloc(bufSize);
314
315    if (CFStringGetCString(theString, returnVal, bufSize, kCFStringEncodingUTF8)) {
316        return returnVal;
317    }
318
319    free(returnVal);
320    return NULL;
321}
322
323// Return TRUE if str is a syntactically valid IP address.
324// Using inet_pton() instead of inet_aton() for IPv6 support.
325// len is only a hint; cstr must still be nul-terminated
326static int looksLikeIPAddress(char *cstr, size_t len) {
327    if (len == 0  ||  (len == 1 && cstr[0] == '.')) return FALSE;
328
329    char dst[16]; // big enough for INET6
330    return (1 == inet_pton(AF_INET, cstr, dst)  ||
331            1 == inet_pton(AF_INET6, cstr, dst));
332}
333
334
335
336// Convert Mac OS X proxy exception entry to Java syntax.
337// See Radar #3441134 for details.
338// Returns NULL if this exception should be ignored by Java.
339// May generate a string with multiple exceptions separated by '|'.
340static char * createConvertedException(CFStringRef cf_original) {
341    // This is done with char* instead of CFString because inet_pton()
342    // needs a C string.
343    char *c_exception = createUTF8CString(cf_original);
344    if (!c_exception) return NULL;
345
346    int c_len = strlen(c_exception);
347
348    // 1. sanitize exception prefix
349    if (c_len >= 1  &&  0 == strncmp(c_exception, ".", 1)) {
350        memmove(c_exception, c_exception+1, c_len);
351        c_len -= 1;
352    } else if (c_len >= 2  &&  0 == strncmp(c_exception, "*.", 2)) {
353        memmove(c_exception, c_exception+2, c_len-1);
354        c_len -= 2;
355    }
356
357    // 2. pre-reject other exception wildcards
358    if (strchr(c_exception, '*')) {
359        free(c_exception);
360        return NULL;
361    }
362
363    // 3. no IP wildcarding
364    if (looksLikeIPAddress(c_exception, c_len)) {
365        return c_exception;
366    }
367
368    // 4. allow domain suffixes
369    // c_exception is now "str\0" - change to "str|*.str\0"
370    c_exception = reallocf(c_exception, c_len+3+c_len+1);
371    if (!c_exception) return NULL;
372
373    strncpy(c_exception+c_len, "|*.", 3);
374    strncpy(c_exception+c_len+3, c_exception, c_len);
375    c_exception[c_len+3+c_len] = '\0';
376    return c_exception;
377}
378
379/*
380 * Method for fetching the user.home path and storing it in the property list.
381 * For signed .apps running in the Mac App Sandbox, user.home is set to the
382 * app's sandbox container.
383 */
384void setUserHome(java_props_t *sprops) {
385    if (sprops == NULL) { return; }
386    NSAutoreleasePool *pool = [[NSAutoreleasePool alloc] init];
387    sprops->user_home = createUTF8CString((CFStringRef)NSHomeDirectory());
388    [pool drain];
389}
390
391/*
392 * Method for fetching proxy info and storing it in the property list.
393 */
394void setProxyProperties(java_props_t *sProps) {
395    if (sProps == NULL) return;
396
397    char buf[16];    /* Used for %d of an int - 16 is plenty */
398    CFStringRef
399    cf_httpHost = NULL,
400    cf_httpsHost = NULL,
401    cf_ftpHost = NULL,
402    cf_socksHost = NULL,
403    cf_gopherHost = NULL;
404    int
405    httpPort = 80, // Default proxy port values
406    httpsPort = 443,
407    ftpPort = 21,
408    socksPort = 1080,
409    gopherPort = 70;
410
411    CFDictionaryRef dict = SCDynamicStoreCopyProxies(NULL);
412    if (dict == NULL) return;
413
414    /* Read the proxy exceptions list */
415    CFArrayRef cf_list = CFDictionaryGetValue(dict, kSCPropNetProxiesExceptionsList);
416
417    CFMutableStringRef cf_exceptionList = NULL;
418    if (cf_list != NULL) {
419        CFIndex len = CFArrayGetCount(cf_list), idx;
420
421        cf_exceptionList = CFStringCreateMutable(NULL, 0);
422        for (idx = (CFIndex)0; idx < len; idx++) {
423            CFStringRef cf_ehost;
424            if ((cf_ehost = CFArrayGetValueAtIndex(cf_list, idx))) {
425                /* Convert this exception from Mac OS X syntax to Java syntax.
426                 See Radar #3441134 for details. This may generate a string
427                 with multiple Java exceptions separated by '|'. */
428                char *c_exception = createConvertedException(cf_ehost);
429                if (c_exception) {
430                    /* Append the host to the list of exclusions. */
431                    if (CFStringGetLength(cf_exceptionList) > 0) {
432                        CFStringAppendCString(cf_exceptionList, "|", kCFStringEncodingMacRoman);
433                    }
434                    CFStringAppendCString(cf_exceptionList, c_exception, kCFStringEncodingMacRoman);
435                    free(c_exception);
436                }
437            }
438        }
439    }
440
441    if (cf_exceptionList != NULL) {
442        if (CFStringGetLength(cf_exceptionList) > 0) {
443            sProps->exceptionList = createUTF8CString(cf_exceptionList);
444        }
445        CFRelease(cf_exceptionList);
446    }
447
448#define CHECK_PROXY(protocol, PROTOCOL)                                     \
449    sProps->protocol##ProxyEnabled =                                        \
450    getProxyInfoForProtocol(dict, kSCPropNetProxies##PROTOCOL##Enable,      \
451    kSCPropNetProxies##PROTOCOL##Proxy,         \
452    kSCPropNetProxies##PROTOCOL##Port,          \
453    &cf_##protocol##Host, &protocol##Port);     \
454    if (sProps->protocol##ProxyEnabled) {                                   \
455        sProps->protocol##Host = createUTF8CString(cf_##protocol##Host);    \
456        snprintf(buf, sizeof(buf), "%d", protocol##Port);                   \
457        sProps->protocol##Port = malloc(strlen(buf) + 1);                   \
458        strcpy(sProps->protocol##Port, buf);                                \
459    }
460
461    CHECK_PROXY(http, HTTP);
462    CHECK_PROXY(https, HTTPS);
463    CHECK_PROXY(ftp, FTP);
464    CHECK_PROXY(socks, SOCKS);
465    CHECK_PROXY(gopher, Gopher);
466
467#undef CHECK_PROXY
468
469    CFRelease(dict);
470}
471