1f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/* 2f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Licensed to the Apache Software Foundation (ASF) under one or more 3f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * contributor license agreements. See the NOTICE file distributed with 4f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * this work for additional information regarding copyright ownership. 5f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * The ASF licenses this file to You under the Apache License, Version 2.0 6f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * (the "License"); you may not use this file except in compliance with 7f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the License. You may obtain a copy of the License at 8f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 9f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * http://www.apache.org/licenses/LICENSE-2.0 10f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 11f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Unless required by applicable law or agreed to in writing, software 12f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * distributed under the License is distributed on an "AS IS" BASIS, 13f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 14f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * See the License for the specific language governing permissions and 15f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * limitations under the License. 16f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 17f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/* 18f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Copyright (C) 2008 The Android Open Source Project 19f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 20f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Licensed under the Apache License, Version 2.0 (the "License"); 21f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * you may not use this file except in compliance with the License. 22f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * You may obtain a copy of the License at 23f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 24f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * http://www.apache.org/licenses/LICENSE-2.0 25f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 26f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Unless required by applicable law or agreed to in writing, software 27f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * distributed under the License is distributed on an "AS IS" BASIS, 28f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 29f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * See the License for the specific language governing permissions and 30f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * limitations under the License. 31f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 32f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 33f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectpackage java.security; 34f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 35f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport org.apache.harmony.security.fortress.PolicyUtils; 36f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 37f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.util.ArrayList; 38f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 39f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/** 40f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@code AccessControlContext} encapsulates the {@code ProtectionDomain}s on 41f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * which access control decisions are based. 42f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 43f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectpublic final class AccessControlContext { 44f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 45f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // List of ProtectionDomains wrapped by the AccessControlContext 46f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // It has the following characteristics: 47f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // - 'context' can not be null 48f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // - never contains null(s) 49f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // - all elements are unique (no dups) 50f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project ProtectionDomain[] context; 51f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 52f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project DomainCombiner combiner; 53f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 54f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // An AccessControlContext inherited by the current thread from its parent 55f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project private AccessControlContext inherited; 56f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 57f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 58f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Constructs a new instance of {@code AccessControlContext} with the 59f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * specified {@code AccessControlContext} and {@code DomainCombiner}. 60f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <p> 61f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * If a {@code SecurityManager} is installed, code calling this constructor 62f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * need the {@code SecurityPermission} {@code createAccessControlContext} to 63f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * be granted, otherwise a {@code SecurityException} will be thrown. 64f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 65f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param acc 66f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the {@code AccessControlContext} related to the given {@code 67f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * DomainCombiner} 68f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param combiner 69f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the {@code DomainCombiner} related to the given {@code 70f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * AccessControlContext} 71f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws SecurityException 72f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if a {@code SecurityManager} is installed and the caller does 73f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * not have permission to invoke this constructor 74f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws NullPointerException 75f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if {@code acc} is {@code null} 76f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 77f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 78f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public AccessControlContext(AccessControlContext acc, 79f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project DomainCombiner combiner) { 80f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project SecurityManager sm = System.getSecurityManager(); 81f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (sm != null) { 82f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project sm.checkPermission(new SecurityPermission( 83f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project "createAccessControlContext")); 84f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 85f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // no need to clone() here as ACC is immutable 86f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.context = acc.context; 87f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.combiner = combiner; 88f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 89f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 90f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 91f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Constructs a new instance of {@code AccessControlContext} with the 92f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * specified array of {@code ProtectionDomain}s. 93f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 94f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param context 95f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the {@code ProtectionDomain}s that are used to perform access 96f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * checks in the context of this {@code AccessControlContext} 97f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws NullPointerException 98f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if {@code context} is {@code null} 99f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 100f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 101f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public AccessControlContext(ProtectionDomain[] context) { 102f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (context == null) { 103f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project throw new NullPointerException("context can not be null"); 104f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 105f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (context.length != 0) { 106f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // remove dup entries 107f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project ArrayList<ProtectionDomain> a = new ArrayList<ProtectionDomain>(); 108f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project for (int i = 0; i < context.length; i++) { 109f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (context[i] != null && !a.contains(context[i])) { 110f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project a.add(context[i]); 111f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 112f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 113f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (a.size() != 0) { 114f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.context = new ProtectionDomain[a.size()]; 115f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project a.toArray(this.context); 116f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 117f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 118f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (this.context == null) { 119f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // Prevent numerous checks for 'context==null' 120f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.context = new ProtectionDomain[0]; 121f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 122f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 123f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 124f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 125f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Package-level ctor which is used in AccessController.<br> 126f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * ProtectionDomains passed as <code>stack</code> is then passed into 127f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@link #AccessControlContext(ProtectionDomain[])}, therefore:<br> 128f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <il> 129f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>it must not be null 130f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>duplicates will be removed 131f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>null-s will be removed 132f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * </li> 133f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 134f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param stack - array of ProtectionDomains 135f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param inherited - inherited context, which may be null 136f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 137f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project AccessControlContext(ProtectionDomain[] stack, 138f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project AccessControlContext inherited) { 139f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this(stack); // removes dups, removes nulls, checks for stack==null 140f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.inherited = inherited; 141f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 142f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 143f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 144f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Package-level ctor which is used in AccessController.<br> 145f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * ProtectionDomains passed as <code>stack</code> is then passed into 146f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@link #AccessControlContext(ProtectionDomain[])}, therefore:<br> 147f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <il> 148f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>it must not be null 149f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>duplicates will be removed 150f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <li>null-s will be removed 151f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * </li> 152f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 153f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param stack - array of ProtectionDomains 154f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param combiner - combiner 155f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 156f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project AccessControlContext(ProtectionDomain[] stack, 157f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project DomainCombiner combiner) { 158f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this(stack); // removes dups, removes nulls, checks for stack==null 159f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project this.combiner = combiner; 160f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 161f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 162f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 163f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Checks the specified permission against the vm's current security policy. 164f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * The check is based on this {@code AccessControlContext} as opposed to the 165f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@link AccessController#checkPermission(Permission)} method which 166f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * performs access checks based on the context of the current thread. This 167f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * method returns silently if the permission is granted, otherwise an 168f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@code AccessControlException} is thrown. 169f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <p> 170f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * A permission is considered granted if every {@link ProtectionDomain} in 171f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * this context has been granted the specified permission. 172f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <p> 173f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * If privileged operations are on the call stack, only the {@code 174f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * ProtectionDomain}s from the last privileged operation are taken into 175f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * account. 176f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <p> 177f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * If inherited methods are on the call stack, the protection domains of the 178f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * declaring classes are checked, not the protection domains of the classes 179f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * on which the method is invoked. 180f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 181f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param perm 182f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the permission to check against the policy 183f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws AccessControlException 184f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if the specified permission is not granted 185f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws NullPointerException 186f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if the specified permission is {@code null} 187f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @see AccessController#checkPermission(Permission) 188f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 189f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 190f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public void checkPermission(Permission perm) throws AccessControlException { 191f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (perm == null) { 192f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project throw new NullPointerException("Permission cannot be null"); 193f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 194f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project for (int i = 0; i < context.length; i++) { 195f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (!context[i].implies(perm)) { 196f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project throw new AccessControlException("Permission check failed " 197f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project + perm, perm); 198f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 199f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 200f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (inherited != null) { 201f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project inherited.checkPermission(perm); 202f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 203f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 204f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 205f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 206f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 207f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Compares the specified object with this {@code AccessControlContext} for 208f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * equality. Returns {@code true} if the specified object is also an 209f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * instance of {@code AccessControlContext}, and the two contexts 210f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * encapsulate the same {@code ProtectionDomain}s. The order of the {@code 211f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * ProtectionDomain}s is ignored by this method. 212f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 213f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @param obj 214f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * object to be compared for equality with this {@code 215f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * AccessControlContext} 216f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @return {@code true} if the specified object is equal to this {@code 217f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * AccessControlContext}, otherwise {@code false} 218f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 219f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 220f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project @Override 221f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public boolean equals(Object obj) { 222f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (this == obj) { 223f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return true; 224f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 225f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (obj instanceof AccessControlContext) { 226f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project AccessControlContext that = (AccessControlContext) obj; 227f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (!(PolicyUtils.matchSubset(context, that.context) && PolicyUtils 228f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project .matchSubset(that.context, context))) { 229f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return false; 230f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 231f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // BEGIN android-changed 232f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if(combiner != null) { 233f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return combiner.equals(that.combiner); 234f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 235f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return that.combiner == null; 236f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project // END android-changed 237f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 238f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return false; 239f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 240f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 241f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 242f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Returns the {@code DomainCombiner} associated with this {@code 243f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * AccessControlContext}. 244f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * <p> 245f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * If a {@code SecurityManager} is installed, code calling this method needs 246f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * the {@code SecurityPermission} {@code getDomainCombiner} to be granted, 247f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * otherwise a {@code SecurityException} will be thrown. 248f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 249f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @return the {@code DomainCombiner} associated with this {@code 250f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * AccessControlContext} 251f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @throws SecurityException 252f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * if a {@code SecurityManager} is installed and the caller does 253f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * not have permission to invoke this method 254f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 255f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 256f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public DomainCombiner getDomainCombiner() { 257f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project SecurityManager sm = System.getSecurityManager(); 258f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project if (sm != null) { 259f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project sm.checkPermission(new SecurityPermission("getDomainCombiner")); 260f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 261f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return combiner; 262f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 263f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 264f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 265f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project /** 266f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Returns the hash code value for this {@code AccessControlContext}. 267f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * Returns the same hash code for {@code AccessControlContext}s that are 268f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * equal to each other as required by the general contract of 269f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * {@link Object#hashCode}. 270f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * 271f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @return the hash code value for this {@code AccessControlContext} 272f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @see Object#equals(Object) 273f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @see AccessControlContext#equals(Object) 274f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @since Android 1.0 275f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */ 276f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project public int hashCode() { 277f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project int hash = 0; 278f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project for (int i = 0; i < context.length; i++) { 279f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project hash ^= context[i].hashCode(); 280f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 281f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project return hash; 282f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project } 283f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project 284f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project} 285