ResourceTypes.cpp revision 6cca1599f78549716ef120245e54fa1961976dda 
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#define LOG_TAG "ResourceType"
18//#define LOG_NDEBUG 0
19
20#include <utils/Atomic.h>
21#include <utils/ByteOrder.h>
22#include <utils/Debug.h>
23#include <utils/ResourceTypes.h>
24#include <utils/String16.h>
25#include <utils/String8.h>
26#include <utils/TextOutput.h>
27#include <utils/Log.h>
28
29#include <stdlib.h>
30#include <string.h>
31#include <memory.h>
32#include <ctype.h>
33#include <stdint.h>
34
35#ifndef INT32_MAX
36#define INT32_MAX ((int32_t)(2147483647))
37#endif
38
39#define POOL_NOISY(x) //x
40#define XML_NOISY(x) //x
41#define TABLE_NOISY(x) //x
42#define TABLE_GETENTRY(x) //x
43#define TABLE_SUPER_NOISY(x) //x
44#define LOAD_TABLE_NOISY(x) //x
45
46namespace android {
47
48#ifdef HAVE_WINSOCK
49#undef  nhtol
50#undef  htonl
51
52#ifdef HAVE_LITTLE_ENDIAN
53#define ntohl(x)    ( ((x) << 24) | (((x) >> 24) & 255) | (((x) << 8) & 0xff0000) | (((x) >> 8) & 0xff00) )
54#define htonl(x)    ntohl(x)
55#define ntohs(x)    ( (((x) << 8) & 0xff00) | (((x) >> 8) & 255) )
56#define htons(x)    ntohs(x)
57#else
58#define ntohl(x)    (x)
59#define htonl(x)    (x)
60#define ntohs(x)    (x)
61#define htons(x)    (x)
62#endif
63#endif
64
65static void printToLogFunc(void* cookie, const char* txt)
66{
67    LOGV("%s", txt);
68}
69
70// Standard C isspace() is only required to look at the low byte of its input, so
71// produces incorrect results for UTF-16 characters.  For safety's sake, assume that
72// any high-byte UTF-16 code point is not whitespace.
73inline int isspace16(char16_t c) {
74    return (c < 0x0080 && isspace(c));
75}
76
77// range checked; guaranteed to NUL-terminate within the stated number of available slots
78// NOTE: if this truncates the dst string due to running out of space, no attempt is
79// made to avoid splitting surrogate pairs.
80static void strcpy16_dtoh(uint16_t* dst, const uint16_t* src, size_t avail)
81{
82    uint16_t* last = dst + avail - 1;
83    while (*src && (dst < last)) {
84        char16_t s = dtohs(*src);
85        *dst++ = s;
86        src++;
87    }
88    *dst = 0;
89}
90
91static status_t validate_chunk(const ResChunk_header* chunk,
92                               size_t minSize,
93                               const uint8_t* dataEnd,
94                               const char* name)
95{
96    const uint16_t headerSize = dtohs(chunk->headerSize);
97    const uint32_t size = dtohl(chunk->size);
98
99    if (headerSize >= minSize) {
100        if (headerSize <= size) {
101            if (((headerSize|size)&0x3) == 0) {
102                if ((ssize_t)size <= (dataEnd-((const uint8_t*)chunk))) {
103                    return NO_ERROR;
104                }
105                LOGW("%s data size %p extends beyond resource end %p.",
106                     name, (void*)size,
107                     (void*)(dataEnd-((const uint8_t*)chunk)));
108                return BAD_TYPE;
109            }
110            LOGW("%s size 0x%x or headerSize 0x%x is not on an integer boundary.",
111                 name, (int)size, (int)headerSize);
112            return BAD_TYPE;
113        }
114        LOGW("%s size %p is smaller than header size %p.",
115             name, (void*)size, (void*)(int)headerSize);
116        return BAD_TYPE;
117    }
118    LOGW("%s header size %p is too small.",
119         name, (void*)(int)headerSize);
120    return BAD_TYPE;
121}
122
123inline void Res_value::copyFrom_dtoh(const Res_value& src)
124{
125    size = dtohs(src.size);
126    res0 = src.res0;
127    dataType = src.dataType;
128    data = dtohl(src.data);
129}
130
131void Res_png_9patch::deviceToFile()
132{
133    for (int i = 0; i < numXDivs; i++) {
134        xDivs[i] = htonl(xDivs[i]);
135    }
136    for (int i = 0; i < numYDivs; i++) {
137        yDivs[i] = htonl(yDivs[i]);
138    }
139    paddingLeft = htonl(paddingLeft);
140    paddingRight = htonl(paddingRight);
141    paddingTop = htonl(paddingTop);
142    paddingBottom = htonl(paddingBottom);
143    for (int i=0; i<numColors; i++) {
144        colors[i] = htonl(colors[i]);
145    }
146}
147
148void Res_png_9patch::fileToDevice()
149{
150    for (int i = 0; i < numXDivs; i++) {
151        xDivs[i] = ntohl(xDivs[i]);
152    }
153    for (int i = 0; i < numYDivs; i++) {
154        yDivs[i] = ntohl(yDivs[i]);
155    }
156    paddingLeft = ntohl(paddingLeft);
157    paddingRight = ntohl(paddingRight);
158    paddingTop = ntohl(paddingTop);
159    paddingBottom = ntohl(paddingBottom);
160    for (int i=0; i<numColors; i++) {
161        colors[i] = ntohl(colors[i]);
162    }
163}
164
165size_t Res_png_9patch::serializedSize()
166{
167    // The size of this struct is 32 bytes on the 32-bit target system
168    // 4 * int8_t
169    // 4 * int32_t
170    // 3 * pointer
171    return 32
172            + numXDivs * sizeof(int32_t)
173            + numYDivs * sizeof(int32_t)
174            + numColors * sizeof(uint32_t);
175}
176
177void* Res_png_9patch::serialize()
178{
179    // Use calloc since we're going to leave a few holes in the data
180    // and want this to run cleanly under valgrind
181    void* newData = calloc(1, serializedSize());
182    serialize(newData);
183    return newData;
184}
185
186void Res_png_9patch::serialize(void * outData)
187{
188    char* data = (char*) outData;
189    memmove(data, &wasDeserialized, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
190    memmove(data + 12, &paddingLeft, 16);   // copy paddingXXXX
191    data += 32;
192
193    memmove(data, this->xDivs, numXDivs * sizeof(int32_t));
194    data +=  numXDivs * sizeof(int32_t);
195    memmove(data, this->yDivs, numYDivs * sizeof(int32_t));
196    data +=  numYDivs * sizeof(int32_t);
197    memmove(data, this->colors, numColors * sizeof(uint32_t));
198}
199
200static void deserializeInternal(const void* inData, Res_png_9patch* outData) {
201    char* patch = (char*) inData;
202    if (inData != outData) {
203        memmove(&outData->wasDeserialized, patch, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
204        memmove(&outData->paddingLeft, patch + 12, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
205    }
206    outData->wasDeserialized = true;
207    char* data = (char*)outData;
208    data +=  sizeof(Res_png_9patch);
209    outData->xDivs = (int32_t*) data;
210    data +=  outData->numXDivs * sizeof(int32_t);
211    outData->yDivs = (int32_t*) data;
212    data +=  outData->numYDivs * sizeof(int32_t);
213    outData->colors = (uint32_t*) data;
214}
215
216Res_png_9patch* Res_png_9patch::deserialize(const void* inData)
217{
218    if (sizeof(void*) != sizeof(int32_t)) {
219        LOGE("Cannot deserialize on non 32-bit system\n");
220        return NULL;
221    }
222    deserializeInternal(inData, (Res_png_9patch*) inData);
223    return (Res_png_9patch*) inData;
224}
225
226// --------------------------------------------------------------------
227// --------------------------------------------------------------------
228// --------------------------------------------------------------------
229
230ResStringPool::ResStringPool()
231    : mError(NO_INIT), mOwnedData(NULL)
232{
233}
234
235ResStringPool::ResStringPool(const void* data, size_t size, bool copyData)
236    : mError(NO_INIT), mOwnedData(NULL)
237{
238    setTo(data, size, copyData);
239}
240
241ResStringPool::~ResStringPool()
242{
243    uninit();
244}
245
246status_t ResStringPool::setTo(const void* data, size_t size, bool copyData)
247{
248    if (!data || !size) {
249        return (mError=BAD_TYPE);
250    }
251
252    uninit();
253
254    const bool notDeviceEndian = htods(0xf0) != 0xf0;
255
256    if (copyData || notDeviceEndian) {
257        mOwnedData = malloc(size);
258        if (mOwnedData == NULL) {
259            return (mError=NO_MEMORY);
260        }
261        memcpy(mOwnedData, data, size);
262        data = mOwnedData;
263    }
264
265    mHeader = (const ResStringPool_header*)data;
266
267    if (notDeviceEndian) {
268        ResStringPool_header* h = const_cast<ResStringPool_header*>(mHeader);
269        h->header.headerSize = dtohs(mHeader->header.headerSize);
270        h->header.type = dtohs(mHeader->header.type);
271        h->header.size = dtohl(mHeader->header.size);
272        h->stringCount = dtohl(mHeader->stringCount);
273        h->styleCount = dtohl(mHeader->styleCount);
274        h->flags = dtohl(mHeader->flags);
275        h->stringsStart = dtohl(mHeader->stringsStart);
276        h->stylesStart = dtohl(mHeader->stylesStart);
277    }
278
279    if (mHeader->header.headerSize > mHeader->header.size
280            || mHeader->header.size > size) {
281        LOGW("Bad string block: header size %d or total size %d is larger than data size %d\n",
282                (int)mHeader->header.headerSize, (int)mHeader->header.size, (int)size);
283        return (mError=BAD_TYPE);
284    }
285    mSize = mHeader->header.size;
286    mEntries = (const uint32_t*)
287        (((const uint8_t*)data)+mHeader->header.headerSize);
288
289    if (mHeader->stringCount > 0) {
290        if ((mHeader->stringCount*sizeof(uint32_t) < mHeader->stringCount)  // uint32 overflow?
291            || (mHeader->header.headerSize+(mHeader->stringCount*sizeof(uint32_t)))
292                > size) {
293            LOGW("Bad string block: entry of %d items extends past data size %d\n",
294                    (int)(mHeader->header.headerSize+(mHeader->stringCount*sizeof(uint32_t))),
295                    (int)size);
296            return (mError=BAD_TYPE);
297        }
298        mStrings = (const char16_t*)
299            (((const uint8_t*)data)+mHeader->stringsStart);
300        if (mHeader->stringsStart >= (mHeader->header.size-sizeof(uint16_t))) {
301            LOGW("Bad string block: string pool starts at %d, after total size %d\n",
302                    (int)mHeader->stringsStart, (int)mHeader->header.size);
303            return (mError=BAD_TYPE);
304        }
305        if (mHeader->styleCount == 0) {
306            mStringPoolSize =
307                (mHeader->header.size-mHeader->stringsStart)/sizeof(uint16_t);
308        } else {
309            // check invariant: styles follow the strings
310            if (mHeader->stylesStart <= mHeader->stringsStart) {
311                LOGW("Bad style block: style block starts at %d, before strings at %d\n",
312                    (int)mHeader->stylesStart, (int)mHeader->stringsStart);
313                return (mError=BAD_TYPE);
314            }
315            mStringPoolSize =
316                (mHeader->stylesStart-mHeader->stringsStart)/sizeof(uint16_t);
317        }
318
319        // check invariant: stringCount > 0 requires a string pool to exist
320        if (mStringPoolSize == 0) {
321            LOGW("Bad string block: stringCount is %d but pool size is 0\n", (int)mHeader->stringCount);
322            return (mError=BAD_TYPE);
323        }
324
325        if (notDeviceEndian) {
326            size_t i;
327            uint32_t* e = const_cast<uint32_t*>(mEntries);
328            for (i=0; i<mHeader->stringCount; i++) {
329                e[i] = dtohl(mEntries[i]);
330            }
331            char16_t* s = const_cast<char16_t*>(mStrings);
332            for (i=0; i<mStringPoolSize; i++) {
333                s[i] = dtohs(mStrings[i]);
334            }
335        }
336
337        if (mStrings[mStringPoolSize-1] != 0) {
338            LOGW("Bad string block: last string is not 0-terminated\n");
339            return (mError=BAD_TYPE);
340        }
341    } else {
342        mStrings = NULL;
343        mStringPoolSize = 0;
344    }
345
346    if (mHeader->styleCount > 0) {
347        mEntryStyles = mEntries + mHeader->stringCount;
348        // invariant: integer overflow in calculating mEntryStyles
349        if (mEntryStyles < mEntries) {
350            LOGW("Bad string block: integer overflow finding styles\n");
351            return (mError=BAD_TYPE);
352        }
353
354        if (((const uint8_t*)mEntryStyles-(const uint8_t*)mHeader) > (int)size) {
355            LOGW("Bad string block: entry of %d styles extends past data size %d\n",
356                    (int)((const uint8_t*)mEntryStyles-(const uint8_t*)mHeader),
357                    (int)size);
358            return (mError=BAD_TYPE);
359        }
360        mStyles = (const uint32_t*)
361            (((const uint8_t*)data)+mHeader->stylesStart);
362        if (mHeader->stylesStart >= mHeader->header.size) {
363            LOGW("Bad string block: style pool starts %d, after total size %d\n",
364                    (int)mHeader->stylesStart, (int)mHeader->header.size);
365            return (mError=BAD_TYPE);
366        }
367        mStylePoolSize =
368            (mHeader->header.size-mHeader->stylesStart)/sizeof(uint32_t);
369
370        if (notDeviceEndian) {
371            size_t i;
372            uint32_t* e = const_cast<uint32_t*>(mEntryStyles);
373            for (i=0; i<mHeader->styleCount; i++) {
374                e[i] = dtohl(mEntryStyles[i]);
375            }
376            uint32_t* s = const_cast<uint32_t*>(mStyles);
377            for (i=0; i<mStylePoolSize; i++) {
378                s[i] = dtohl(mStyles[i]);
379            }
380        }
381
382        const ResStringPool_span endSpan = {
383            { htodl(ResStringPool_span::END) },
384            htodl(ResStringPool_span::END), htodl(ResStringPool_span::END)
385        };
386        if (memcmp(&mStyles[mStylePoolSize-(sizeof(endSpan)/sizeof(uint32_t))],
387                   &endSpan, sizeof(endSpan)) != 0) {
388            LOGW("Bad string block: last style is not 0xFFFFFFFF-terminated\n");
389            return (mError=BAD_TYPE);
390        }
391    } else {
392        mEntryStyles = NULL;
393        mStyles = NULL;
394        mStylePoolSize = 0;
395    }
396
397    return (mError=NO_ERROR);
398}
399
400status_t ResStringPool::getError() const
401{
402    return mError;
403}
404
405void ResStringPool::uninit()
406{
407    mError = NO_INIT;
408    if (mOwnedData) {
409        free(mOwnedData);
410        mOwnedData = NULL;
411    }
412}
413
414const uint16_t* ResStringPool::stringAt(size_t idx, size_t* outLen) const
415{
416    if (mError == NO_ERROR && idx < mHeader->stringCount) {
417        const uint32_t off = (mEntries[idx]/sizeof(uint16_t));
418        if (off < (mStringPoolSize-1)) {
419            const char16_t* str = mStrings+off;
420            *outLen = *str;
421            if ((*str)&0x8000) {
422                str++;
423                *outLen = (((*outLen)&0x7fff)<<16) + *str;
424            }
425            if ((uint32_t)(str+1+*outLen-mStrings) < mStringPoolSize) {
426                return str+1;
427            } else {
428                LOGW("Bad string block: string #%d extends to %d, past end at %d\n",
429                        (int)idx, (int)(str+1+*outLen-mStrings), (int)mStringPoolSize);
430            }
431        } else {
432            LOGW("Bad string block: string #%d entry is at %d, past end at %d\n",
433                    (int)idx, (int)(off*sizeof(uint16_t)),
434                    (int)(mStringPoolSize*sizeof(uint16_t)));
435        }
436    }
437    return NULL;
438}
439
440const ResStringPool_span* ResStringPool::styleAt(const ResStringPool_ref& ref) const
441{
442    return styleAt(ref.index);
443}
444
445const ResStringPool_span* ResStringPool::styleAt(size_t idx) const
446{
447    if (mError == NO_ERROR && idx < mHeader->styleCount) {
448        const uint32_t off = (mEntryStyles[idx]/sizeof(uint32_t));
449        if (off < mStylePoolSize) {
450            return (const ResStringPool_span*)(mStyles+off);
451        } else {
452            LOGW("Bad string block: style #%d entry is at %d, past end at %d\n",
453                    (int)idx, (int)(off*sizeof(uint32_t)),
454                    (int)(mStylePoolSize*sizeof(uint32_t)));
455        }
456    }
457    return NULL;
458}
459
460ssize_t ResStringPool::indexOfString(const char16_t* str, size_t strLen) const
461{
462    if (mError != NO_ERROR) {
463        return mError;
464    }
465
466    size_t len;
467
468    if (mHeader->flags&ResStringPool_header::SORTED_FLAG) {
469        // Do a binary search for the string...
470        ssize_t l = 0;
471        ssize_t h = mHeader->stringCount-1;
472
473        ssize_t mid;
474        while (l <= h) {
475            mid = l + (h - l)/2;
476            const char16_t* s = stringAt(mid, &len);
477            int c = s ? strzcmp16(s, len, str, strLen) : -1;
478            POOL_NOISY(printf("Looking for %s, at %s, cmp=%d, l/mid/h=%d/%d/%d\n",
479                         String8(str).string(),
480                         String8(s).string(),
481                         c, (int)l, (int)mid, (int)h));
482            if (c == 0) {
483                return mid;
484            } else if (c < 0) {
485                l = mid + 1;
486            } else {
487                h = mid - 1;
488            }
489        }
490    } else {
491        // It is unusual to get the ID from an unsorted string block...
492        // most often this happens because we want to get IDs for style
493        // span tags; since those always appear at the end of the string
494        // block, start searching at the back.
495        for (int i=mHeader->stringCount-1; i>=0; i--) {
496            const char16_t* s = stringAt(i, &len);
497            POOL_NOISY(printf("Looking for %s, at %s, i=%d\n",
498                         String8(str, strLen).string(),
499                         String8(s).string(),
500                         i));
501            if (s && strzcmp16(s, len, str, strLen) == 0) {
502                return i;
503            }
504        }
505    }
506
507    return NAME_NOT_FOUND;
508}
509
510size_t ResStringPool::size() const
511{
512    return (mError == NO_ERROR) ? mHeader->stringCount : 0;
513}
514
515// --------------------------------------------------------------------
516// --------------------------------------------------------------------
517// --------------------------------------------------------------------
518
519ResXMLParser::ResXMLParser(const ResXMLTree& tree)
520    : mTree(tree), mEventCode(BAD_DOCUMENT)
521{
522}
523
524void ResXMLParser::restart()
525{
526    mCurNode = NULL;
527    mEventCode = mTree.mError == NO_ERROR ? START_DOCUMENT : BAD_DOCUMENT;
528}
529
530ResXMLParser::event_code_t ResXMLParser::getEventType() const
531{
532    return mEventCode;
533}
534
535ResXMLParser::event_code_t ResXMLParser::next()
536{
537    if (mEventCode == START_DOCUMENT) {
538        mCurNode = mTree.mRootNode;
539        mCurExt = mTree.mRootExt;
540        return (mEventCode=mTree.mRootCode);
541    } else if (mEventCode >= FIRST_CHUNK_CODE) {
542        return nextNode();
543    }
544    return mEventCode;
545}
546
547int32_t ResXMLParser::getCommentID() const
548{
549    return mCurNode != NULL ? dtohl(mCurNode->comment.index) : -1;
550}
551
552const uint16_t* ResXMLParser::getComment(size_t* outLen) const
553{
554    int32_t id = getCommentID();
555    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
556}
557
558uint32_t ResXMLParser::getLineNumber() const
559{
560    return mCurNode != NULL ? dtohl(mCurNode->lineNumber) : -1;
561}
562
563int32_t ResXMLParser::getTextID() const
564{
565    if (mEventCode == TEXT) {
566        return dtohl(((const ResXMLTree_cdataExt*)mCurExt)->data.index);
567    }
568    return -1;
569}
570
571const uint16_t* ResXMLParser::getText(size_t* outLen) const
572{
573    int32_t id = getTextID();
574    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
575}
576
577ssize_t ResXMLParser::getTextValue(Res_value* outValue) const
578{
579    if (mEventCode == TEXT) {
580        outValue->copyFrom_dtoh(((const ResXMLTree_cdataExt*)mCurExt)->typedData);
581        return sizeof(Res_value);
582    }
583    return BAD_TYPE;
584}
585
586int32_t ResXMLParser::getNamespacePrefixID() const
587{
588    if (mEventCode == START_NAMESPACE || mEventCode == END_NAMESPACE) {
589        return dtohl(((const ResXMLTree_namespaceExt*)mCurExt)->prefix.index);
590    }
591    return -1;
592}
593
594const uint16_t* ResXMLParser::getNamespacePrefix(size_t* outLen) const
595{
596    int32_t id = getNamespacePrefixID();
597    //printf("prefix=%d  event=%p\n", id, mEventCode);
598    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
599}
600
601int32_t ResXMLParser::getNamespaceUriID() const
602{
603    if (mEventCode == START_NAMESPACE || mEventCode == END_NAMESPACE) {
604        return dtohl(((const ResXMLTree_namespaceExt*)mCurExt)->uri.index);
605    }
606    return -1;
607}
608
609const uint16_t* ResXMLParser::getNamespaceUri(size_t* outLen) const
610{
611    int32_t id = getNamespaceUriID();
612    //printf("uri=%d  event=%p\n", id, mEventCode);
613    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
614}
615
616int32_t ResXMLParser::getElementNamespaceID() const
617{
618    if (mEventCode == START_TAG) {
619        return dtohl(((const ResXMLTree_attrExt*)mCurExt)->ns.index);
620    }
621    if (mEventCode == END_TAG) {
622        return dtohl(((const ResXMLTree_endElementExt*)mCurExt)->ns.index);
623    }
624    return -1;
625}
626
627const uint16_t* ResXMLParser::getElementNamespace(size_t* outLen) const
628{
629    int32_t id = getElementNamespaceID();
630    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
631}
632
633int32_t ResXMLParser::getElementNameID() const
634{
635    if (mEventCode == START_TAG) {
636        return dtohl(((const ResXMLTree_attrExt*)mCurExt)->name.index);
637    }
638    if (mEventCode == END_TAG) {
639        return dtohl(((const ResXMLTree_endElementExt*)mCurExt)->name.index);
640    }
641    return -1;
642}
643
644const uint16_t* ResXMLParser::getElementName(size_t* outLen) const
645{
646    int32_t id = getElementNameID();
647    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
648}
649
650size_t ResXMLParser::getAttributeCount() const
651{
652    if (mEventCode == START_TAG) {
653        return dtohs(((const ResXMLTree_attrExt*)mCurExt)->attributeCount);
654    }
655    return 0;
656}
657
658int32_t ResXMLParser::getAttributeNamespaceID(size_t idx) const
659{
660    if (mEventCode == START_TAG) {
661        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
662        if (idx < dtohs(tag->attributeCount)) {
663            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
664                (((const uint8_t*)tag)
665                 + dtohs(tag->attributeStart)
666                 + (dtohs(tag->attributeSize)*idx));
667            return dtohl(attr->ns.index);
668        }
669    }
670    return -2;
671}
672
673const uint16_t* ResXMLParser::getAttributeNamespace(size_t idx, size_t* outLen) const
674{
675    int32_t id = getAttributeNamespaceID(idx);
676    //printf("attribute namespace=%d  idx=%d  event=%p\n", id, idx, mEventCode);
677    //XML_NOISY(printf("getAttributeNamespace 0x%x=0x%x\n", idx, id));
678    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
679}
680
681int32_t ResXMLParser::getAttributeNameID(size_t idx) const
682{
683    if (mEventCode == START_TAG) {
684        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
685        if (idx < dtohs(tag->attributeCount)) {
686            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
687                (((const uint8_t*)tag)
688                 + dtohs(tag->attributeStart)
689                 + (dtohs(tag->attributeSize)*idx));
690            return dtohl(attr->name.index);
691        }
692    }
693    return -1;
694}
695
696const uint16_t* ResXMLParser::getAttributeName(size_t idx, size_t* outLen) const
697{
698    int32_t id = getAttributeNameID(idx);
699    //printf("attribute name=%d  idx=%d  event=%p\n", id, idx, mEventCode);
700    //XML_NOISY(printf("getAttributeName 0x%x=0x%x\n", idx, id));
701    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
702}
703
704uint32_t ResXMLParser::getAttributeNameResID(size_t idx) const
705{
706    int32_t id = getAttributeNameID(idx);
707    if (id >= 0 && (size_t)id < mTree.mNumResIds) {
708        return dtohl(mTree.mResIds[id]);
709    }
710    return 0;
711}
712
713int32_t ResXMLParser::getAttributeValueStringID(size_t idx) const
714{
715    if (mEventCode == START_TAG) {
716        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
717        if (idx < dtohs(tag->attributeCount)) {
718            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
719                (((const uint8_t*)tag)
720                 + dtohs(tag->attributeStart)
721                 + (dtohs(tag->attributeSize)*idx));
722            return dtohl(attr->rawValue.index);
723        }
724    }
725    return -1;
726}
727
728const uint16_t* ResXMLParser::getAttributeStringValue(size_t idx, size_t* outLen) const
729{
730    int32_t id = getAttributeValueStringID(idx);
731    //XML_NOISY(printf("getAttributeValue 0x%x=0x%x\n", idx, id));
732    return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
733}
734
735int32_t ResXMLParser::getAttributeDataType(size_t idx) const
736{
737    if (mEventCode == START_TAG) {
738        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
739        if (idx < dtohs(tag->attributeCount)) {
740            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
741                (((const uint8_t*)tag)
742                 + dtohs(tag->attributeStart)
743                 + (dtohs(tag->attributeSize)*idx));
744            return attr->typedValue.dataType;
745        }
746    }
747    return Res_value::TYPE_NULL;
748}
749
750int32_t ResXMLParser::getAttributeData(size_t idx) const
751{
752    if (mEventCode == START_TAG) {
753        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
754        if (idx < dtohs(tag->attributeCount)) {
755            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
756                (((const uint8_t*)tag)
757                 + dtohs(tag->attributeStart)
758                 + (dtohs(tag->attributeSize)*idx));
759            return dtohl(attr->typedValue.data);
760        }
761    }
762    return 0;
763}
764
765ssize_t ResXMLParser::getAttributeValue(size_t idx, Res_value* outValue) const
766{
767    if (mEventCode == START_TAG) {
768        const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
769        if (idx < dtohs(tag->attributeCount)) {
770            const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
771                (((const uint8_t*)tag)
772                 + dtohs(tag->attributeStart)
773                 + (dtohs(tag->attributeSize)*idx));
774            outValue->copyFrom_dtoh(attr->typedValue);
775            return sizeof(Res_value);
776        }
777    }
778    return BAD_TYPE;
779}
780
781ssize_t ResXMLParser::indexOfAttribute(const char* ns, const char* attr) const
782{
783    String16 nsStr(ns != NULL ? ns : "");
784    String16 attrStr(attr);
785    return indexOfAttribute(ns ? nsStr.string() : NULL, ns ? nsStr.size() : 0,
786                            attrStr.string(), attrStr.size());
787}
788
789ssize_t ResXMLParser::indexOfAttribute(const char16_t* ns, size_t nsLen,
790                                       const char16_t* attr, size_t attrLen) const
791{
792    if (mEventCode == START_TAG) {
793        const size_t N = getAttributeCount();
794        for (size_t i=0; i<N; i++) {
795            size_t curNsLen, curAttrLen;
796            const char16_t* curNs = getAttributeNamespace(i, &curNsLen);
797            const char16_t* curAttr = getAttributeName(i, &curAttrLen);
798            //printf("%d: ns=%p attr=%p curNs=%p curAttr=%p\n",
799            //       i, ns, attr, curNs, curAttr);
800            //printf(" --> attr=%s, curAttr=%s\n",
801            //       String8(attr).string(), String8(curAttr).string());
802            if (attr && curAttr && (strzcmp16(attr, attrLen, curAttr, curAttrLen) == 0)) {
803                if (ns == NULL) {
804                    if (curNs == NULL) return i;
805                } else if (curNs != NULL) {
806                    //printf(" --> ns=%s, curNs=%s\n",
807                    //       String8(ns).string(), String8(curNs).string());
808                    if (strzcmp16(ns, nsLen, curNs, curNsLen) == 0) return i;
809                }
810            }
811        }
812    }
813
814    return NAME_NOT_FOUND;
815}
816
817ssize_t ResXMLParser::indexOfID() const
818{
819    if (mEventCode == START_TAG) {
820        const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->idIndex);
821        if (idx > 0) return (idx-1);
822    }
823    return NAME_NOT_FOUND;
824}
825
826ssize_t ResXMLParser::indexOfClass() const
827{
828    if (mEventCode == START_TAG) {
829        const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->classIndex);
830        if (idx > 0) return (idx-1);
831    }
832    return NAME_NOT_FOUND;
833}
834
835ssize_t ResXMLParser::indexOfStyle() const
836{
837    if (mEventCode == START_TAG) {
838        const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->styleIndex);
839        if (idx > 0) return (idx-1);
840    }
841    return NAME_NOT_FOUND;
842}
843
844ResXMLParser::event_code_t ResXMLParser::nextNode()
845{
846    if (mEventCode < 0) {
847        return mEventCode;
848    }
849
850    do {
851        const ResXMLTree_node* next = (const ResXMLTree_node*)
852            (((const uint8_t*)mCurNode) + dtohl(mCurNode->header.size));
853        //LOGW("Next node: prev=%p, next=%p\n", mCurNode, next);
854
855        if (((const uint8_t*)next) >= mTree.mDataEnd) {
856            mCurNode = NULL;
857            return (mEventCode=END_DOCUMENT);
858        }
859
860        if (mTree.validateNode(next) != NO_ERROR) {
861            mCurNode = NULL;
862            return (mEventCode=BAD_DOCUMENT);
863        }
864
865        mCurNode = next;
866        const uint16_t headerSize = dtohs(next->header.headerSize);
867        const uint32_t totalSize = dtohl(next->header.size);
868        mCurExt = ((const uint8_t*)next) + headerSize;
869        size_t minExtSize = 0;
870        event_code_t eventCode = (event_code_t)dtohs(next->header.type);
871        switch ((mEventCode=eventCode)) {
872            case RES_XML_START_NAMESPACE_TYPE:
873            case RES_XML_END_NAMESPACE_TYPE:
874                minExtSize = sizeof(ResXMLTree_namespaceExt);
875                break;
876            case RES_XML_START_ELEMENT_TYPE:
877                minExtSize = sizeof(ResXMLTree_attrExt);
878                break;
879            case RES_XML_END_ELEMENT_TYPE:
880                minExtSize = sizeof(ResXMLTree_endElementExt);
881                break;
882            case RES_XML_CDATA_TYPE:
883                minExtSize = sizeof(ResXMLTree_cdataExt);
884                break;
885            default:
886                LOGW("Unknown XML block: header type %d in node at %d\n",
887                     (int)dtohs(next->header.type),
888                     (int)(((const uint8_t*)next)-((const uint8_t*)mTree.mHeader)));
889                continue;
890        }
891
892        if ((totalSize-headerSize) < minExtSize) {
893            LOGW("Bad XML block: header type 0x%x in node at 0x%x has size %d, need %d\n",
894                 (int)dtohs(next->header.type),
895                 (int)(((const uint8_t*)next)-((const uint8_t*)mTree.mHeader)),
896                 (int)(totalSize-headerSize), (int)minExtSize);
897            return (mEventCode=BAD_DOCUMENT);
898        }
899
900        //printf("CurNode=%p, CurExt=%p, headerSize=%d, minExtSize=%d\n",
901        //       mCurNode, mCurExt, headerSize, minExtSize);
902
903        return eventCode;
904    } while (true);
905}
906
907void ResXMLParser::getPosition(ResXMLParser::ResXMLPosition* pos) const
908{
909    pos->eventCode = mEventCode;
910    pos->curNode = mCurNode;
911    pos->curExt = mCurExt;
912}
913
914void ResXMLParser::setPosition(const ResXMLParser::ResXMLPosition& pos)
915{
916    mEventCode = pos.eventCode;
917    mCurNode = pos.curNode;
918    mCurExt = pos.curExt;
919}
920
921
922// --------------------------------------------------------------------
923
924static volatile int32_t gCount = 0;
925
926ResXMLTree::ResXMLTree()
927    : ResXMLParser(*this)
928    , mError(NO_INIT), mOwnedData(NULL)
929{
930    //LOGI("Creating ResXMLTree %p #%d\n", this, android_atomic_inc(&gCount)+1);
931    restart();
932}
933
934ResXMLTree::ResXMLTree(const void* data, size_t size, bool copyData)
935    : ResXMLParser(*this)
936    , mError(NO_INIT), mOwnedData(NULL)
937{
938    //LOGI("Creating ResXMLTree %p #%d\n", this, android_atomic_inc(&gCount)+1);
939    setTo(data, size, copyData);
940}
941
942ResXMLTree::~ResXMLTree()
943{
944    //LOGI("Destroying ResXMLTree in %p #%d\n", this, android_atomic_dec(&gCount)-1);
945    uninit();
946}
947
948status_t ResXMLTree::setTo(const void* data, size_t size, bool copyData)
949{
950    uninit();
951    mEventCode = START_DOCUMENT;
952
953    if (copyData) {
954        mOwnedData = malloc(size);
955        if (mOwnedData == NULL) {
956            return (mError=NO_MEMORY);
957        }
958        memcpy(mOwnedData, data, size);
959        data = mOwnedData;
960    }
961
962    mHeader = (const ResXMLTree_header*)data;
963    mSize = dtohl(mHeader->header.size);
964    if (dtohs(mHeader->header.headerSize) > mSize || mSize > size) {
965        LOGW("Bad XML block: header size %d or total size %d is larger than data size %d\n",
966             (int)dtohs(mHeader->header.headerSize),
967             (int)dtohl(mHeader->header.size), (int)size);
968        mError = BAD_TYPE;
969        restart();
970        return mError;
971    }
972    mDataEnd = ((const uint8_t*)mHeader) + mSize;
973
974    mStrings.uninit();
975    mRootNode = NULL;
976    mResIds = NULL;
977    mNumResIds = 0;
978
979    // First look for a couple interesting chunks: the string block
980    // and first XML node.
981    const ResChunk_header* chunk =
982        (const ResChunk_header*)(((const uint8_t*)mHeader) + dtohs(mHeader->header.headerSize));
983    const ResChunk_header* lastChunk = chunk;
984    while (((const uint8_t*)chunk) < (mDataEnd-sizeof(ResChunk_header)) &&
985           ((const uint8_t*)chunk) < (mDataEnd-dtohl(chunk->size))) {
986        status_t err = validate_chunk(chunk, sizeof(ResChunk_header), mDataEnd, "XML");
987        if (err != NO_ERROR) {
988            mError = err;
989            goto done;
990        }
991        const uint16_t type = dtohs(chunk->type);
992        const size_t size = dtohl(chunk->size);
993        XML_NOISY(printf("Scanning @ %p: type=0x%x, size=0x%x\n",
994                     (void*)(((uint32_t)chunk)-((uint32_t)mHeader)), type, size));
995        if (type == RES_STRING_POOL_TYPE) {
996            mStrings.setTo(chunk, size);
997        } else if (type == RES_XML_RESOURCE_MAP_TYPE) {
998            mResIds = (const uint32_t*)
999                (((const uint8_t*)chunk)+dtohs(chunk->headerSize));
1000            mNumResIds = (dtohl(chunk->size)-dtohs(chunk->headerSize))/sizeof(uint32_t);
1001        } else if (type >= RES_XML_FIRST_CHUNK_TYPE
1002                   && type <= RES_XML_LAST_CHUNK_TYPE) {
1003            if (validateNode((const ResXMLTree_node*)chunk) != NO_ERROR) {
1004                mError = BAD_TYPE;
1005                goto done;
1006            }
1007            mCurNode = (const ResXMLTree_node*)lastChunk;
1008            if (nextNode() == BAD_DOCUMENT) {
1009                mError = BAD_TYPE;
1010                goto done;
1011            }
1012            mRootNode = mCurNode;
1013            mRootExt = mCurExt;
1014            mRootCode = mEventCode;
1015            break;
1016        } else {
1017            XML_NOISY(printf("Skipping unknown chunk!\n"));
1018        }
1019        lastChunk = chunk;
1020        chunk = (const ResChunk_header*)
1021            (((const uint8_t*)chunk) + size);
1022    }
1023
1024    if (mRootNode == NULL) {
1025        LOGW("Bad XML block: no root element node found\n");
1026        mError = BAD_TYPE;
1027        goto done;
1028    }
1029
1030    mError = mStrings.getError();
1031
1032done:
1033    restart();
1034    return mError;
1035}
1036
1037status_t ResXMLTree::getError() const
1038{
1039    return mError;
1040}
1041
1042void ResXMLTree::uninit()
1043{
1044    mError = NO_INIT;
1045    if (mOwnedData) {
1046        free(mOwnedData);
1047        mOwnedData = NULL;
1048    }
1049    restart();
1050}
1051
1052const ResStringPool& ResXMLTree::getStrings() const
1053{
1054    return mStrings;
1055}
1056
1057status_t ResXMLTree::validateNode(const ResXMLTree_node* node) const
1058{
1059    const uint16_t eventCode = dtohs(node->header.type);
1060
1061    status_t err = validate_chunk(
1062        &node->header, sizeof(ResXMLTree_node),
1063        mDataEnd, "ResXMLTree_node");
1064
1065    if (err >= NO_ERROR) {
1066        // Only perform additional validation on START nodes
1067        if (eventCode != RES_XML_START_ELEMENT_TYPE) {
1068            return NO_ERROR;
1069        }
1070
1071        const uint16_t headerSize = dtohs(node->header.headerSize);
1072        const uint32_t size = dtohl(node->header.size);
1073        const ResXMLTree_attrExt* attrExt = (const ResXMLTree_attrExt*)
1074            (((const uint8_t*)node) + headerSize);
1075        // check for sensical values pulled out of the stream so far...
1076        if ((size >= headerSize + sizeof(ResXMLTree_attrExt))
1077                && ((void*)attrExt > (void*)node)) {
1078            const size_t attrSize = ((size_t)dtohs(attrExt->attributeSize))
1079                * dtohs(attrExt->attributeCount);
1080            if ((dtohs(attrExt->attributeStart)+attrSize) <= (size-headerSize)) {
1081                return NO_ERROR;
1082            }
1083            LOGW("Bad XML block: node attributes use 0x%x bytes, only have 0x%x bytes\n",
1084                    (unsigned int)(dtohs(attrExt->attributeStart)+attrSize),
1085                    (unsigned int)(size-headerSize));
1086        }
1087        else {
1088            LOGW("Bad XML start block: node header size 0x%x, size 0x%x\n",
1089                (unsigned int)headerSize, (unsigned int)size);
1090        }
1091        return BAD_TYPE;
1092    }
1093
1094    return err;
1095
1096#if 0
1097    const bool isStart = dtohs(node->header.type) == RES_XML_START_ELEMENT_TYPE;
1098
1099    const uint16_t headerSize = dtohs(node->header.headerSize);
1100    const uint32_t size = dtohl(node->header.size);
1101
1102    if (headerSize >= (isStart ? sizeof(ResXMLTree_attrNode) : sizeof(ResXMLTree_node))) {
1103        if (size >= headerSize) {
1104            if (((const uint8_t*)node) <= (mDataEnd-size)) {
1105                if (!isStart) {
1106                    return NO_ERROR;
1107                }
1108                if ((((size_t)dtohs(node->attributeSize))*dtohs(node->attributeCount))
1109                        <= (size-headerSize)) {
1110                    return NO_ERROR;
1111                }
1112                LOGW("Bad XML block: node attributes use 0x%x bytes, only have 0x%x bytes\n",
1113                        ((int)dtohs(node->attributeSize))*dtohs(node->attributeCount),
1114                        (int)(size-headerSize));
1115                return BAD_TYPE;
1116            }
1117            LOGW("Bad XML block: node at 0x%x extends beyond data end 0x%x\n",
1118                    (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)), (int)mSize);
1119            return BAD_TYPE;
1120        }
1121        LOGW("Bad XML block: node at 0x%x header size 0x%x smaller than total size 0x%x\n",
1122                (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)),
1123                (int)headerSize, (int)size);
1124        return BAD_TYPE;
1125    }
1126    LOGW("Bad XML block: node at 0x%x header size 0x%x too small\n",
1127            (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)),
1128            (int)headerSize);
1129    return BAD_TYPE;
1130#endif
1131}
1132
1133// --------------------------------------------------------------------
1134// --------------------------------------------------------------------
1135// --------------------------------------------------------------------
1136
1137struct ResTable::Header
1138{
1139    Header(ResTable* _owner) : owner(_owner), ownedData(NULL), header(NULL) { }
1140
1141    ResTable* const                 owner;
1142    void*                           ownedData;
1143    const ResTable_header*          header;
1144    size_t                          size;
1145    const uint8_t*                  dataEnd;
1146    size_t                          index;
1147    void*                           cookie;
1148
1149    ResStringPool                   values;
1150};
1151
1152struct ResTable::Type
1153{
1154    Type(const Header* _header, const Package* _package, size_t count)
1155        : header(_header), package(_package), entryCount(count),
1156          typeSpec(NULL), typeSpecFlags(NULL) { }
1157    const Header* const             header;
1158    const Package* const            package;
1159    const size_t                    entryCount;
1160    const ResTable_typeSpec*        typeSpec;
1161    const uint32_t*                 typeSpecFlags;
1162    Vector<const ResTable_type*>    configs;
1163};
1164
1165struct ResTable::Package
1166{
1167    Package(ResTable* _owner, const Header* _header, const ResTable_package* _package)
1168        : owner(_owner), header(_header), package(_package) { }
1169    ~Package()
1170    {
1171        size_t i = types.size();
1172        while (i > 0) {
1173            i--;
1174            delete types[i];
1175        }
1176    }
1177
1178    ResTable* const                 owner;
1179    const Header* const             header;
1180    const ResTable_package* const   package;
1181    Vector<Type*>                   types;
1182
1183    ResStringPool                   typeStrings;
1184    ResStringPool                   keyStrings;
1185
1186    const Type* getType(size_t idx) const {
1187        return idx < types.size() ? types[idx] : NULL;
1188    }
1189};
1190
1191// A group of objects describing a particular resource package.
1192// The first in 'package' is always the root object (from the resource
1193// table that defined the package); the ones after are skins on top of it.
1194struct ResTable::PackageGroup
1195{
1196    PackageGroup(ResTable* _owner, const String16& _name, uint32_t _id)
1197        : owner(_owner), name(_name), id(_id), typeCount(0), bags(NULL) { }
1198    ~PackageGroup() {
1199        clearBagCache();
1200        const size_t N = packages.size();
1201        for (size_t i=0; i<N; i++) {
1202            Package* pkg = packages[i];
1203            if (pkg->owner == owner) {
1204                delete pkg;
1205            }
1206        }
1207    }
1208
1209    void clearBagCache() {
1210        if (bags) {
1211            TABLE_NOISY(printf("bags=%p\n", bags));
1212            Package* pkg = packages[0];
1213            TABLE_NOISY(printf("typeCount=%x\n", typeCount));
1214            for (size_t i=0; i<typeCount; i++) {
1215                TABLE_NOISY(printf("type=%d\n", i));
1216                const Type* type = pkg->getType(i);
1217                if (type != NULL) {
1218                    bag_set** typeBags = bags[i];
1219                    TABLE_NOISY(printf("typeBags=%p\n", typeBags));
1220                    if (typeBags) {
1221                        TABLE_NOISY(printf("type->entryCount=%x\n", type->entryCount));
1222                        const size_t N = type->entryCount;
1223                        for (size_t j=0; j<N; j++) {
1224                            if (typeBags[j] && typeBags[j] != (bag_set*)0xFFFFFFFF)
1225                                free(typeBags[j]);
1226                        }
1227                        free(typeBags);
1228                    }
1229                }
1230            }
1231            free(bags);
1232            bags = NULL;
1233        }
1234    }
1235
1236    ResTable* const                 owner;
1237    String16 const                  name;
1238    uint32_t const                  id;
1239    Vector<Package*>                packages;
1240
1241    // This is for finding typeStrings and other common package stuff.
1242    Package*                        basePackage;
1243
1244    // For quick access.
1245    size_t                          typeCount;
1246
1247    // Computed attribute bags, first indexed by the type and second
1248    // by the entry in that type.
1249    bag_set***                      bags;
1250};
1251
1252struct ResTable::bag_set
1253{
1254    size_t numAttrs;    // number in array
1255    size_t availAttrs;  // total space in array
1256    uint32_t typeSpecFlags;
1257    // Followed by 'numAttr' bag_entry structures.
1258};
1259
1260ResTable::Theme::Theme(const ResTable& table)
1261    : mTable(table)
1262{
1263    memset(mPackages, 0, sizeof(mPackages));
1264}
1265
1266ResTable::Theme::~Theme()
1267{
1268    for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1269        package_info* pi = mPackages[i];
1270        if (pi != NULL) {
1271            free_package(pi);
1272        }
1273    }
1274}
1275
1276void ResTable::Theme::free_package(package_info* pi)
1277{
1278    for (size_t j=0; j<pi->numTypes; j++) {
1279        theme_entry* te = pi->types[j].entries;
1280        if (te != NULL) {
1281            free(te);
1282        }
1283    }
1284    free(pi);
1285}
1286
1287ResTable::Theme::package_info* ResTable::Theme::copy_package(package_info* pi)
1288{
1289    package_info* newpi = (package_info*)malloc(
1290        sizeof(package_info) + (pi->numTypes*sizeof(type_info)));
1291    newpi->numTypes = pi->numTypes;
1292    for (size_t j=0; j<newpi->numTypes; j++) {
1293        size_t cnt = pi->types[j].numEntries;
1294        newpi->types[j].numEntries = cnt;
1295        theme_entry* te = pi->types[j].entries;
1296        if (te != NULL) {
1297            theme_entry* newte = (theme_entry*)malloc(cnt*sizeof(theme_entry));
1298            newpi->types[j].entries = newte;
1299            memcpy(newte, te, cnt*sizeof(theme_entry));
1300        } else {
1301            newpi->types[j].entries = NULL;
1302        }
1303    }
1304    return newpi;
1305}
1306
1307status_t ResTable::Theme::applyStyle(uint32_t resID, bool force)
1308{
1309    const bag_entry* bag;
1310    uint32_t bagTypeSpecFlags = 0;
1311    mTable.lock();
1312    const ssize_t N = mTable.getBagLocked(resID, &bag, &bagTypeSpecFlags);
1313    TABLE_NOISY(LOGV("Applying style 0x%08x to theme %p, count=%d", resID, this, N));
1314    if (N < 0) {
1315        mTable.unlock();
1316        return N;
1317    }
1318
1319    uint32_t curPackage = 0xffffffff;
1320    ssize_t curPackageIndex = 0;
1321    package_info* curPI = NULL;
1322    uint32_t curType = 0xffffffff;
1323    size_t numEntries = 0;
1324    theme_entry* curEntries = NULL;
1325
1326    const bag_entry* end = bag + N;
1327    while (bag < end) {
1328        const uint32_t attrRes = bag->map.name.ident;
1329        const uint32_t p = Res_GETPACKAGE(attrRes);
1330        const uint32_t t = Res_GETTYPE(attrRes);
1331        const uint32_t e = Res_GETENTRY(attrRes);
1332
1333        if (curPackage != p) {
1334            const ssize_t pidx = mTable.getResourcePackageIndex(attrRes);
1335            if (pidx < 0) {
1336                LOGE("Style contains key with bad package: 0x%08x\n", attrRes);
1337                bag++;
1338                continue;
1339            }
1340            curPackage = p;
1341            curPackageIndex = pidx;
1342            curPI = mPackages[pidx];
1343            if (curPI == NULL) {
1344                PackageGroup* const grp = mTable.mPackageGroups[pidx];
1345                int cnt = grp->typeCount;
1346                curPI = (package_info*)malloc(
1347                    sizeof(package_info) + (cnt*sizeof(type_info)));
1348                curPI->numTypes = cnt;
1349                memset(curPI->types, 0, cnt*sizeof(type_info));
1350                mPackages[pidx] = curPI;
1351            }
1352            curType = 0xffffffff;
1353        }
1354        if (curType != t) {
1355            if (t >= curPI->numTypes) {
1356                LOGE("Style contains key with bad type: 0x%08x\n", attrRes);
1357                bag++;
1358                continue;
1359            }
1360            curType = t;
1361            curEntries = curPI->types[t].entries;
1362            if (curEntries == NULL) {
1363                PackageGroup* const grp = mTable.mPackageGroups[curPackageIndex];
1364                const Type* type = grp->packages[0]->getType(t);
1365                int cnt = type != NULL ? type->entryCount : 0;
1366                curEntries = (theme_entry*)malloc(cnt*sizeof(theme_entry));
1367                memset(curEntries, Res_value::TYPE_NULL, cnt*sizeof(theme_entry));
1368                curPI->types[t].numEntries = cnt;
1369                curPI->types[t].entries = curEntries;
1370            }
1371            numEntries = curPI->types[t].numEntries;
1372        }
1373        if (e >= numEntries) {
1374            LOGE("Style contains key with bad entry: 0x%08x\n", attrRes);
1375            bag++;
1376            continue;
1377        }
1378        theme_entry* curEntry = curEntries + e;
1379        TABLE_NOISY(LOGV("Attr 0x%08x: type=0x%x, data=0x%08x; curType=0x%x",
1380                   attrRes, bag->map.value.dataType, bag->map.value.data,
1381             curEntry->value.dataType));
1382        if (force || curEntry->value.dataType == Res_value::TYPE_NULL) {
1383            curEntry->stringBlock = bag->stringBlock;
1384            curEntry->typeSpecFlags |= bagTypeSpecFlags;
1385            curEntry->value = bag->map.value;
1386        }
1387
1388        bag++;
1389    }
1390
1391    mTable.unlock();
1392
1393    //LOGI("Applying style 0x%08x (force=%d)  theme %p...\n", resID, force, this);
1394    //dumpToLog();
1395
1396    return NO_ERROR;
1397}
1398
1399status_t ResTable::Theme::setTo(const Theme& other)
1400{
1401    //LOGI("Setting theme %p from theme %p...\n", this, &other);
1402    //dumpToLog();
1403    //other.dumpToLog();
1404
1405    if (&mTable == &other.mTable) {
1406        for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1407            if (mPackages[i] != NULL) {
1408                free_package(mPackages[i]);
1409            }
1410            if (other.mPackages[i] != NULL) {
1411                mPackages[i] = copy_package(other.mPackages[i]);
1412            } else {
1413                mPackages[i] = NULL;
1414            }
1415        }
1416    } else {
1417        // @todo: need to really implement this, not just copy
1418        // the system package (which is still wrong because it isn't
1419        // fixing up resource references).
1420        for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1421            if (mPackages[i] != NULL) {
1422                free_package(mPackages[i]);
1423            }
1424            if (i == 0 && other.mPackages[i] != NULL) {
1425                mPackages[i] = copy_package(other.mPackages[i]);
1426            } else {
1427                mPackages[i] = NULL;
1428            }
1429        }
1430    }
1431
1432    //LOGI("Final theme:");
1433    //dumpToLog();
1434
1435    return NO_ERROR;
1436}
1437
1438ssize_t ResTable::Theme::getAttribute(uint32_t resID, Res_value* outValue,
1439        uint32_t* outTypeSpecFlags) const
1440{
1441    int cnt = 20;
1442
1443    if (outTypeSpecFlags != NULL) *outTypeSpecFlags = 0;
1444
1445    do {
1446        const ssize_t p = mTable.getResourcePackageIndex(resID);
1447        const uint32_t t = Res_GETTYPE(resID);
1448        const uint32_t e = Res_GETENTRY(resID);
1449
1450        TABLE_NOISY(LOGV("Looking up attr 0x%08x in theme %p", resID, this));
1451
1452        if (p >= 0) {
1453            const package_info* const pi = mPackages[p];
1454            if (pi != NULL) {
1455                if (t < pi->numTypes) {
1456                    const type_info& ti = pi->types[t];
1457                    if (e < ti.numEntries) {
1458                        const theme_entry& te = ti.entries[e];
1459                            if (outTypeSpecFlags != NULL) {
1460                                *outTypeSpecFlags |= te.typeSpecFlags;
1461                            }
1462                        const uint8_t type = te.value.dataType;
1463                        if (type == Res_value::TYPE_ATTRIBUTE) {
1464                            if (cnt > 0) {
1465                                cnt--;
1466                                resID = te.value.data;
1467                                continue;
1468                            }
1469                            LOGW("Too many attribute references, stopped at: 0x%08x\n", resID);
1470                            return BAD_INDEX;
1471                        } else if (type != Res_value::TYPE_NULL) {
1472                            *outValue = te.value;
1473                            return te.stringBlock;
1474                        }
1475                        return BAD_INDEX;
1476                    }
1477                }
1478            }
1479        }
1480        break;
1481
1482    } while (true);
1483
1484    return BAD_INDEX;
1485}
1486
1487ssize_t ResTable::Theme::resolveAttributeReference(Res_value* inOutValue,
1488        ssize_t blockIndex, uint32_t* outLastRef,
1489        uint32_t* inoutTypeSpecFlags, ResTable_config* inoutConfig) const
1490{
1491    //printf("Resolving type=0x%x\n", inOutValue->dataType);
1492    if (inOutValue->dataType == Res_value::TYPE_ATTRIBUTE) {
1493        uint32_t newTypeSpecFlags;
1494        blockIndex = getAttribute(inOutValue->data, inOutValue, &newTypeSpecFlags);
1495        if (inoutTypeSpecFlags != NULL) *inoutTypeSpecFlags |= newTypeSpecFlags;
1496        //printf("Retrieved attribute new type=0x%x\n", inOutValue->dataType);
1497        if (blockIndex < 0) {
1498            return blockIndex;
1499        }
1500    }
1501    return mTable.resolveReference(inOutValue, blockIndex, outLastRef,
1502            inoutTypeSpecFlags, inoutConfig);
1503}
1504
1505void ResTable::Theme::dumpToLog() const
1506{
1507    LOGI("Theme %p:\n", this);
1508    for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1509        package_info* pi = mPackages[i];
1510        if (pi == NULL) continue;
1511
1512        LOGI("  Package #0x%02x:\n", (int)(i+1));
1513        for (size_t j=0; j<pi->numTypes; j++) {
1514            type_info& ti = pi->types[j];
1515            if (ti.numEntries == 0) continue;
1516
1517            LOGI("    Type #0x%02x:\n", (int)(j+1));
1518            for (size_t k=0; k<ti.numEntries; k++) {
1519                theme_entry& te = ti.entries[k];
1520                if (te.value.dataType == Res_value::TYPE_NULL) continue;
1521                LOGI("      0x%08x: t=0x%x, d=0x%08x (block=%d)\n",
1522                     (int)Res_MAKEID(i, j, k),
1523                     te.value.dataType, (int)te.value.data, (int)te.stringBlock);
1524            }
1525        }
1526    }
1527}
1528
1529ResTable::ResTable()
1530    : mError(NO_INIT)
1531{
1532    memset(&mParams, 0, sizeof(mParams));
1533    memset(mPackageMap, 0, sizeof(mPackageMap));
1534    //LOGI("Creating ResTable %p\n", this);
1535}
1536
1537ResTable::ResTable(const void* data, size_t size, void* cookie, bool copyData)
1538    : mError(NO_INIT)
1539{
1540    memset(&mParams, 0, sizeof(mParams));
1541    memset(mPackageMap, 0, sizeof(mPackageMap));
1542    add(data, size, cookie, copyData);
1543    LOG_FATAL_IF(mError != NO_ERROR, "Error parsing resource table");
1544    //LOGI("Creating ResTable %p\n", this);
1545}
1546
1547ResTable::~ResTable()
1548{
1549    //LOGI("Destroying ResTable in %p\n", this);
1550    uninit();
1551}
1552
1553inline ssize_t ResTable::getResourcePackageIndex(uint32_t resID) const
1554{
1555    return ((ssize_t)mPackageMap[Res_GETPACKAGE(resID)+1])-1;
1556}
1557
1558status_t ResTable::add(const void* data, size_t size, void* cookie, bool copyData)
1559{
1560    return add(data, size, cookie, NULL, copyData);
1561}
1562
1563status_t ResTable::add(Asset* asset, void* cookie, bool copyData)
1564{
1565    const void* data = asset->getBuffer(true);
1566    if (data == NULL) {
1567        LOGW("Unable to get buffer of resource asset file");
1568        return UNKNOWN_ERROR;
1569    }
1570    size_t size = (size_t)asset->getLength();
1571    return add(data, size, cookie, asset, copyData);
1572}
1573
1574status_t ResTable::add(ResTable* src)
1575{
1576    mError = src->mError;
1577
1578    for (size_t i=0; i<src->mHeaders.size(); i++) {
1579        mHeaders.add(src->mHeaders[i]);
1580    }
1581
1582    for (size_t i=0; i<src->mPackageGroups.size(); i++) {
1583        PackageGroup* srcPg = src->mPackageGroups[i];
1584        PackageGroup* pg = new PackageGroup(this, srcPg->name, srcPg->id);
1585        for (size_t j=0; j<srcPg->packages.size(); j++) {
1586            pg->packages.add(srcPg->packages[j]);
1587        }
1588        pg->basePackage = srcPg->basePackage;
1589        pg->typeCount = srcPg->typeCount;
1590        mPackageGroups.add(pg);
1591    }
1592
1593    memcpy(mPackageMap, src->mPackageMap, sizeof(mPackageMap));
1594
1595    return mError;
1596}
1597
1598status_t ResTable::add(const void* data, size_t size, void* cookie,
1599                       Asset* asset, bool copyData)
1600{
1601    if (!data) return NO_ERROR;
1602    Header* header = new Header(this);
1603    header->index = mHeaders.size();
1604    header->cookie = cookie;
1605    mHeaders.add(header);
1606
1607    const bool notDeviceEndian = htods(0xf0) != 0xf0;
1608
1609    LOAD_TABLE_NOISY(
1610        LOGV("Adding resources to ResTable: data=%p, size=0x%x, cookie=%p, asset=%p, copy=%d\n",
1611             data, size, cookie, asset, copyData));
1612
1613    if (copyData || notDeviceEndian) {
1614        header->ownedData = malloc(size);
1615        if (header->ownedData == NULL) {
1616            return (mError=NO_MEMORY);
1617        }
1618        memcpy(header->ownedData, data, size);
1619        data = header->ownedData;
1620    }
1621
1622    header->header = (const ResTable_header*)data;
1623    header->size = dtohl(header->header->header.size);
1624    //LOGI("Got size 0x%x, again size 0x%x, raw size 0x%x\n", header->size,
1625    //     dtohl(header->header->header.size), header->header->header.size);
1626    LOAD_TABLE_NOISY(LOGV("Loading ResTable @%p:\n", header->header));
1627    LOAD_TABLE_NOISY(printHexData(2, header->header, header->size < 256 ? header->size : 256,
1628                                  16, 16, 0, false, printToLogFunc));
1629    if (dtohs(header->header->header.headerSize) > header->size
1630            || header->size > size) {
1631        LOGW("Bad resource table: header size 0x%x or total size 0x%x is larger than data size 0x%x\n",
1632             (int)dtohs(header->header->header.headerSize),
1633             (int)header->size, (int)size);
1634        return (mError=BAD_TYPE);
1635    }
1636    if (((dtohs(header->header->header.headerSize)|header->size)&0x3) != 0) {
1637        LOGW("Bad resource table: header size 0x%x or total size 0x%x is not on an integer boundary\n",
1638             (int)dtohs(header->header->header.headerSize),
1639             (int)header->size);
1640        return (mError=BAD_TYPE);
1641    }
1642    header->dataEnd = ((const uint8_t*)header->header) + header->size;
1643
1644    // Iterate through all chunks.
1645    size_t curPackage = 0;
1646
1647    const ResChunk_header* chunk =
1648        (const ResChunk_header*)(((const uint8_t*)header->header)
1649                                 + dtohs(header->header->header.headerSize));
1650    while (((const uint8_t*)chunk) <= (header->dataEnd-sizeof(ResChunk_header)) &&
1651           ((const uint8_t*)chunk) <= (header->dataEnd-dtohl(chunk->size))) {
1652        status_t err = validate_chunk(chunk, sizeof(ResChunk_header), header->dataEnd, "ResTable");
1653        if (err != NO_ERROR) {
1654            return (mError=err);
1655        }
1656        TABLE_NOISY(LOGV("Chunk: type=0x%x, headerSize=0x%x, size=0x%x, pos=%p\n",
1657                     dtohs(chunk->type), dtohs(chunk->headerSize), dtohl(chunk->size),
1658                     (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header))));
1659        const size_t csize = dtohl(chunk->size);
1660        const uint16_t ctype = dtohs(chunk->type);
1661        if (ctype == RES_STRING_POOL_TYPE) {
1662            if (header->values.getError() != NO_ERROR) {
1663                // Only use the first string chunk; ignore any others that
1664                // may appear.
1665                status_t err = header->values.setTo(chunk, csize);
1666                if (err != NO_ERROR) {
1667                    return (mError=err);
1668                }
1669            } else {
1670                LOGW("Multiple string chunks found in resource table.");
1671            }
1672        } else if (ctype == RES_TABLE_PACKAGE_TYPE) {
1673            if (curPackage >= dtohl(header->header->packageCount)) {
1674                LOGW("More package chunks were found than the %d declared in the header.",
1675                     dtohl(header->header->packageCount));
1676                return (mError=BAD_TYPE);
1677            }
1678            if (parsePackage((ResTable_package*)chunk, header) != NO_ERROR) {
1679                return mError;
1680            }
1681            curPackage++;
1682        } else {
1683            LOGW("Unknown chunk type %p in table at %p.\n",
1684                 (void*)(int)(ctype),
1685                 (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header)));
1686        }
1687        chunk = (const ResChunk_header*)
1688            (((const uint8_t*)chunk) + csize);
1689    }
1690
1691    if (curPackage < dtohl(header->header->packageCount)) {
1692        LOGW("Fewer package chunks (%d) were found than the %d declared in the header.",
1693             (int)curPackage, dtohl(header->header->packageCount));
1694        return (mError=BAD_TYPE);
1695    }
1696    mError = header->values.getError();
1697    if (mError != NO_ERROR) {
1698        LOGW("No string values found in resource table!");
1699    }
1700    TABLE_NOISY(LOGV("Returning from add with mError=%d\n", mError));
1701    return mError;
1702}
1703
1704status_t ResTable::getError() const
1705{
1706    return mError;
1707}
1708
1709void ResTable::uninit()
1710{
1711    mError = NO_INIT;
1712    size_t N = mPackageGroups.size();
1713    for (size_t i=0; i<N; i++) {
1714        PackageGroup* g = mPackageGroups[i];
1715        delete g;
1716    }
1717    N = mHeaders.size();
1718    for (size_t i=0; i<N; i++) {
1719        Header* header = mHeaders[i];
1720        if (header->owner == this) {
1721            if (header->ownedData) {
1722                free(header->ownedData);
1723            }
1724            delete header;
1725        }
1726    }
1727
1728    mPackageGroups.clear();
1729    mHeaders.clear();
1730}
1731
1732bool ResTable::getResourceName(uint32_t resID, resource_name* outName) const
1733{
1734    if (mError != NO_ERROR) {
1735        return false;
1736    }
1737
1738    const ssize_t p = getResourcePackageIndex(resID);
1739    const int t = Res_GETTYPE(resID);
1740    const int e = Res_GETENTRY(resID);
1741
1742    if (p < 0) {
1743        if (Res_GETPACKAGE(resID)+1 == 0) {
1744            LOGW("No package identifier when getting name for resource number 0x%08x", resID);
1745        } else {
1746            LOGW("Resources don't contain pacakge for resource number 0x%08x", resID);
1747        }
1748        return false;
1749    }
1750    if (t < 0) {
1751        LOGW("No type identifier when getting name for resource number 0x%08x", resID);
1752        return false;
1753    }
1754
1755    const PackageGroup* const grp = mPackageGroups[p];
1756    if (grp == NULL) {
1757        LOGW("Bad identifier when getting name for resource number 0x%08x", resID);
1758        return false;
1759    }
1760    if (grp->packages.size() > 0) {
1761        const Package* const package = grp->packages[0];
1762
1763        const ResTable_type* type;
1764        const ResTable_entry* entry;
1765        ssize_t offset = getEntry(package, t, e, NULL, &type, &entry, NULL);
1766        if (offset <= 0) {
1767            return false;
1768        }
1769
1770        outName->package = grp->name.string();
1771        outName->packageLen = grp->name.size();
1772        outName->type = grp->basePackage->typeStrings.stringAt(t, &outName->typeLen);
1773        outName->name = grp->basePackage->keyStrings.stringAt(
1774            dtohl(entry->key.index), &outName->nameLen);
1775        return true;
1776    }
1777
1778    return false;
1779}
1780
1781ssize_t ResTable::getResource(uint32_t resID, Res_value* outValue, bool mayBeBag,
1782        uint32_t* outSpecFlags, ResTable_config* outConfig) const
1783{
1784    if (mError != NO_ERROR) {
1785        return mError;
1786    }
1787
1788    const ssize_t p = getResourcePackageIndex(resID);
1789    const int t = Res_GETTYPE(resID);
1790    const int e = Res_GETENTRY(resID);
1791
1792    if (p < 0) {
1793        if (Res_GETPACKAGE(resID)+1 == 0) {
1794            LOGW("No package identifier when getting name for resource number 0x%08x", resID);
1795        } else {
1796            LOGW("Resources don't contain pacakge for resource number 0x%08x", resID);
1797        }
1798        return BAD_INDEX;
1799    }
1800    if (t < 0) {
1801        LOGW("No type identifier when getting value for resource number 0x%08x", resID);
1802        return BAD_INDEX;
1803    }
1804
1805    const Res_value* bestValue = NULL;
1806    const Package* bestPackage = NULL;
1807    ResTable_config bestItem;
1808    memset(&bestItem, 0, sizeof(bestItem)); // make the compiler shut up
1809
1810    if (outSpecFlags != NULL) *outSpecFlags = 0;
1811
1812    // Look through all resource packages, starting with the most
1813    // recently added.
1814    const PackageGroup* const grp = mPackageGroups[p];
1815    if (grp == NULL) {
1816        LOGW("Bad identifier when getting value for resource number 0x%08x", resID);
1817        return false;
1818    }
1819    size_t ip = grp->packages.size();
1820    while (ip > 0) {
1821        ip--;
1822
1823        const Package* const package = grp->packages[ip];
1824
1825        const ResTable_type* type;
1826        const ResTable_entry* entry;
1827        const Type* typeClass;
1828        ssize_t offset = getEntry(package, t, e, &mParams, &type, &entry, &typeClass);
1829        if (offset <= 0) {
1830            if (offset < 0) {
1831                LOGW("Failure getting entry for 0x%08x (t=%d e=%d) in package %d: 0x%08x\n",
1832                        resID, t, e, (int)ip, (int)offset);
1833                return offset;
1834            }
1835            continue;
1836        }
1837
1838        if ((dtohs(entry->flags)&entry->FLAG_COMPLEX) != 0) {
1839            if (!mayBeBag) {
1840                LOGW("Requesting resource %p failed because it is complex\n",
1841                     (void*)resID);
1842            }
1843            continue;
1844        }
1845
1846        TABLE_NOISY(aout << "Resource type data: "
1847              << HexDump(type, dtohl(type->header.size)) << endl);
1848
1849        if ((size_t)offset > (dtohl(type->header.size)-sizeof(Res_value))) {
1850            LOGW("ResTable_item at %d is beyond type chunk data %d",
1851                 (int)offset, dtohl(type->header.size));
1852            return BAD_TYPE;
1853        }
1854
1855        const Res_value* item =
1856            (const Res_value*)(((const uint8_t*)type) + offset);
1857        ResTable_config thisConfig;
1858        thisConfig.copyFromDtoH(type->config);
1859
1860        if (outSpecFlags != NULL) {
1861            if (typeClass->typeSpecFlags != NULL) {
1862                *outSpecFlags |= dtohl(typeClass->typeSpecFlags[e]);
1863            } else {
1864                *outSpecFlags = -1;
1865            }
1866        }
1867
1868        if (bestPackage != NULL && bestItem.isMoreSpecificThan(thisConfig)) {
1869            continue;
1870        }
1871
1872        bestItem = thisConfig;
1873        bestValue = item;
1874        bestPackage = package;
1875    }
1876
1877    TABLE_NOISY(printf("Found result: package %p\n", bestPackage));
1878
1879    if (bestValue) {
1880        outValue->size = dtohs(bestValue->size);
1881        outValue->res0 = bestValue->res0;
1882        outValue->dataType = bestValue->dataType;
1883        outValue->data = dtohl(bestValue->data);
1884        if (outConfig != NULL) {
1885            *outConfig = bestItem;
1886        }
1887        TABLE_NOISY(size_t len;
1888              printf("Found value: pkg=%d, type=%d, str=%s, int=%d\n",
1889                     bestPackage->header->index,
1890                     outValue->dataType,
1891                     outValue->dataType == bestValue->TYPE_STRING
1892                     ? String8(bestPackage->header->values.stringAt(
1893                         outValue->data, &len)).string()
1894                     : "",
1895                     outValue->data));
1896        return bestPackage->header->index;
1897    }
1898
1899    return BAD_INDEX;
1900}
1901
1902ssize_t ResTable::resolveReference(Res_value* value, ssize_t blockIndex,
1903        uint32_t* outLastRef, uint32_t* inoutTypeSpecFlags,
1904        ResTable_config* outConfig) const
1905{
1906    int count=0;
1907    while (blockIndex >= 0 && value->dataType == value->TYPE_REFERENCE
1908           && value->data != 0 && count < 20) {
1909        if (outLastRef) *outLastRef = value->data;
1910        uint32_t lastRef = value->data;
1911        uint32_t newFlags = 0;
1912        const ssize_t newIndex = getResource(value->data, value, true, &newFlags,
1913                outConfig);
1914        //LOGI("Resolving reference d=%p: newIndex=%d, t=0x%02x, d=%p\n",
1915        //     (void*)lastRef, (int)newIndex, (int)value->dataType, (void*)value->data);
1916        //printf("Getting reference 0x%08x: newIndex=%d\n", value->data, newIndex);
1917        if (inoutTypeSpecFlags != NULL) *inoutTypeSpecFlags |= newFlags;
1918        if (newIndex < 0) {
1919            // This can fail if the resource being referenced is a style...
1920            // in this case, just return the reference, and expect the
1921            // caller to deal with.
1922            return blockIndex;
1923        }
1924        blockIndex = newIndex;
1925        count++;
1926    }
1927    return blockIndex;
1928}
1929
1930const char16_t* ResTable::valueToString(
1931    const Res_value* value, size_t stringBlock,
1932    char16_t tmpBuffer[TMP_BUFFER_SIZE], size_t* outLen)
1933{
1934    if (!value) {
1935        return NULL;
1936    }
1937    if (value->dataType == value->TYPE_STRING) {
1938        return getTableStringBlock(stringBlock)->stringAt(value->data, outLen);
1939    }
1940    // XXX do int to string conversions.
1941    return NULL;
1942}
1943
1944ssize_t ResTable::lockBag(uint32_t resID, const bag_entry** outBag) const
1945{
1946    mLock.lock();
1947    ssize_t err = getBagLocked(resID, outBag);
1948    if (err < NO_ERROR) {
1949        //printf("*** get failed!  unlocking\n");
1950        mLock.unlock();
1951    }
1952    return err;
1953}
1954
1955void ResTable::unlockBag(const bag_entry* bag) const
1956{
1957    //printf("<<< unlockBag %p\n", this);
1958    mLock.unlock();
1959}
1960
1961void ResTable::lock() const
1962{
1963    mLock.lock();
1964}
1965
1966void ResTable::unlock() const
1967{
1968    mLock.unlock();
1969}
1970
1971ssize_t ResTable::getBagLocked(uint32_t resID, const bag_entry** outBag,
1972        uint32_t* outTypeSpecFlags) const
1973{
1974    if (mError != NO_ERROR) {
1975        return mError;
1976    }
1977
1978    const ssize_t p = getResourcePackageIndex(resID);
1979    const int t = Res_GETTYPE(resID);
1980    const int e = Res_GETENTRY(resID);
1981
1982    if (p < 0) {
1983        LOGW("Invalid package identifier when getting bag for resource number 0x%08x", resID);
1984        return BAD_INDEX;
1985    }
1986    if (t < 0) {
1987        LOGW("No type identifier when getting bag for resource number 0x%08x", resID);
1988        return BAD_INDEX;
1989    }
1990
1991    //printf("Get bag: id=0x%08x, p=%d, t=%d\n", resID, p, t);
1992    PackageGroup* const grp = mPackageGroups[p];
1993    if (grp == NULL) {
1994        LOGW("Bad identifier when getting bag for resource number 0x%08x", resID);
1995        return false;
1996    }
1997
1998    if (t >= (int)grp->typeCount) {
1999        LOGW("Type identifier 0x%x is larger than type count 0x%x",
2000             t+1, (int)grp->typeCount);
2001        return BAD_INDEX;
2002    }
2003
2004    const Package* const basePackage = grp->packages[0];
2005
2006    const Type* const typeConfigs = basePackage->getType(t);
2007
2008    const size_t NENTRY = typeConfigs->entryCount;
2009    if (e >= (int)NENTRY) {
2010        LOGW("Entry identifier 0x%x is larger than entry count 0x%x",
2011             e, (int)typeConfigs->entryCount);
2012        return BAD_INDEX;
2013    }
2014
2015    // First see if we've already computed this bag...
2016    if (grp->bags) {
2017        bag_set** typeSet = grp->bags[t];
2018        if (typeSet) {
2019            bag_set* set = typeSet[e];
2020            if (set) {
2021                if (set != (bag_set*)0xFFFFFFFF) {
2022                    if (outTypeSpecFlags != NULL) {
2023                        *outTypeSpecFlags = set->typeSpecFlags;
2024                    }
2025                    *outBag = (bag_entry*)(set+1);
2026                    //LOGI("Found existing bag for: %p\n", (void*)resID);
2027                    return set->numAttrs;
2028                }
2029                LOGW("Attempt to retrieve bag 0x%08x which is invalid or in a cycle.",
2030                     resID);
2031                return BAD_INDEX;
2032            }
2033        }
2034    }
2035
2036    // Bag not found, we need to compute it!
2037    if (!grp->bags) {
2038        grp->bags = (bag_set***)malloc(sizeof(bag_set*)*grp->typeCount);
2039        if (!grp->bags) return NO_MEMORY;
2040        memset(grp->bags, 0, sizeof(bag_set*)*grp->typeCount);
2041    }
2042
2043    bag_set** typeSet = grp->bags[t];
2044    if (!typeSet) {
2045        typeSet = (bag_set**)malloc(sizeof(bag_set*)*NENTRY);
2046        if (!typeSet) return NO_MEMORY;
2047        memset(typeSet, 0, sizeof(bag_set*)*NENTRY);
2048        grp->bags[t] = typeSet;
2049    }
2050
2051    // Mark that we are currently working on this one.
2052    typeSet[e] = (bag_set*)0xFFFFFFFF;
2053
2054    // This is what we are building.
2055    bag_set* set = NULL;
2056
2057    TABLE_NOISY(LOGI("Building bag: %p\n", (void*)resID));
2058
2059    // Now collect all bag attributes from all packages.
2060    size_t ip = grp->packages.size();
2061    while (ip > 0) {
2062        ip--;
2063
2064        const Package* const package = grp->packages[ip];
2065
2066        const ResTable_type* type;
2067        const ResTable_entry* entry;
2068        const Type* typeClass;
2069        LOGV("Getting entry pkg=%p, t=%d, e=%d\n", package, t, e);
2070        ssize_t offset = getEntry(package, t, e, &mParams, &type, &entry, &typeClass);
2071        LOGV("Resulting offset=%d\n", offset);
2072        if (offset <= 0) {
2073            if (offset < 0) {
2074                if (set) free(set);
2075                return offset;
2076            }
2077            continue;
2078        }
2079
2080        if ((dtohs(entry->flags)&entry->FLAG_COMPLEX) == 0) {
2081            LOGW("Skipping entry %p in package table %d because it is not complex!\n",
2082                 (void*)resID, (int)ip);
2083            continue;
2084        }
2085
2086        const uint16_t entrySize = dtohs(entry->size);
2087        const uint32_t parent = entrySize >= sizeof(ResTable_map_entry)
2088            ? dtohl(((const ResTable_map_entry*)entry)->parent.ident) : 0;
2089        const uint32_t count = entrySize >= sizeof(ResTable_map_entry)
2090            ? dtohl(((const ResTable_map_entry*)entry)->count) : 0;
2091
2092        size_t N = count;
2093
2094        TABLE_NOISY(LOGI("Found map: size=%p parent=%p count=%d\n",
2095                         entrySize, parent, count));
2096
2097        if (set == NULL) {
2098            // If this map inherits from another, we need to start
2099            // with its parent's values.  Otherwise start out empty.
2100            TABLE_NOISY(printf("Creating new bag, entrySize=0x%08x, parent=0x%08x\n",
2101                         entrySize, parent));
2102            if (parent) {
2103                const bag_entry* parentBag;
2104                uint32_t parentTypeSpecFlags = 0;
2105                const ssize_t NP = getBagLocked(parent, &parentBag, &parentTypeSpecFlags);
2106                const size_t NT = ((NP >= 0) ? NP : 0) + N;
2107                set = (bag_set*)malloc(sizeof(bag_set)+sizeof(bag_entry)*NT);
2108                if (set == NULL) {
2109                    return NO_MEMORY;
2110                }
2111                if (NP > 0) {
2112                    memcpy(set+1, parentBag, NP*sizeof(bag_entry));
2113                    set->numAttrs = NP;
2114                    TABLE_NOISY(LOGI("Initialized new bag with %d inherited attributes.\n", NP));
2115                } else {
2116                    TABLE_NOISY(LOGI("Initialized new bag with no inherited attributes.\n"));
2117                    set->numAttrs = 0;
2118                }
2119                set->availAttrs = NT;
2120                set->typeSpecFlags = parentTypeSpecFlags;
2121            } else {
2122                set = (bag_set*)malloc(sizeof(bag_set)+sizeof(bag_entry)*N);
2123                if (set == NULL) {
2124                    return NO_MEMORY;
2125                }
2126                set->numAttrs = 0;
2127                set->availAttrs = N;
2128                set->typeSpecFlags = 0;
2129            }
2130        }
2131
2132        if (typeClass->typeSpecFlags != NULL) {
2133            set->typeSpecFlags |= dtohl(typeClass->typeSpecFlags[e]);
2134        } else {
2135            set->typeSpecFlags = -1;
2136        }
2137
2138        // Now merge in the new attributes...
2139        ssize_t curOff = offset;
2140        const ResTable_map* map;
2141        bag_entry* entries = (bag_entry*)(set+1);
2142        size_t curEntry = 0;
2143        uint32_t pos = 0;
2144        TABLE_NOISY(LOGI("Starting with set %p, entries=%p, avail=%d\n",
2145                     set, entries, set->availAttrs));
2146        while (pos < count) {
2147            TABLE_NOISY(printf("Now at %p\n", (void*)curOff));
2148
2149            if ((size_t)curOff > (dtohl(type->header.size)-sizeof(ResTable_map))) {
2150                LOGW("ResTable_map at %d is beyond type chunk data %d",
2151                     (int)curOff, dtohl(type->header.size));
2152                return BAD_TYPE;
2153            }
2154            map = (const ResTable_map*)(((const uint8_t*)type) + curOff);
2155            N++;
2156
2157            const uint32_t newName = htodl(map->name.ident);
2158            bool isInside;
2159            uint32_t oldName = 0;
2160            while ((isInside=(curEntry < set->numAttrs))
2161                    && (oldName=entries[curEntry].map.name.ident) < newName) {
2162                TABLE_NOISY(printf("#%d: Keeping existing attribute: 0x%08x\n",
2163                             curEntry, entries[curEntry].map.name.ident));
2164                curEntry++;
2165            }
2166
2167            if ((!isInside) || oldName != newName) {
2168                // This is a new attribute...  figure out what to do with it.
2169                if (set->numAttrs >= set->availAttrs) {
2170                    // Need to alloc more memory...
2171                    const size_t newAvail = set->availAttrs+N;
2172                    set = (bag_set*)realloc(set,
2173                                            sizeof(bag_set)
2174                                            + sizeof(bag_entry)*newAvail);
2175                    if (set == NULL) {
2176                        return NO_MEMORY;
2177                    }
2178                    set->availAttrs = newAvail;
2179                    entries = (bag_entry*)(set+1);
2180                    TABLE_NOISY(printf("Reallocated set %p, entries=%p, avail=%d\n",
2181                                 set, entries, set->availAttrs));
2182                }
2183                if (isInside) {
2184                    // Going in the middle, need to make space.
2185                    memmove(entries+curEntry+1, entries+curEntry,
2186                            sizeof(bag_entry)*(set->numAttrs-curEntry));
2187                    set->numAttrs++;
2188                }
2189                TABLE_NOISY(printf("#%d: Inserting new attribute: 0x%08x\n",
2190                             curEntry, newName));
2191            } else {
2192                TABLE_NOISY(printf("#%d: Replacing existing attribute: 0x%08x\n",
2193                             curEntry, oldName));
2194            }
2195
2196            bag_entry* cur = entries+curEntry;
2197
2198            cur->stringBlock = package->header->index;
2199            cur->map.name.ident = newName;
2200            cur->map.value.copyFrom_dtoh(map->value);
2201            TABLE_NOISY(printf("Setting entry #%d %p: block=%d, name=0x%08x, type=%d, data=0x%08x\n",
2202                         curEntry, cur, cur->stringBlock, cur->map.name.ident,
2203                         cur->map.value.dataType, cur->map.value.data));
2204
2205            // On to the next!
2206            curEntry++;
2207            pos++;
2208            const size_t size = dtohs(map->value.size);
2209            curOff += size + sizeof(*map)-sizeof(map->value);
2210        };
2211        if (curEntry > set->numAttrs) {
2212            set->numAttrs = curEntry;
2213        }
2214    }
2215
2216    // And this is it...
2217    typeSet[e] = set;
2218    if (set) {
2219        if (outTypeSpecFlags != NULL) {
2220            *outTypeSpecFlags = set->typeSpecFlags;
2221        }
2222        *outBag = (bag_entry*)(set+1);
2223        TABLE_NOISY(LOGI("Returning %d attrs\n", set->numAttrs));
2224        return set->numAttrs;
2225    }
2226    return BAD_INDEX;
2227}
2228
2229void ResTable::setParameters(const ResTable_config* params)
2230{
2231    mLock.lock();
2232    TABLE_GETENTRY(LOGI("Setting parameters: imsi:%d/%d lang:%c%c cnt:%c%c "
2233                        "orien:%d touch:%d density:%d key:%d inp:%d nav:%d w:%d h:%d\n",
2234                       params->mcc, params->mnc,
2235                       params->language[0] ? params->language[0] : '-',
2236                       params->language[1] ? params->language[1] : '-',
2237                       params->country[0] ? params->country[0] : '-',
2238                       params->country[1] ? params->country[1] : '-',
2239                       params->orientation,
2240                       params->touchscreen,
2241                       params->density,
2242                       params->keyboard,
2243                       params->inputFlags,
2244                       params->navigation,
2245                       params->screenWidth,
2246                       params->screenHeight));
2247    mParams = *params;
2248    for (size_t i=0; i<mPackageGroups.size(); i++) {
2249        TABLE_NOISY(LOGI("CLEARING BAGS FOR GROUP %d!", i));
2250        mPackageGroups[i]->clearBagCache();
2251    }
2252    mLock.unlock();
2253}
2254
2255void ResTable::getParameters(ResTable_config* params) const
2256{
2257    mLock.lock();
2258    *params = mParams;
2259    mLock.unlock();
2260}
2261
2262struct id_name_map {
2263    uint32_t id;
2264    size_t len;
2265    char16_t name[6];
2266};
2267
2268const static id_name_map ID_NAMES[] = {
2269    { ResTable_map::ATTR_TYPE,  5, { '^', 't', 'y', 'p', 'e' } },
2270    { ResTable_map::ATTR_L10N,  5, { '^', 'l', '1', '0', 'n' } },
2271    { ResTable_map::ATTR_MIN,   4, { '^', 'm', 'i', 'n' } },
2272    { ResTable_map::ATTR_MAX,   4, { '^', 'm', 'a', 'x' } },
2273    { ResTable_map::ATTR_OTHER, 6, { '^', 'o', 't', 'h', 'e', 'r' } },
2274    { ResTable_map::ATTR_ZERO,  5, { '^', 'z', 'e', 'r', 'o' } },
2275    { ResTable_map::ATTR_ONE,   4, { '^', 'o', 'n', 'e' } },
2276    { ResTable_map::ATTR_TWO,   4, { '^', 't', 'w', 'o' } },
2277    { ResTable_map::ATTR_FEW,   4, { '^', 'f', 'e', 'w' } },
2278    { ResTable_map::ATTR_MANY,  5, { '^', 'm', 'a', 'n', 'y' } },
2279};
2280
2281uint32_t ResTable::identifierForName(const char16_t* name, size_t nameLen,
2282                                     const char16_t* type, size_t typeLen,
2283                                     const char16_t* package,
2284                                     size_t packageLen,
2285                                     uint32_t* outTypeSpecFlags) const
2286{
2287    TABLE_SUPER_NOISY(printf("Identifier for name: error=%d\n", mError));
2288
2289    // Check for internal resource identifier as the very first thing, so
2290    // that we will always find them even when there are no resources.
2291    if (name[0] == '^') {
2292        const int N = (sizeof(ID_NAMES)/sizeof(ID_NAMES[0]));
2293        size_t len;
2294        for (int i=0; i<N; i++) {
2295            const id_name_map* m = ID_NAMES + i;
2296            len = m->len;
2297            if (len != nameLen) {
2298                continue;
2299            }
2300            for (size_t j=1; j<len; j++) {
2301                if (m->name[j] != name[j]) {
2302                    goto nope;
2303                }
2304            }
2305            return m->id;
2306nope:
2307            ;
2308        }
2309        if (nameLen > 7) {
2310            if (name[1] == 'i' && name[2] == 'n'
2311                && name[3] == 'd' && name[4] == 'e' && name[5] == 'x'
2312                && name[6] == '_') {
2313                int index = atoi(String8(name + 7, nameLen - 7).string());
2314                if (Res_CHECKID(index)) {
2315                    LOGW("Array resource index: %d is too large.",
2316                         index);
2317                    return 0;
2318                }
2319                return  Res_MAKEARRAY(index);
2320            }
2321        }
2322        return 0;
2323    }
2324
2325    if (mError != NO_ERROR) {
2326        return 0;
2327    }
2328
2329    // Figure out the package and type we are looking in...
2330
2331    const char16_t* packageEnd = NULL;
2332    const char16_t* typeEnd = NULL;
2333    const char16_t* const nameEnd = name+nameLen;
2334    const char16_t* p = name;
2335    while (p < nameEnd) {
2336        if (*p == ':') packageEnd = p;
2337        else if (*p == '/') typeEnd = p;
2338        p++;
2339    }
2340    if (*name == '@') name++;
2341    if (name >= nameEnd) {
2342        return 0;
2343    }
2344
2345    if (packageEnd) {
2346        package = name;
2347        packageLen = packageEnd-name;
2348        name = packageEnd+1;
2349    } else if (!package) {
2350        return 0;
2351    }
2352
2353    if (typeEnd) {
2354        type = name;
2355        typeLen = typeEnd-name;
2356        name = typeEnd+1;
2357    } else if (!type) {
2358        return 0;
2359    }
2360
2361    if (name >= nameEnd) {
2362        return 0;
2363    }
2364    nameLen = nameEnd-name;
2365
2366    TABLE_NOISY(printf("Looking for identifier: type=%s, name=%s, package=%s\n",
2367                 String8(type, typeLen).string(),
2368                 String8(name, nameLen).string(),
2369                 String8(package, packageLen).string()));
2370
2371    const size_t NG = mPackageGroups.size();
2372    for (size_t ig=0; ig<NG; ig++) {
2373        const PackageGroup* group = mPackageGroups[ig];
2374
2375        if (strzcmp16(package, packageLen,
2376                      group->name.string(), group->name.size())) {
2377            TABLE_NOISY(printf("Skipping package group: %s\n", String8(group->name).string()));
2378            continue;
2379        }
2380
2381        const ssize_t ti = group->basePackage->typeStrings.indexOfString(type, typeLen);
2382        if (ti < 0) {
2383            TABLE_NOISY(printf("Type not found in package %s\n", String8(group->name).string()));
2384            continue;
2385        }
2386
2387        const ssize_t ei = group->basePackage->keyStrings.indexOfString(name, nameLen);
2388        if (ei < 0) {
2389            TABLE_NOISY(printf("Name not found in package %s\n", String8(group->name).string()));
2390            continue;
2391        }
2392
2393        TABLE_NOISY(printf("Search indices: type=%d, name=%d\n", ti, ei));
2394
2395        const Type* const typeConfigs = group->packages[0]->getType(ti);
2396        if (typeConfigs == NULL || typeConfigs->configs.size() <= 0) {
2397            TABLE_NOISY(printf("Expected type structure not found in package %s for idnex %d\n",
2398                               String8(group->name).string(), ti));
2399        }
2400
2401        size_t NTC = typeConfigs->configs.size();
2402        for (size_t tci=0; tci<NTC; tci++) {
2403            const ResTable_type* const ty = typeConfigs->configs[tci];
2404            const uint32_t typeOffset = dtohl(ty->entriesStart);
2405
2406            const uint8_t* const end = ((const uint8_t*)ty) + dtohl(ty->header.size);
2407            const uint32_t* const eindex = (const uint32_t*)
2408                (((const uint8_t*)ty) + dtohs(ty->header.headerSize));
2409
2410            const size_t NE = dtohl(ty->entryCount);
2411            for (size_t i=0; i<NE; i++) {
2412                uint32_t offset = dtohl(eindex[i]);
2413                if (offset == ResTable_type::NO_ENTRY) {
2414                    continue;
2415                }
2416
2417                offset += typeOffset;
2418
2419                if (offset > (dtohl(ty->header.size)-sizeof(ResTable_entry))) {
2420                    LOGW("ResTable_entry at %d is beyond type chunk data %d",
2421                         offset, dtohl(ty->header.size));
2422                    return 0;
2423                }
2424                if ((offset&0x3) != 0) {
2425                    LOGW("ResTable_entry at %d (pkg=%d type=%d ent=%d) is not on an integer boundary when looking for %s:%s/%s",
2426                         (int)offset, (int)group->id, (int)ti+1, (int)i,
2427                         String8(package, packageLen).string(),
2428                         String8(type, typeLen).string(),
2429                         String8(name, nameLen).string());
2430                    return 0;
2431                }
2432
2433                const ResTable_entry* const entry = (const ResTable_entry*)
2434                    (((const uint8_t*)ty) + offset);
2435                if (dtohs(entry->size) < sizeof(*entry)) {
2436                    LOGW("ResTable_entry size %d is too small", dtohs(entry->size));
2437                    return BAD_TYPE;
2438                }
2439
2440                TABLE_SUPER_NOISY(printf("Looking at entry #%d: want str %d, have %d\n",
2441                                         i, ei, dtohl(entry->key.index)));
2442                if (dtohl(entry->key.index) == (size_t)ei) {
2443                    if (outTypeSpecFlags) {
2444                        *outTypeSpecFlags = typeConfigs->typeSpecFlags[i];
2445                    }
2446                    return Res_MAKEID(group->id-1, ti, i);
2447                }
2448            }
2449        }
2450    }
2451
2452    return 0;
2453}
2454
2455bool ResTable::expandResourceRef(const uint16_t* refStr, size_t refLen,
2456                                 String16* outPackage,
2457                                 String16* outType,
2458                                 String16* outName,
2459                                 const String16* defType,
2460                                 const String16* defPackage,
2461                                 const char** outErrorMsg)
2462{
2463    const char16_t* packageEnd = NULL;
2464    const char16_t* typeEnd = NULL;
2465    const char16_t* p = refStr;
2466    const char16_t* const end = p + refLen;
2467    while (p < end) {
2468        if (*p == ':') packageEnd = p;
2469        else if (*p == '/') {
2470            typeEnd = p;
2471            break;
2472        }
2473        p++;
2474    }
2475    p = refStr;
2476    if (*p == '@') p++;
2477
2478    if (packageEnd) {
2479        *outPackage = String16(p, packageEnd-p);
2480        p = packageEnd+1;
2481    } else {
2482        if (!defPackage) {
2483            if (outErrorMsg) {
2484                *outErrorMsg = "No resource package specified";
2485            }
2486            return false;
2487        }
2488        *outPackage = *defPackage;
2489    }
2490    if (typeEnd) {
2491        *outType = String16(p, typeEnd-p);
2492        p = typeEnd+1;
2493    } else {
2494        if (!defType) {
2495            if (outErrorMsg) {
2496                *outErrorMsg = "No resource type specified";
2497            }
2498            return false;
2499        }
2500        *outType = *defType;
2501    }
2502    *outName = String16(p, end-p);
2503    return true;
2504}
2505
2506static uint32_t get_hex(char c, bool* outError)
2507{
2508    if (c >= '0' && c <= '9') {
2509        return c - '0';
2510    } else if (c >= 'a' && c <= 'f') {
2511        return c - 'a' + 0xa;
2512    } else if (c >= 'A' && c <= 'F') {
2513        return c - 'A' + 0xa;
2514    }
2515    *outError = true;
2516    return 0;
2517}
2518
2519struct unit_entry
2520{
2521    const char* name;
2522    size_t len;
2523    uint8_t type;
2524    uint32_t unit;
2525    float scale;
2526};
2527
2528static const unit_entry unitNames[] = {
2529    { "px", strlen("px"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_PX, 1.0f },
2530    { "dip", strlen("dip"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_DIP, 1.0f },
2531    { "dp", strlen("dp"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_DIP, 1.0f },
2532    { "sp", strlen("sp"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_SP, 1.0f },
2533    { "pt", strlen("pt"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_PT, 1.0f },
2534    { "in", strlen("in"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_IN, 1.0f },
2535    { "mm", strlen("mm"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_MM, 1.0f },
2536    { "%", strlen("%"), Res_value::TYPE_FRACTION, Res_value::COMPLEX_UNIT_FRACTION, 1.0f/100 },
2537    { "%p", strlen("%p"), Res_value::TYPE_FRACTION, Res_value::COMPLEX_UNIT_FRACTION_PARENT, 1.0f/100 },
2538    { NULL, 0, 0, 0, 0 }
2539};
2540
2541static bool parse_unit(const char* str, Res_value* outValue,
2542                       float* outScale, const char** outEnd)
2543{
2544    const char* end = str;
2545    while (*end != 0 && !isspace((unsigned char)*end)) {
2546        end++;
2547    }
2548    const size_t len = end-str;
2549
2550    const char* realEnd = end;
2551    while (*realEnd != 0 && isspace((unsigned char)*realEnd)) {
2552        realEnd++;
2553    }
2554    if (*realEnd != 0) {
2555        return false;
2556    }
2557
2558    const unit_entry* cur = unitNames;
2559    while (cur->name) {
2560        if (len == cur->len && strncmp(cur->name, str, len) == 0) {
2561            outValue->dataType = cur->type;
2562            outValue->data = cur->unit << Res_value::COMPLEX_UNIT_SHIFT;
2563            *outScale = cur->scale;
2564            *outEnd = end;
2565            //printf("Found unit %s for %s\n", cur->name, str);
2566            return true;
2567        }
2568        cur++;
2569    }
2570
2571    return false;
2572}
2573
2574
2575bool ResTable::stringToInt(const char16_t* s, size_t len, Res_value* outValue)
2576{
2577    while (len > 0 && isspace16(*s)) {
2578        s++;
2579        len--;
2580    }
2581
2582    if (len <= 0) {
2583        return false;
2584    }
2585
2586    size_t i = 0;
2587    int32_t val = 0;
2588    bool neg = false;
2589
2590    if (*s == '-') {
2591        neg = true;
2592        i++;
2593    }
2594
2595    if (s[i] < '0' || s[i] > '9') {
2596        return false;
2597    }
2598
2599    // Decimal or hex?
2600    if (s[i] == '0' && s[i+1] == 'x') {
2601        if (outValue)
2602            outValue->dataType = outValue->TYPE_INT_HEX;
2603        i += 2;
2604        bool error = false;
2605        while (i < len && !error) {
2606            val = (val*16) + get_hex(s[i], &error);
2607            i++;
2608        }
2609        if (error) {
2610            return false;
2611        }
2612    } else {
2613        if (outValue)
2614            outValue->dataType = outValue->TYPE_INT_DEC;
2615        while (i < len) {
2616            if (s[i] < '0' || s[i] > '9') {
2617                return false;
2618            }
2619            val = (val*10) + s[i]-'0';
2620            i++;
2621        }
2622    }
2623
2624    if (neg) val = -val;
2625
2626    while (i < len && isspace16(s[i])) {
2627        i++;
2628    }
2629
2630    if (i == len) {
2631        if (outValue)
2632            outValue->data = val;
2633        return true;
2634    }
2635
2636    return false;
2637}
2638
2639bool ResTable::stringToFloat(const char16_t* s, size_t len, Res_value* outValue)
2640{
2641    while (len > 0 && isspace16(*s)) {
2642        s++;
2643        len--;
2644    }
2645
2646    if (len <= 0) {
2647        return false;
2648    }
2649
2650    char buf[128];
2651    int i=0;
2652    while (len > 0 && *s != 0 && i < 126) {
2653        if (*s > 255) {
2654            return false;
2655        }
2656        buf[i++] = *s++;
2657        len--;
2658    }
2659
2660    if (len > 0) {
2661        return false;
2662    }
2663    if (buf[0] < '0' && buf[0] > '9' && buf[0] != '.') {
2664        return false;
2665    }
2666
2667    buf[i] = 0;
2668    const char* end;
2669    float f = strtof(buf, (char**)&end);
2670
2671    if (*end != 0 && !isspace((unsigned char)*end)) {
2672        // Might be a unit...
2673        float scale;
2674        if (parse_unit(end, outValue, &scale, &end)) {
2675            f *= scale;
2676            const bool neg = f < 0;
2677            if (neg) f = -f;
2678            uint64_t bits = (uint64_t)(f*(1<<23)+.5f);
2679            uint32_t radix;
2680            uint32_t shift;
2681            if ((bits&0x7fffff) == 0) {
2682                // Always use 23p0 if there is no fraction, just to make
2683                // things easier to read.
2684                radix = Res_value::COMPLEX_RADIX_23p0;
2685                shift = 23;
2686            } else if ((bits&0xffffffffff800000LL) == 0) {
2687                // Magnitude is zero -- can fit in 0 bits of precision.
2688                radix = Res_value::COMPLEX_RADIX_0p23;
2689                shift = 0;
2690            } else if ((bits&0xffffffff80000000LL) == 0) {
2691                // Magnitude can fit in 8 bits of precision.
2692                radix = Res_value::COMPLEX_RADIX_8p15;
2693                shift = 8;
2694            } else if ((bits&0xffffff8000000000LL) == 0) {
2695                // Magnitude can fit in 16 bits of precision.
2696                radix = Res_value::COMPLEX_RADIX_16p7;
2697                shift = 16;
2698            } else {
2699                // Magnitude needs entire range, so no fractional part.
2700                radix = Res_value::COMPLEX_RADIX_23p0;
2701                shift = 23;
2702            }
2703            int32_t mantissa = (int32_t)(
2704                (bits>>shift) & Res_value::COMPLEX_MANTISSA_MASK);
2705            if (neg) {
2706                mantissa = (-mantissa) & Res_value::COMPLEX_MANTISSA_MASK;
2707            }
2708            outValue->data |=
2709                (radix<<Res_value::COMPLEX_RADIX_SHIFT)
2710                | (mantissa<<Res_value::COMPLEX_MANTISSA_SHIFT);
2711            //printf("Input value: %f 0x%016Lx, mult: %f, radix: %d, shift: %d, final: 0x%08x\n",
2712            //       f * (neg ? -1 : 1), bits, f*(1<<23),
2713            //       radix, shift, outValue->data);
2714            return true;
2715        }
2716        return false;
2717    }
2718
2719    while (*end != 0 && isspace((unsigned char)*end)) {
2720        end++;
2721    }
2722
2723    if (*end == 0) {
2724        if (outValue) {
2725            outValue->dataType = outValue->TYPE_FLOAT;
2726            *(float*)(&outValue->data) = f;
2727            return true;
2728        }
2729    }
2730
2731    return false;
2732}
2733
2734bool ResTable::stringToValue(Res_value* outValue, String16* outString,
2735                             const char16_t* s, size_t len,
2736                             bool preserveSpaces, bool coerceType,
2737                             uint32_t attrID,
2738                             const String16* defType,
2739                             const String16* defPackage,
2740                             Accessor* accessor,
2741                             void* accessorCookie,
2742                             uint32_t attrType,
2743                             bool enforcePrivate) const
2744{
2745    bool localizationSetting = accessor != NULL && accessor->getLocalizationSetting();
2746    const char* errorMsg = NULL;
2747
2748    outValue->size = sizeof(Res_value);
2749    outValue->res0 = 0;
2750
2751    // First strip leading/trailing whitespace.  Do this before handling
2752    // escapes, so they can be used to force whitespace into the string.
2753    if (!preserveSpaces) {
2754        while (len > 0 && isspace16(*s)) {
2755            s++;
2756            len--;
2757        }
2758        while (len > 0 && isspace16(s[len-1])) {
2759            len--;
2760        }
2761        // If the string ends with '\', then we keep the space after it.
2762        if (len > 0 && s[len-1] == '\\' && s[len] != 0) {
2763            len++;
2764        }
2765    }
2766
2767    //printf("Value for: %s\n", String8(s, len).string());
2768
2769    uint32_t l10nReq = ResTable_map::L10N_NOT_REQUIRED;
2770    uint32_t attrMin = 0x80000000, attrMax = 0x7fffffff;
2771    bool fromAccessor = false;
2772    if (attrID != 0 && !Res_INTERNALID(attrID)) {
2773        const ssize_t p = getResourcePackageIndex(attrID);
2774        const bag_entry* bag;
2775        ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
2776        //printf("For attr 0x%08x got bag of %d\n", attrID, cnt);
2777        if (cnt >= 0) {
2778            while (cnt > 0) {
2779                //printf("Entry 0x%08x = 0x%08x\n", bag->map.name.ident, bag->map.value.data);
2780                switch (bag->map.name.ident) {
2781                case ResTable_map::ATTR_TYPE:
2782                    attrType = bag->map.value.data;
2783                    break;
2784                case ResTable_map::ATTR_MIN:
2785                    attrMin = bag->map.value.data;
2786                    break;
2787                case ResTable_map::ATTR_MAX:
2788                    attrMax = bag->map.value.data;
2789                    break;
2790                case ResTable_map::ATTR_L10N:
2791                    l10nReq = bag->map.value.data;
2792                    break;
2793                }
2794                bag++;
2795                cnt--;
2796            }
2797            unlockBag(bag);
2798        } else if (accessor && accessor->getAttributeType(attrID, &attrType)) {
2799            fromAccessor = true;
2800            if (attrType == ResTable_map::TYPE_ENUM
2801                    || attrType == ResTable_map::TYPE_FLAGS
2802                    || attrType == ResTable_map::TYPE_INTEGER) {
2803                accessor->getAttributeMin(attrID, &attrMin);
2804                accessor->getAttributeMax(attrID, &attrMax);
2805            }
2806            if (localizationSetting) {
2807                l10nReq = accessor->getAttributeL10N(attrID);
2808            }
2809        }
2810    }
2811
2812    const bool canStringCoerce =
2813        coerceType && (attrType&ResTable_map::TYPE_STRING) != 0;
2814
2815    if (*s == '@') {
2816        outValue->dataType = outValue->TYPE_REFERENCE;
2817
2818        // Note: we don't check attrType here because the reference can
2819        // be to any other type; we just need to count on the client making
2820        // sure the referenced type is correct.
2821
2822        //printf("Looking up ref: %s\n", String8(s, len).string());
2823
2824        // It's a reference!
2825        if (len == 5 && s[1]=='n' && s[2]=='u' && s[3]=='l' && s[4]=='l') {
2826            outValue->data = 0;
2827            return true;
2828        } else {
2829            bool createIfNotFound = false;
2830            const char16_t* resourceRefName;
2831            int resourceNameLen;
2832            if (len > 2 && s[1] == '+') {
2833                createIfNotFound = true;
2834                resourceRefName = s + 2;
2835                resourceNameLen = len - 2;
2836            } else if (len > 2 && s[1] == '*') {
2837                enforcePrivate = false;
2838                resourceRefName = s + 2;
2839                resourceNameLen = len - 2;
2840            } else {
2841                createIfNotFound = false;
2842                resourceRefName = s + 1;
2843                resourceNameLen = len - 1;
2844            }
2845            String16 package, type, name;
2846            if (!expandResourceRef(resourceRefName,resourceNameLen, &package, &type, &name,
2847                                   defType, defPackage, &errorMsg)) {
2848                if (accessor != NULL) {
2849                    accessor->reportError(accessorCookie, errorMsg);
2850                }
2851                return false;
2852            }
2853
2854            uint32_t specFlags = 0;
2855            uint32_t rid = identifierForName(name.string(), name.size(), type.string(),
2856                    type.size(), package.string(), package.size(), &specFlags);
2857            if (rid != 0) {
2858                if (enforcePrivate) {
2859                    if ((specFlags&ResTable_typeSpec::SPEC_PUBLIC) == 0) {
2860                        if (accessor != NULL) {
2861                            accessor->reportError(accessorCookie, "Resource is not public.");
2862                        }
2863                        return false;
2864                    }
2865                }
2866                if (!accessor) {
2867                    outValue->data = rid;
2868                    return true;
2869                }
2870                rid = Res_MAKEID(
2871                    accessor->getRemappedPackage(Res_GETPACKAGE(rid)),
2872                    Res_GETTYPE(rid), Res_GETENTRY(rid));
2873                TABLE_NOISY(printf("Incl %s:%s/%s: 0x%08x\n",
2874                       String8(package).string(), String8(type).string(),
2875                       String8(name).string(), rid));
2876                outValue->data = rid;
2877                return true;
2878            }
2879
2880            if (accessor) {
2881                uint32_t rid = accessor->getCustomResourceWithCreation(package, type, name,
2882                                                                       createIfNotFound);
2883                if (rid != 0) {
2884                    TABLE_NOISY(printf("Pckg %s:%s/%s: 0x%08x\n",
2885                           String8(package).string(), String8(type).string(),
2886                           String8(name).string(), rid));
2887                    outValue->data = rid;
2888                    return true;
2889                }
2890            }
2891        }
2892
2893        if (accessor != NULL) {
2894            accessor->reportError(accessorCookie, "No resource found that matches the given name");
2895        }
2896        return false;
2897    }
2898
2899    // if we got to here, and localization is required and it's not a reference,
2900    // complain and bail.
2901    if (l10nReq == ResTable_map::L10N_SUGGESTED) {
2902        if (localizationSetting) {
2903            if (accessor != NULL) {
2904                accessor->reportError(accessorCookie, "This attribute must be localized.");
2905            }
2906        }
2907    }
2908
2909    if (*s == '#') {
2910        // It's a color!  Convert to an integer of the form 0xaarrggbb.
2911        uint32_t color = 0;
2912        bool error = false;
2913        if (len == 4) {
2914            outValue->dataType = outValue->TYPE_INT_COLOR_RGB4;
2915            color |= 0xFF000000;
2916            color |= get_hex(s[1], &error) << 20;
2917            color |= get_hex(s[1], &error) << 16;
2918            color |= get_hex(s[2], &error) << 12;
2919            color |= get_hex(s[2], &error) << 8;
2920            color |= get_hex(s[3], &error) << 4;
2921            color |= get_hex(s[3], &error);
2922        } else if (len == 5) {
2923            outValue->dataType = outValue->TYPE_INT_COLOR_ARGB4;
2924            color |= get_hex(s[1], &error) << 28;
2925            color |= get_hex(s[1], &error) << 24;
2926            color |= get_hex(s[2], &error) << 20;
2927            color |= get_hex(s[2], &error) << 16;
2928            color |= get_hex(s[3], &error) << 12;
2929            color |= get_hex(s[3], &error) << 8;
2930            color |= get_hex(s[4], &error) << 4;
2931            color |= get_hex(s[4], &error);
2932        } else if (len == 7) {
2933            outValue->dataType = outValue->TYPE_INT_COLOR_RGB8;
2934            color |= 0xFF000000;
2935            color |= get_hex(s[1], &error) << 20;
2936            color |= get_hex(s[2], &error) << 16;
2937            color |= get_hex(s[3], &error) << 12;
2938            color |= get_hex(s[4], &error) << 8;
2939            color |= get_hex(s[5], &error) << 4;
2940            color |= get_hex(s[6], &error);
2941        } else if (len == 9) {
2942            outValue->dataType = outValue->TYPE_INT_COLOR_ARGB8;
2943            color |= get_hex(s[1], &error) << 28;
2944            color |= get_hex(s[2], &error) << 24;
2945            color |= get_hex(s[3], &error) << 20;
2946            color |= get_hex(s[4], &error) << 16;
2947            color |= get_hex(s[5], &error) << 12;
2948            color |= get_hex(s[6], &error) << 8;
2949            color |= get_hex(s[7], &error) << 4;
2950            color |= get_hex(s[8], &error);
2951        } else {
2952            error = true;
2953        }
2954        if (!error) {
2955            if ((attrType&ResTable_map::TYPE_COLOR) == 0) {
2956                if (!canStringCoerce) {
2957                    if (accessor != NULL) {
2958                        accessor->reportError(accessorCookie,
2959                                "Color types not allowed");
2960                    }
2961                    return false;
2962                }
2963            } else {
2964                outValue->data = color;
2965                //printf("Color input=%s, output=0x%x\n", String8(s, len).string(), color);
2966                return true;
2967            }
2968        } else {
2969            if ((attrType&ResTable_map::TYPE_COLOR) != 0) {
2970                if (accessor != NULL) {
2971                    accessor->reportError(accessorCookie, "Color value not valid --"
2972                            " must be #rgb, #argb, #rrggbb, or #aarrggbb");
2973                }
2974                #if 0
2975                fprintf(stderr, "%s: Color ID %s value %s is not valid\n",
2976                        "Resource File", //(const char*)in->getPrintableSource(),
2977                        String8(*curTag).string(),
2978                        String8(s, len).string());
2979                #endif
2980                return false;
2981            }
2982        }
2983    }
2984
2985    if (*s == '?') {
2986        outValue->dataType = outValue->TYPE_ATTRIBUTE;
2987
2988        // Note: we don't check attrType here because the reference can
2989        // be to any other type; we just need to count on the client making
2990        // sure the referenced type is correct.
2991
2992        //printf("Looking up attr: %s\n", String8(s, len).string());
2993
2994        static const String16 attr16("attr");
2995        String16 package, type, name;
2996        if (!expandResourceRef(s+1, len-1, &package, &type, &name,
2997                               &attr16, defPackage, &errorMsg)) {
2998            if (accessor != NULL) {
2999                accessor->reportError(accessorCookie, errorMsg);
3000            }
3001            return false;
3002        }
3003
3004        //printf("Pkg: %s, Type: %s, Name: %s\n",
3005        //       String8(package).string(), String8(type).string(),
3006        //       String8(name).string());
3007        uint32_t specFlags = 0;
3008        uint32_t rid =
3009            identifierForName(name.string(), name.size(),
3010                              type.string(), type.size(),
3011                              package.string(), package.size(), &specFlags);
3012        if (rid != 0) {
3013            if (enforcePrivate) {
3014                if ((specFlags&ResTable_typeSpec::SPEC_PUBLIC) == 0) {
3015                    if (accessor != NULL) {
3016                        accessor->reportError(accessorCookie, "Attribute is not public.");
3017                    }
3018                    return false;
3019                }
3020            }
3021            if (!accessor) {
3022                outValue->data = rid;
3023                return true;
3024            }
3025            rid = Res_MAKEID(
3026                accessor->getRemappedPackage(Res_GETPACKAGE(rid)),
3027                Res_GETTYPE(rid), Res_GETENTRY(rid));
3028            //printf("Incl %s:%s/%s: 0x%08x\n",
3029            //       String8(package).string(), String8(type).string(),
3030            //       String8(name).string(), rid);
3031            outValue->data = rid;
3032            return true;
3033        }
3034
3035        if (accessor) {
3036            uint32_t rid = accessor->getCustomResource(package, type, name);
3037            if (rid != 0) {
3038                //printf("Mine %s:%s/%s: 0x%08x\n",
3039                //       String8(package).string(), String8(type).string(),
3040                //       String8(name).string(), rid);
3041                outValue->data = rid;
3042                return true;
3043            }
3044        }
3045
3046        if (accessor != NULL) {
3047            accessor->reportError(accessorCookie, "No resource found that matches the given name");
3048        }
3049        return false;
3050    }
3051
3052    if (stringToInt(s, len, outValue)) {
3053        if ((attrType&ResTable_map::TYPE_INTEGER) == 0) {
3054            // If this type does not allow integers, but does allow floats,
3055            // fall through on this error case because the float type should
3056            // be able to accept any integer value.
3057            if (!canStringCoerce && (attrType&ResTable_map::TYPE_FLOAT) == 0) {
3058                if (accessor != NULL) {
3059                    accessor->reportError(accessorCookie, "Integer types not allowed");
3060                }
3061                return false;
3062            }
3063        } else {
3064            if (((int32_t)outValue->data) < ((int32_t)attrMin)
3065                    || ((int32_t)outValue->data) > ((int32_t)attrMax)) {
3066                if (accessor != NULL) {
3067                    accessor->reportError(accessorCookie, "Integer value out of range");
3068                }
3069                return false;
3070            }
3071            return true;
3072        }
3073    }
3074
3075    if (stringToFloat(s, len, outValue)) {
3076        if (outValue->dataType == Res_value::TYPE_DIMENSION) {
3077            if ((attrType&ResTable_map::TYPE_DIMENSION) != 0) {
3078                return true;
3079            }
3080            if (!canStringCoerce) {
3081                if (accessor != NULL) {
3082                    accessor->reportError(accessorCookie, "Dimension types not allowed");
3083                }
3084                return false;
3085            }
3086        } else if (outValue->dataType == Res_value::TYPE_FRACTION) {
3087            if ((attrType&ResTable_map::TYPE_FRACTION) != 0) {
3088                return true;
3089            }
3090            if (!canStringCoerce) {
3091                if (accessor != NULL) {
3092                    accessor->reportError(accessorCookie, "Fraction types not allowed");
3093                }
3094                return false;
3095            }
3096        } else if ((attrType&ResTable_map::TYPE_FLOAT) == 0) {
3097            if (!canStringCoerce) {
3098                if (accessor != NULL) {
3099                    accessor->reportError(accessorCookie, "Float types not allowed");
3100                }
3101                return false;
3102            }
3103        } else {
3104            return true;
3105        }
3106    }
3107
3108    if (len == 4) {
3109        if ((s[0] == 't' || s[0] == 'T') &&
3110            (s[1] == 'r' || s[1] == 'R') &&
3111            (s[2] == 'u' || s[2] == 'U') &&
3112            (s[3] == 'e' || s[3] == 'E')) {
3113            if ((attrType&ResTable_map::TYPE_BOOLEAN) == 0) {
3114                if (!canStringCoerce) {
3115                    if (accessor != NULL) {
3116                        accessor->reportError(accessorCookie, "Boolean types not allowed");
3117                    }
3118                    return false;
3119                }
3120            } else {
3121                outValue->dataType = outValue->TYPE_INT_BOOLEAN;
3122                outValue->data = (uint32_t)-1;
3123                return true;
3124            }
3125        }
3126    }
3127
3128    if (len == 5) {
3129        if ((s[0] == 'f' || s[0] == 'F') &&
3130            (s[1] == 'a' || s[1] == 'A') &&
3131            (s[2] == 'l' || s[2] == 'L') &&
3132            (s[3] == 's' || s[3] == 'S') &&
3133            (s[4] == 'e' || s[4] == 'E')) {
3134            if ((attrType&ResTable_map::TYPE_BOOLEAN) == 0) {
3135                if (!canStringCoerce) {
3136                    if (accessor != NULL) {
3137                        accessor->reportError(accessorCookie, "Boolean types not allowed");
3138                    }
3139                    return false;
3140                }
3141            } else {
3142                outValue->dataType = outValue->TYPE_INT_BOOLEAN;
3143                outValue->data = 0;
3144                return true;
3145            }
3146        }
3147    }
3148
3149    if ((attrType&ResTable_map::TYPE_ENUM) != 0) {
3150        const ssize_t p = getResourcePackageIndex(attrID);
3151        const bag_entry* bag;
3152        ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
3153        //printf("Got %d for enum\n", cnt);
3154        if (cnt >= 0) {
3155            resource_name rname;
3156            while (cnt > 0) {
3157                if (!Res_INTERNALID(bag->map.name.ident)) {
3158                    //printf("Trying attr #%08x\n", bag->map.name.ident);
3159                    if (getResourceName(bag->map.name.ident, &rname)) {
3160                        #if 0
3161                        printf("Matching %s against %s (0x%08x)\n",
3162                               String8(s, len).string(),
3163                               String8(rname.name, rname.nameLen).string(),
3164                               bag->map.name.ident);
3165                        #endif
3166                        if (strzcmp16(s, len, rname.name, rname.nameLen) == 0) {
3167                            outValue->dataType = bag->map.value.dataType;
3168                            outValue->data = bag->map.value.data;
3169                            unlockBag(bag);
3170                            return true;
3171                        }
3172                    }
3173
3174                }
3175                bag++;
3176                cnt--;
3177            }
3178            unlockBag(bag);
3179        }
3180
3181        if (fromAccessor) {
3182            if (accessor->getAttributeEnum(attrID, s, len, outValue)) {
3183                return true;
3184            }
3185        }
3186    }
3187
3188    if ((attrType&ResTable_map::TYPE_FLAGS) != 0) {
3189        const ssize_t p = getResourcePackageIndex(attrID);
3190        const bag_entry* bag;
3191        ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
3192        //printf("Got %d for flags\n", cnt);
3193        if (cnt >= 0) {
3194            bool failed = false;
3195            resource_name rname;
3196            outValue->dataType = Res_value::TYPE_INT_HEX;
3197            outValue->data = 0;
3198            const char16_t* end = s + len;
3199            const char16_t* pos = s;
3200            while (pos < end && !failed) {
3201                const char16_t* start = pos;
3202                pos++;
3203                while (pos < end && *pos != '|') {
3204                    pos++;
3205                }
3206                //printf("Looking for: %s\n", String8(start, pos-start).string());
3207                const bag_entry* bagi = bag;
3208                ssize_t i;
3209                for (i=0; i<cnt; i++, bagi++) {
3210                    if (!Res_INTERNALID(bagi->map.name.ident)) {
3211                        //printf("Trying attr #%08x\n", bagi->map.name.ident);
3212                        if (getResourceName(bagi->map.name.ident, &rname)) {
3213                            #if 0
3214                            printf("Matching %s against %s (0x%08x)\n",
3215                                   String8(start,pos-start).string(),
3216                                   String8(rname.name, rname.nameLen).string(),
3217                                   bagi->map.name.ident);
3218                            #endif
3219                            if (strzcmp16(start, pos-start, rname.name, rname.nameLen) == 0) {
3220                                outValue->data |= bagi->map.value.data;
3221                                break;
3222                            }
3223                        }
3224                    }
3225                }
3226                if (i >= cnt) {
3227                    // Didn't find this flag identifier.
3228                    failed = true;
3229                }
3230                if (pos < end) {
3231                    pos++;
3232                }
3233            }
3234            unlockBag(bag);
3235            if (!failed) {
3236                //printf("Final flag value: 0x%lx\n", outValue->data);
3237                return true;
3238            }
3239        }
3240
3241
3242        if (fromAccessor) {
3243            if (accessor->getAttributeFlags(attrID, s, len, outValue)) {
3244                //printf("Final flag value: 0x%lx\n", outValue->data);
3245                return true;
3246            }
3247        }
3248    }
3249
3250    if ((attrType&ResTable_map::TYPE_STRING) == 0) {
3251        if (accessor != NULL) {
3252            accessor->reportError(accessorCookie, "String types not allowed");
3253        }
3254        return false;
3255    }
3256
3257    // Generic string handling...
3258    outValue->dataType = outValue->TYPE_STRING;
3259    if (outString) {
3260        bool failed = collectString(outString, s, len, preserveSpaces, &errorMsg);
3261        if (accessor != NULL) {
3262            accessor->reportError(accessorCookie, errorMsg);
3263        }
3264        return failed;
3265    }
3266
3267    return true;
3268}
3269
3270bool ResTable::collectString(String16* outString,
3271                             const char16_t* s, size_t len,
3272                             bool preserveSpaces,
3273                             const char** outErrorMsg,
3274                             bool append)
3275{
3276    String16 tmp;
3277
3278    char quoted = 0;
3279    const char16_t* p = s;
3280    while (p < (s+len)) {
3281        while (p < (s+len)) {
3282            const char16_t c = *p;
3283            if (c == '\\') {
3284                break;
3285            }
3286            if (!preserveSpaces) {
3287                if (quoted == 0 && isspace16(c)
3288                    && (c != ' ' || isspace16(*(p+1)))) {
3289                    break;
3290                }
3291                if (c == '"' && (quoted == 0 || quoted == '"')) {
3292                    break;
3293                }
3294                if (c == '\'' && (quoted == 0 || quoted == '\'')) {
3295                    /*
3296                     * In practice, when people write ' instead of \'
3297                     * in a string, they are doing it by accident
3298                     * instead of really meaning to use ' as a quoting
3299                     * character.  Warn them so they don't lose it.
3300                     */
3301                    if (outErrorMsg) {
3302                        *outErrorMsg = "Apostrophe not preceded by \\";
3303                    }
3304                    return false;
3305                }
3306            }
3307            p++;
3308        }
3309        if (p < (s+len)) {
3310            if (p > s) {
3311                tmp.append(String16(s, p-s));
3312            }
3313            if (!preserveSpaces && (*p == '"' || *p == '\'')) {
3314                if (quoted == 0) {
3315                    quoted = *p;
3316                } else {
3317                    quoted = 0;
3318                }
3319                p++;
3320            } else if (!preserveSpaces && isspace16(*p)) {
3321                // Space outside of a quote -- consume all spaces and
3322                // leave a single plain space char.
3323                tmp.append(String16(" "));
3324                p++;
3325                while (p < (s+len) && isspace16(*p)) {
3326                    p++;
3327                }
3328            } else if (*p == '\\') {
3329                p++;
3330                if (p < (s+len)) {
3331                    switch (*p) {
3332                    case 't':
3333                        tmp.append(String16("\t"));
3334                        break;
3335                    case 'n':
3336                        tmp.append(String16("\n"));
3337                        break;
3338                    case '#':
3339                        tmp.append(String16("#"));
3340                        break;
3341                    case '@':
3342                        tmp.append(String16("@"));
3343                        break;
3344                    case '?':
3345                        tmp.append(String16("?"));
3346                        break;
3347                    case '"':
3348                        tmp.append(String16("\""));
3349                        break;
3350                    case '\'':
3351                        tmp.append(String16("'"));
3352                        break;
3353                    case '\\':
3354                        tmp.append(String16("\\"));
3355                        break;
3356                    case 'u':
3357                    {
3358                        char16_t chr = 0;
3359                        int i = 0;
3360                        while (i < 4 && p[1] != 0) {
3361                            p++;
3362                            i++;
3363                            int c;
3364                            if (*p >= '0' && *p <= '9') {
3365                                c = *p - '0';
3366                            } else if (*p >= 'a' && *p <= 'f') {
3367                                c = *p - 'a' + 10;
3368                            } else if (*p >= 'A' && *p <= 'F') {
3369                                c = *p - 'A' + 10;
3370                            } else {
3371                                if (outErrorMsg) {
3372                                    *outErrorMsg = "Bad character in \\u unicode escape sequence";
3373                                }
3374                                return false;
3375                            }
3376                            chr = (chr<<4) | c;
3377                        }
3378                        tmp.append(String16(&chr, 1));
3379                    } break;
3380                    default:
3381                        // ignore unknown escape chars.
3382                        break;
3383                    }
3384                    p++;
3385                }
3386            }
3387            len -= (p-s);
3388            s = p;
3389        }
3390    }
3391
3392    if (tmp.size() != 0) {
3393        if (len > 0) {
3394            tmp.append(String16(s, len));
3395        }
3396        if (append) {
3397            outString->append(tmp);
3398        } else {
3399            outString->setTo(tmp);
3400        }
3401    } else {
3402        if (append) {
3403            outString->append(String16(s, len));
3404        } else {
3405            outString->setTo(s, len);
3406        }
3407    }
3408
3409    return true;
3410}
3411
3412size_t ResTable::getBasePackageCount() const
3413{
3414    if (mError != NO_ERROR) {
3415        return 0;
3416    }
3417    return mPackageGroups.size();
3418}
3419
3420const char16_t* ResTable::getBasePackageName(size_t idx) const
3421{
3422    if (mError != NO_ERROR) {
3423        return 0;
3424    }
3425    LOG_FATAL_IF(idx >= mPackageGroups.size(),
3426                 "Requested package index %d past package count %d",
3427                 (int)idx, (int)mPackageGroups.size());
3428    return mPackageGroups[idx]->name.string();
3429}
3430
3431uint32_t ResTable::getBasePackageId(size_t idx) const
3432{
3433    if (mError != NO_ERROR) {
3434        return 0;
3435    }
3436    LOG_FATAL_IF(idx >= mPackageGroups.size(),
3437                 "Requested package index %d past package count %d",
3438                 (int)idx, (int)mPackageGroups.size());
3439    return mPackageGroups[idx]->id;
3440}
3441
3442size_t ResTable::getTableCount() const
3443{
3444    return mHeaders.size();
3445}
3446
3447const ResStringPool* ResTable::getTableStringBlock(size_t index) const
3448{
3449    return &mHeaders[index]->values;
3450}
3451
3452void* ResTable::getTableCookie(size_t index) const
3453{
3454    return mHeaders[index]->cookie;
3455}
3456
3457void ResTable::getConfigurations(Vector<ResTable_config>* configs) const
3458{
3459    const size_t I = mPackageGroups.size();
3460    for (size_t i=0; i<I; i++) {
3461        const PackageGroup* packageGroup = mPackageGroups[i];
3462        const size_t J = packageGroup->packages.size();
3463        for (size_t j=0; j<J; j++) {
3464            const Package* package = packageGroup->packages[j];
3465            const size_t K = package->types.size();
3466            for (size_t k=0; k<K; k++) {
3467                const Type* type = package->types[k];
3468                if (type == NULL) continue;
3469                const size_t L = type->configs.size();
3470                for (size_t l=0; l<L; l++) {
3471                    const ResTable_type* config = type->configs[l];
3472                    const ResTable_config* cfg = &config->config;
3473                    // only insert unique
3474                    const size_t M = configs->size();
3475                    size_t m;
3476                    for (m=0; m<M; m++) {
3477                        if (0 == (*configs)[m].compare(*cfg)) {
3478                            break;
3479                        }
3480                    }
3481                    // if we didn't find it
3482                    if (m == M) {
3483                        configs->add(*cfg);
3484                    }
3485                }
3486            }
3487        }
3488    }
3489}
3490
3491void ResTable::getLocales(Vector<String8>* locales) const
3492{
3493    Vector<ResTable_config> configs;
3494    LOGD("calling getConfigurations");
3495    getConfigurations(&configs);
3496    LOGD("called getConfigurations size=%d", (int)configs.size());
3497    const size_t I = configs.size();
3498    for (size_t i=0; i<I; i++) {
3499        char locale[6];
3500        configs[i].getLocale(locale);
3501        const size_t J = locales->size();
3502        size_t j;
3503        for (j=0; j<J; j++) {
3504            if (0 == strcmp(locale, (*locales)[j].string())) {
3505                break;
3506            }
3507        }
3508        if (j == J) {
3509            locales->add(String8(locale));
3510        }
3511    }
3512}
3513
3514ssize_t ResTable::getEntry(
3515    const Package* package, int typeIndex, int entryIndex,
3516    const ResTable_config* config,
3517    const ResTable_type** outType, const ResTable_entry** outEntry,
3518    const Type** outTypeClass) const
3519{
3520    LOGV("Getting entry from package %p\n", package);
3521    const ResTable_package* const pkg = package->package;
3522
3523    const Type* allTypes = package->getType(typeIndex);
3524    LOGV("allTypes=%p\n", allTypes);
3525    if (allTypes == NULL) {
3526        LOGV("Skipping entry type index 0x%02x because type is NULL!\n", typeIndex);
3527        return 0;
3528    }
3529
3530    if ((size_t)entryIndex >= allTypes->entryCount) {
3531        LOGW("getEntry failing because entryIndex %d is beyond type entryCount %d",
3532            entryIndex, (int)allTypes->entryCount);
3533        return BAD_TYPE;
3534    }
3535
3536    const ResTable_type* type = NULL;
3537    uint32_t offset = ResTable_type::NO_ENTRY;
3538    ResTable_config bestConfig;
3539    memset(&bestConfig, 0, sizeof(bestConfig)); // make the compiler shut up
3540
3541    const size_t NT = allTypes->configs.size();
3542    for (size_t i=0; i<NT; i++) {
3543        const ResTable_type* const thisType = allTypes->configs[i];
3544        if (thisType == NULL) continue;
3545
3546        ResTable_config thisConfig;
3547        thisConfig.copyFromDtoH(thisType->config);
3548
3549        TABLE_GETENTRY(LOGI("Match entry 0x%x in type 0x%x (sz 0x%x): imsi:%d/%d=%d/%d lang:%c%c=%c%c cnt:%c%c=%c%c "
3550                            "orien:%d=%d touch:%d=%d density:%d=%d key:%d=%d inp:%d=%d nav:%d=%d w:%d=%d h:%d=%d\n",
3551                           entryIndex, typeIndex+1, dtohl(thisType->config.size),
3552                           thisConfig.mcc, thisConfig.mnc,
3553                           config ? config->mcc : 0, config ? config->mnc : 0,
3554                           thisConfig.language[0] ? thisConfig.language[0] : '-',
3555                           thisConfig.language[1] ? thisConfig.language[1] : '-',
3556                           config && config->language[0] ? config->language[0] : '-',
3557                           config && config->language[1] ? config->language[1] : '-',
3558                           thisConfig.country[0] ? thisConfig.country[0] : '-',
3559                           thisConfig.country[1] ? thisConfig.country[1] : '-',
3560                           config && config->country[0] ? config->country[0] : '-',
3561                           config && config->country[1] ? config->country[1] : '-',
3562                           thisConfig.orientation,
3563                           config ? config->orientation : 0,
3564                           thisConfig.touchscreen,
3565                           config ? config->touchscreen : 0,
3566                           thisConfig.density,
3567                           config ? config->density : 0,
3568                           thisConfig.keyboard,
3569                           config ? config->keyboard : 0,
3570                           thisConfig.inputFlags,
3571                           config ? config->inputFlags : 0,
3572                           thisConfig.navigation,
3573                           config ? config->navigation : 0,
3574                           thisConfig.screenWidth,
3575                           config ? config->screenWidth : 0,
3576                           thisConfig.screenHeight,
3577                           config ? config->screenHeight : 0));
3578
3579        // Check to make sure this one is valid for the current parameters.
3580        if (config && !thisConfig.match(*config)) {
3581            TABLE_GETENTRY(LOGI("Does not match config!\n"));
3582            continue;
3583        }
3584
3585        // Check if there is the desired entry in this type.
3586
3587        const uint8_t* const end = ((const uint8_t*)thisType)
3588            + dtohl(thisType->header.size);
3589        const uint32_t* const eindex = (const uint32_t*)
3590            (((const uint8_t*)thisType) + dtohs(thisType->header.headerSize));
3591
3592        uint32_t thisOffset = dtohl(eindex[entryIndex]);
3593        if (thisOffset == ResTable_type::NO_ENTRY) {
3594            TABLE_GETENTRY(LOGI("Skipping because it is not defined!\n"));
3595            continue;
3596        }
3597
3598        if (type != NULL) {
3599            // Check if this one is less specific than the last found.  If so,
3600            // we will skip it.  We check starting with things we most care
3601            // about to those we least care about.
3602            if (!thisConfig.isBetterThan(bestConfig, config)) {
3603                TABLE_GETENTRY(LOGI("This config is worse than last!\n"));
3604                continue;
3605            }
3606        }
3607
3608        type = thisType;
3609        offset = thisOffset;
3610        bestConfig = thisConfig;
3611        TABLE_GETENTRY(LOGI("Best entry so far -- using it!\n"));
3612        if (!config) break;
3613    }
3614
3615    if (type == NULL) {
3616        TABLE_GETENTRY(LOGI("No value found for requested entry!\n"));
3617        return BAD_INDEX;
3618    }
3619
3620    offset += dtohl(type->entriesStart);
3621    TABLE_NOISY(aout << "Looking in resource table " << package->header->header
3622          << ", typeOff="
3623          << (void*)(((const char*)type)-((const char*)package->header->header))
3624          << ", offset=" << (void*)offset << endl);
3625
3626    if (offset > (dtohl(type->header.size)-sizeof(ResTable_entry))) {
3627        LOGW("ResTable_entry at 0x%x is beyond type chunk data 0x%x",
3628             offset, dtohl(type->header.size));
3629        return BAD_TYPE;
3630    }
3631    if ((offset&0x3) != 0) {
3632        LOGW("ResTable_entry at 0x%x is not on an integer boundary",
3633             offset);
3634        return BAD_TYPE;
3635    }
3636
3637    const ResTable_entry* const entry = (const ResTable_entry*)
3638        (((const uint8_t*)type) + offset);
3639    if (dtohs(entry->size) < sizeof(*entry)) {
3640        LOGW("ResTable_entry size 0x%x is too small", dtohs(entry->size));
3641        return BAD_TYPE;
3642    }
3643
3644    *outType = type;
3645    *outEntry = entry;
3646    if (outTypeClass != NULL) {
3647        *outTypeClass = allTypes;
3648    }
3649    return offset + dtohs(entry->size);
3650}
3651
3652status_t ResTable::parsePackage(const ResTable_package* const pkg,
3653                                const Header* const header)
3654{
3655    const uint8_t* base = (const uint8_t*)pkg;
3656    status_t err = validate_chunk(&pkg->header, sizeof(*pkg),
3657                                  header->dataEnd, "ResTable_package");
3658    if (err != NO_ERROR) {
3659        return (mError=err);
3660    }
3661
3662    const size_t pkgSize = dtohl(pkg->header.size);
3663
3664    if (dtohl(pkg->typeStrings) >= pkgSize) {
3665        LOGW("ResTable_package type strings at %p are past chunk size %p.",
3666             (void*)dtohl(pkg->typeStrings), (void*)pkgSize);
3667        return (mError=BAD_TYPE);
3668    }
3669    if ((dtohl(pkg->typeStrings)&0x3) != 0) {
3670        LOGW("ResTable_package type strings at %p is not on an integer boundary.",
3671             (void*)dtohl(pkg->typeStrings));
3672        return (mError=BAD_TYPE);
3673    }
3674    if (dtohl(pkg->keyStrings) >= pkgSize) {
3675        LOGW("ResTable_package key strings at %p are past chunk size %p.",
3676             (void*)dtohl(pkg->keyStrings), (void*)pkgSize);
3677        return (mError=BAD_TYPE);
3678    }
3679    if ((dtohl(pkg->keyStrings)&0x3) != 0) {
3680        LOGW("ResTable_package key strings at %p is not on an integer boundary.",
3681             (void*)dtohl(pkg->keyStrings));
3682        return (mError=BAD_TYPE);
3683    }
3684
3685    Package* package = NULL;
3686    PackageGroup* group = NULL;
3687    uint32_t id = dtohl(pkg->id);
3688    if (id != 0 && id < 256) {
3689
3690        package = new Package(this, header, pkg);
3691        if (package == NULL) {
3692            return (mError=NO_MEMORY);
3693        }
3694
3695        size_t idx = mPackageMap[id];
3696        if (idx == 0) {
3697            idx = mPackageGroups.size()+1;
3698
3699            char16_t tmpName[sizeof(pkg->name)/sizeof(char16_t)];
3700            strcpy16_dtoh(tmpName, pkg->name, sizeof(pkg->name)/sizeof(char16_t));
3701            group = new PackageGroup(this, String16(tmpName), id);
3702            if (group == NULL) {
3703                delete package;
3704                return (mError=NO_MEMORY);
3705            }
3706
3707            err = package->typeStrings.setTo(base+dtohl(pkg->typeStrings),
3708                                           header->dataEnd-(base+dtohl(pkg->typeStrings)));
3709            if (err != NO_ERROR) {
3710                delete group;
3711                delete package;
3712                return (mError=err);
3713            }
3714            err = package->keyStrings.setTo(base+dtohl(pkg->keyStrings),
3715                                          header->dataEnd-(base+dtohl(pkg->keyStrings)));
3716            if (err != NO_ERROR) {
3717                delete group;
3718                delete package;
3719                return (mError=err);
3720            }
3721
3722            //printf("Adding new package id %d at index %d\n", id, idx);
3723            err = mPackageGroups.add(group);
3724            if (err < NO_ERROR) {
3725                return (mError=err);
3726            }
3727            group->basePackage = package;
3728
3729            mPackageMap[id] = (uint8_t)idx;
3730        } else {
3731            group = mPackageGroups.itemAt(idx-1);
3732            if (group == NULL) {
3733                return (mError=UNKNOWN_ERROR);
3734            }
3735        }
3736        err = group->packages.add(package);
3737        if (err < NO_ERROR) {
3738            return (mError=err);
3739        }
3740    } else {
3741        LOG_ALWAYS_FATAL("Skins not supported!");
3742        return NO_ERROR;
3743    }
3744
3745
3746    // Iterate through all chunks.
3747    size_t curPackage = 0;
3748
3749    const ResChunk_header* chunk =
3750        (const ResChunk_header*)(((const uint8_t*)pkg)
3751                                 + dtohs(pkg->header.headerSize));
3752    const uint8_t* endPos = ((const uint8_t*)pkg) + dtohs(pkg->header.size);
3753    while (((const uint8_t*)chunk) <= (endPos-sizeof(ResChunk_header)) &&
3754           ((const uint8_t*)chunk) <= (endPos-dtohl(chunk->size))) {
3755        TABLE_NOISY(LOGV("PackageChunk: type=0x%x, headerSize=0x%x, size=0x%x, pos=%p\n",
3756                         dtohs(chunk->type), dtohs(chunk->headerSize), dtohl(chunk->size),
3757                         (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header))));
3758        const size_t csize = dtohl(chunk->size);
3759        const uint16_t ctype = dtohs(chunk->type);
3760        if (ctype == RES_TABLE_TYPE_SPEC_TYPE) {
3761            const ResTable_typeSpec* typeSpec = (const ResTable_typeSpec*)(chunk);
3762            err = validate_chunk(&typeSpec->header, sizeof(*typeSpec),
3763                                 endPos, "ResTable_typeSpec");
3764            if (err != NO_ERROR) {
3765                return (mError=err);
3766            }
3767
3768            const size_t typeSpecSize = dtohl(typeSpec->header.size);
3769
3770            LOAD_TABLE_NOISY(printf("TypeSpec off %p: type=0x%x, headerSize=0x%x, size=%p\n",
3771                                    (void*)(base-(const uint8_t*)chunk),
3772                                    dtohs(typeSpec->header.type),
3773                                    dtohs(typeSpec->header.headerSize),
3774                                    (void*)typeSize));
3775            // look for block overrun or int overflow when multiplying by 4
3776            if ((dtohl(typeSpec->entryCount) > (INT32_MAX/sizeof(uint32_t))
3777                    || dtohs(typeSpec->header.headerSize)+(sizeof(uint32_t)*dtohl(typeSpec->entryCount))
3778                    > typeSpecSize)) {
3779                LOGW("ResTable_typeSpec entry index to %p extends beyond chunk end %p.",
3780                     (void*)(dtohs(typeSpec->header.headerSize)
3781                             +(sizeof(uint32_t)*dtohl(typeSpec->entryCount))),
3782                     (void*)typeSpecSize);
3783                return (mError=BAD_TYPE);
3784            }
3785
3786            if (typeSpec->id == 0) {
3787                LOGW("ResTable_type has an id of 0.");
3788                return (mError=BAD_TYPE);
3789            }
3790
3791            while (package->types.size() < typeSpec->id) {
3792                package->types.add(NULL);
3793            }
3794            Type* t = package->types[typeSpec->id-1];
3795            if (t == NULL) {
3796                t = new Type(header, package, dtohl(typeSpec->entryCount));
3797                package->types.editItemAt(typeSpec->id-1) = t;
3798            } else if (dtohl(typeSpec->entryCount) != t->entryCount) {
3799                LOGW("ResTable_typeSpec entry count inconsistent: given %d, previously %d",
3800                    (int)dtohl(typeSpec->entryCount), (int)t->entryCount);
3801                return (mError=BAD_TYPE);
3802            }
3803            t->typeSpecFlags = (const uint32_t*)(
3804                    ((const uint8_t*)typeSpec) + dtohs(typeSpec->header.headerSize));
3805            t->typeSpec = typeSpec;
3806
3807        } else if (ctype == RES_TABLE_TYPE_TYPE) {
3808            const ResTable_type* type = (const ResTable_type*)(chunk);
3809            err = validate_chunk(&type->header, sizeof(*type)-sizeof(ResTable_config)+4,
3810                                 endPos, "ResTable_type");
3811            if (err != NO_ERROR) {
3812                return (mError=err);
3813            }
3814
3815            const size_t typeSize = dtohl(type->header.size);
3816
3817            LOAD_TABLE_NOISY(printf("Type off %p: type=0x%x, headerSize=0x%x, size=%p\n",
3818                                    (void*)(base-(const uint8_t*)chunk),
3819                                    dtohs(type->header.type),
3820                                    dtohs(type->header.headerSize),
3821                                    (void*)typeSize));
3822            if (dtohs(type->header.headerSize)+(sizeof(uint32_t)*dtohl(type->entryCount))
3823                > typeSize) {
3824                LOGW("ResTable_type entry index to %p extends beyond chunk end %p.",
3825                     (void*)(dtohs(type->header.headerSize)
3826                             +(sizeof(uint32_t)*dtohl(type->entryCount))),
3827                     (void*)typeSize);
3828                return (mError=BAD_TYPE);
3829            }
3830            if (dtohl(type->entryCount) != 0
3831                && dtohl(type->entriesStart) > (typeSize-sizeof(ResTable_entry))) {
3832                LOGW("ResTable_type entriesStart at %p extends beyond chunk end %p.",
3833                     (void*)dtohl(type->entriesStart), (void*)typeSize);
3834                return (mError=BAD_TYPE);
3835            }
3836            if (type->id == 0) {
3837                LOGW("ResTable_type has an id of 0.");
3838                return (mError=BAD_TYPE);
3839            }
3840
3841            while (package->types.size() < type->id) {
3842                package->types.add(NULL);
3843            }
3844            Type* t = package->types[type->id-1];
3845            if (t == NULL) {
3846                t = new Type(header, package, dtohl(type->entryCount));
3847                package->types.editItemAt(type->id-1) = t;
3848            } else if (dtohl(type->entryCount) != t->entryCount) {
3849                LOGW("ResTable_type entry count inconsistent: given %d, previously %d",
3850                    (int)dtohl(type->entryCount), (int)t->entryCount);
3851                return (mError=BAD_TYPE);
3852            }
3853
3854            TABLE_GETENTRY(
3855                ResTable_config thisConfig;
3856                thisConfig.copyFromDtoH(type->config);
3857                LOGI("Adding config to type %d: imsi:%d/%d lang:%c%c cnt:%c%c "
3858                     "orien:%d touch:%d density:%d key:%d inp:%d nav:%d w:%d h:%d\n",
3859                      type->id,
3860                      thisConfig.mcc, thisConfig.mnc,
3861                      thisConfig.language[0] ? thisConfig.language[0] : '-',
3862                      thisConfig.language[1] ? thisConfig.language[1] : '-',
3863                      thisConfig.country[0] ? thisConfig.country[0] : '-',
3864                      thisConfig.country[1] ? thisConfig.country[1] : '-',
3865                      thisConfig.orientation,
3866                      thisConfig.touchscreen,
3867                      thisConfig.density,
3868                      thisConfig.keyboard,
3869                      thisConfig.inputFlags,
3870                      thisConfig.navigation,
3871                      thisConfig.screenWidth,
3872                      thisConfig.screenHeight));
3873            t->configs.add(type);
3874        } else {
3875            status_t err = validate_chunk(chunk, sizeof(ResChunk_header),
3876                                          endPos, "ResTable_package:unknown");
3877            if (err != NO_ERROR) {
3878                return (mError=err);
3879            }
3880        }
3881        chunk = (const ResChunk_header*)
3882            (((const uint8_t*)chunk) + csize);
3883    }
3884
3885    if (group->typeCount == 0) {
3886        group->typeCount = package->types.size();
3887    }
3888
3889    return NO_ERROR;
3890}
3891
3892#ifndef HAVE_ANDROID_OS
3893#define CHAR16_TO_CSTR(c16, len) (String8(String16(c16,len)).string())
3894
3895#define CHAR16_ARRAY_EQ(constant, var, len) \
3896        ((len == (sizeof(constant)/sizeof(constant[0]))) && (0 == memcmp((var), (constant), (len))))
3897
3898void print_complex(uint32_t complex, bool isFraction)
3899{
3900    const float MANTISSA_MULT =
3901        1.0f / (1<<Res_value::COMPLEX_MANTISSA_SHIFT);
3902    const float RADIX_MULTS[] = {
3903        1.0f*MANTISSA_MULT, 1.0f/(1<<7)*MANTISSA_MULT,
3904        1.0f/(1<<15)*MANTISSA_MULT, 1.0f/(1<<23)*MANTISSA_MULT
3905    };
3906
3907    float value = (complex&(Res_value::COMPLEX_MANTISSA_MASK
3908                   <<Res_value::COMPLEX_MANTISSA_SHIFT))
3909            * RADIX_MULTS[(complex>>Res_value::COMPLEX_RADIX_SHIFT)
3910                            & Res_value::COMPLEX_RADIX_MASK];
3911    printf("%f", value);
3912
3913    if (!isFraction) {
3914        switch ((complex>>Res_value::COMPLEX_UNIT_SHIFT)&Res_value::COMPLEX_UNIT_MASK) {
3915            case Res_value::COMPLEX_UNIT_PX: printf("px"); break;
3916            case Res_value::COMPLEX_UNIT_DIP: printf("dp"); break;
3917            case Res_value::COMPLEX_UNIT_SP: printf("sp"); break;
3918            case Res_value::COMPLEX_UNIT_PT: printf("pt"); break;
3919            case Res_value::COMPLEX_UNIT_IN: printf("in"); break;
3920            case Res_value::COMPLEX_UNIT_MM: printf("mm"); break;
3921            default: printf(" (unknown unit)"); break;
3922        }
3923    } else {
3924        switch ((complex>>Res_value::COMPLEX_UNIT_SHIFT)&Res_value::COMPLEX_UNIT_MASK) {
3925            case Res_value::COMPLEX_UNIT_FRACTION: printf("%%"); break;
3926            case Res_value::COMPLEX_UNIT_FRACTION_PARENT: printf("%%p"); break;
3927            default: printf(" (unknown unit)"); break;
3928        }
3929    }
3930}
3931
3932void ResTable::print_value(const Package* pkg, const Res_value& value) const
3933{
3934    if (value.dataType == Res_value::TYPE_NULL) {
3935        printf("(null)\n");
3936    } else if (value.dataType == Res_value::TYPE_REFERENCE) {
3937        printf("(reference) 0x%08x\n", value.data);
3938    } else if (value.dataType == Res_value::TYPE_ATTRIBUTE) {
3939        printf("(attribute) 0x%08x\n", value.data);
3940    } else if (value.dataType == Res_value::TYPE_STRING) {
3941        size_t len;
3942        const char16_t* str = pkg->header->values.stringAt(
3943                value.data, &len);
3944        if (str == NULL) {
3945            printf("(string) null\n");
3946        } else {
3947            printf("(string) \"%s\"\n",
3948                    String8(str, len).string());
3949        }
3950    } else if (value.dataType == Res_value::TYPE_FLOAT) {
3951        printf("(float) %g\n", *(const float*)&value.data);
3952    } else if (value.dataType == Res_value::TYPE_DIMENSION) {
3953        printf("(dimension) ");
3954        print_complex(value.data, false);
3955        printf("\n");
3956    } else if (value.dataType == Res_value::TYPE_FRACTION) {
3957        printf("(fraction) ");
3958        print_complex(value.data, true);
3959        printf("\n");
3960    } else if (value.dataType >= Res_value::TYPE_FIRST_COLOR_INT
3961            || value.dataType <= Res_value::TYPE_LAST_COLOR_INT) {
3962        printf("(color) #%08x\n", value.data);
3963    } else if (value.dataType == Res_value::TYPE_INT_BOOLEAN) {
3964        printf("(boolean) %s\n", value.data ? "true" : "false");
3965    } else if (value.dataType >= Res_value::TYPE_FIRST_INT
3966            || value.dataType <= Res_value::TYPE_LAST_INT) {
3967        printf("(int) 0x%08x or %d\n", value.data, value.data);
3968    } else {
3969        printf("(unknown type) t=0x%02x d=0x%08x (s=0x%04x r=0x%02x)\n",
3970               (int)value.dataType, (int)value.data,
3971               (int)value.size, (int)value.res0);
3972    }
3973}
3974
3975void ResTable::print(bool inclValues) const
3976{
3977    if (mError != 0) {
3978        printf("mError=0x%x (%s)\n", mError, strerror(mError));
3979    }
3980#if 0
3981    printf("mParams=%c%c-%c%c,\n",
3982            mParams.language[0], mParams.language[1],
3983            mParams.country[0], mParams.country[1]);
3984#endif
3985    size_t pgCount = mPackageGroups.size();
3986    printf("Package Groups (%d)\n", (int)pgCount);
3987    for (size_t pgIndex=0; pgIndex<pgCount; pgIndex++) {
3988        const PackageGroup* pg = mPackageGroups[pgIndex];
3989        printf("Package Group %d id=%d packageCount=%d name=%s\n",
3990                (int)pgIndex, pg->id, (int)pg->packages.size(),
3991                String8(pg->name).string());
3992
3993        size_t pkgCount = pg->packages.size();
3994        for (size_t pkgIndex=0; pkgIndex<pkgCount; pkgIndex++) {
3995            const Package* pkg = pg->packages[pkgIndex];
3996            size_t typeCount = pkg->types.size();
3997            printf("  Package %d id=%d name=%s typeCount=%d\n", (int)pkgIndex,
3998                    pkg->package->id, String8(String16(pkg->package->name)).string(),
3999                    (int)typeCount);
4000            for (size_t typeIndex=0; typeIndex<typeCount; typeIndex++) {
4001                const Type* typeConfigs = pkg->getType(typeIndex);
4002                if (typeConfigs == NULL) {
4003                    printf("    type %d NULL\n", (int)typeIndex);
4004                    continue;
4005                }
4006                const size_t NTC = typeConfigs->configs.size();
4007                printf("    type %d configCount=%d entryCount=%d\n",
4008                       (int)typeIndex, (int)NTC, (int)typeConfigs->entryCount);
4009                if (typeConfigs->typeSpecFlags != NULL) {
4010                    for (size_t entryIndex=0; entryIndex<typeConfigs->entryCount; entryIndex++) {
4011                        uint32_t resID = (0xff000000 & ((pkg->package->id)<<24))
4012                                    | (0x00ff0000 & ((typeIndex+1)<<16))
4013                                    | (0x0000ffff & (entryIndex));
4014                        resource_name resName;
4015                        this->getResourceName(resID, &resName);
4016                        printf("      spec resource 0x%08x %s:%s/%s: flags=0x%08x\n",
4017                            resID,
4018                            CHAR16_TO_CSTR(resName.package, resName.packageLen),
4019                            CHAR16_TO_CSTR(resName.type, resName.typeLen),
4020                            CHAR16_TO_CSTR(resName.name, resName.nameLen),
4021                            dtohl(typeConfigs->typeSpecFlags[entryIndex]));
4022                    }
4023                }
4024                for (size_t configIndex=0; configIndex<NTC; configIndex++) {
4025                    const ResTable_type* type = typeConfigs->configs[configIndex];
4026                    if ((((uint64_t)type)&0x3) != 0) {
4027                        printf("      NON-INTEGER ResTable_type ADDRESS: %p\n", type);
4028                        continue;
4029                    }
4030                    char density[16];
4031                    uint16_t dval = dtohs(type->config.density);
4032                    if (dval == ResTable_config::DENSITY_DEFAULT) {
4033                        strcpy(density, "def");
4034                    } else if (dval == ResTable_config::DENSITY_NONE) {
4035                        strcpy(density, "no");
4036                    } else {
4037                        sprintf(density, "%d", (int)dval);
4038                    }
4039                    printf("      config %d lang=%c%c cnt=%c%c orien=%d touch=%d density=%s key=%d infl=%d nav=%d w=%d h=%d sz=%d lng=%d\n",
4040                           (int)configIndex,
4041                           type->config.language[0] ? type->config.language[0] : '-',
4042                           type->config.language[1] ? type->config.language[1] : '-',
4043                           type->config.country[0] ? type->config.country[0] : '-',
4044                           type->config.country[1] ? type->config.country[1] : '-',
4045                           type->config.orientation,
4046                           type->config.touchscreen,
4047                           density,
4048                           type->config.keyboard,
4049                           type->config.inputFlags,
4050                           type->config.navigation,
4051                           dtohs(type->config.screenWidth),
4052                           dtohs(type->config.screenHeight),
4053                           type->config.screenLayout&ResTable_config::MASK_SCREENSIZE,
4054                           type->config.screenLayout&ResTable_config::MASK_SCREENLONG);
4055                    size_t entryCount = dtohl(type->entryCount);
4056                    uint32_t entriesStart = dtohl(type->entriesStart);
4057                    if ((entriesStart&0x3) != 0) {
4058                        printf("      NON-INTEGER ResTable_type entriesStart OFFSET: %p\n", (void*)entriesStart);
4059                        continue;
4060                    }
4061                    uint32_t typeSize = dtohl(type->header.size);
4062                    if ((typeSize&0x3) != 0) {
4063                        printf("      NON-INTEGER ResTable_type header.size: %p\n", (void*)typeSize);
4064                        continue;
4065                    }
4066                    for (size_t entryIndex=0; entryIndex<entryCount; entryIndex++) {
4067
4068                        const uint8_t* const end = ((const uint8_t*)type)
4069                            + dtohl(type->header.size);
4070                        const uint32_t* const eindex = (const uint32_t*)
4071                            (((const uint8_t*)type) + dtohs(type->header.headerSize));
4072
4073                        uint32_t thisOffset = dtohl(eindex[entryIndex]);
4074                        if (thisOffset == ResTable_type::NO_ENTRY) {
4075                            continue;
4076                        }
4077
4078                        uint32_t resID = (0xff000000 & ((pkg->package->id)<<24))
4079                                    | (0x00ff0000 & ((typeIndex+1)<<16))
4080                                    | (0x0000ffff & (entryIndex));
4081                        resource_name resName;
4082                        this->getResourceName(resID, &resName);
4083                        printf("        resource 0x%08x %s:%s/%s: ", resID,
4084                                CHAR16_TO_CSTR(resName.package, resName.packageLen),
4085                                CHAR16_TO_CSTR(resName.type, resName.typeLen),
4086                                CHAR16_TO_CSTR(resName.name, resName.nameLen));
4087                        if ((thisOffset&0x3) != 0) {
4088                            printf("NON-INTEGER OFFSET: %p\n", (void*)thisOffset);
4089                            continue;
4090                        }
4091                        if ((thisOffset+sizeof(ResTable_entry)) > typeSize) {
4092                            printf("OFFSET OUT OF BOUNDS: %p+%p (size is %p)\n",
4093                                   (void*)entriesStart, (void*)thisOffset,
4094                                   (void*)typeSize);
4095                            continue;
4096                        }
4097
4098                        const ResTable_entry* ent = (const ResTable_entry*)
4099                            (((const uint8_t*)type) + entriesStart + thisOffset);
4100                        if (((entriesStart + thisOffset)&0x3) != 0) {
4101                            printf("NON-INTEGER ResTable_entry OFFSET: %p\n",
4102                                 (void*)(entriesStart + thisOffset));
4103                            continue;
4104                        }
4105
4106                        uint16_t esize = dtohs(ent->size);
4107                        if ((esize&0x3) != 0) {
4108                            printf("NON-INTEGER ResTable_entry SIZE: %p\n", (void*)esize);
4109                            continue;
4110                        }
4111                        if ((thisOffset+esize) > typeSize) {
4112                            printf("ResTable_entry OUT OF BOUNDS: %p+%p+%p (size is %p)\n",
4113                                   (void*)entriesStart, (void*)thisOffset,
4114                                   (void*)esize, (void*)typeSize);
4115                            continue;
4116                        }
4117
4118                        const Res_value* valuePtr = NULL;
4119                        const ResTable_map_entry* bagPtr = NULL;
4120                        Res_value value;
4121                        if ((dtohs(ent->flags)&ResTable_entry::FLAG_COMPLEX) != 0) {
4122                            printf("<bag>");
4123                            bagPtr = (const ResTable_map_entry*)ent;
4124                        } else {
4125                            valuePtr = (const Res_value*)
4126                                (((const uint8_t*)ent) + esize);
4127                            value.copyFrom_dtoh(*valuePtr);
4128                            printf("t=0x%02x d=0x%08x (s=0x%04x r=0x%02x)",
4129                                   (int)value.dataType, (int)value.data,
4130                                   (int)value.size, (int)value.res0);
4131                        }
4132
4133                        if ((dtohs(ent->flags)&ResTable_entry::FLAG_PUBLIC) != 0) {
4134                            printf(" (PUBLIC)");
4135                        }
4136                        printf("\n");
4137
4138                        if (inclValues) {
4139                            if (valuePtr != NULL) {
4140                                printf("          ");
4141                                print_value(pkg, value);
4142                            } else if (bagPtr != NULL) {
4143                                const int N = dtohl(bagPtr->count);
4144                                const ResTable_map* mapPtr = (const ResTable_map*)
4145                                        (((const uint8_t*)ent) + esize);
4146                                printf("          Parent=0x%08x, Count=%d\n",
4147                                    dtohl(bagPtr->parent.ident), N);
4148                                for (int i=0; i<N; i++) {
4149                                    printf("          #%i (Key=0x%08x): ",
4150                                        i, dtohl(mapPtr->name.ident));
4151                                    value.copyFrom_dtoh(mapPtr->value);
4152                                    print_value(pkg, value);
4153                                    const size_t size = dtohs(mapPtr->value.size);
4154                                    mapPtr = (ResTable_map*)(((const uint8_t*)mapPtr)
4155                                            + size + sizeof(*mapPtr)-sizeof(mapPtr->value));
4156                                }
4157                            }
4158                        }
4159                    }
4160                }
4161            }
4162        }
4163    }
4164}
4165
4166#endif // HAVE_ANDROID_OS
4167
4168}   // namespace android
4169