15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <string> 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <map> 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "sandbox/win/src/policy_low_level.h" 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/basictypes.h" 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace { 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // A single rule can use at most this amount of memory. 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const size_t kRuleBufferSize = 1024*4; 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The possible states of the string matching opcode generator. 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) enum { 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PENDING_NONE, 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PENDING_ASTERISK, // Have seen an '*' but have not generated an opcode. 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PENDING_QMARK, // Have seen an '?' but have not generated an opcode. 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) }; 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The category of the last character seen by the string matching opcode 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // generator. 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const uint32 kLastCharIsNone = 0; 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const uint32 kLastCharIsAlpha = 1; 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const uint32 kLastCharIsWild = 2; 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const uint32 kLastCharIsAsterisk = kLastCharIsWild + 4; 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const uint32 kLastCharIsQuestionM = kLastCharIsWild + 8; 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace sandbox { 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Adding a rule is nothing more than pushing it into an stl container. Done() 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// is called for the rule in case the code that made the rule in the first 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// place has not done it. 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool LowLevelPolicy::AddRule(int service, PolicyRule* rule) { 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!rule->Done()) { 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PolicyRule* local_rule = new PolicyRule(*rule); 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RuleNode node = {local_rule, service}; 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) rules_.push_back(node); 455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)LowLevelPolicy::~LowLevelPolicy() { 495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Delete all the rules. 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) typedef std::list<RuleNode> RuleNodes; 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (RuleNodes::iterator it = rules_.begin(); it != rules_.end(); ++it) { 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) delete it->rule; 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Here is where the heavy byte shuffling is done. We take all the rules and 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// 'compile' them into a single memory region. Now, the rules are in random 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// order so the first step is to reorganize them into a stl map that is keyed 595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// by the service id and as a value contains a list with all the rules that 605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// belong to that service. Then we enter the big for-loop where we carve a 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// memory zone for the opcodes and the data and call RebindCopy on each rule 625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// so they all end up nicely packed in the policy_store_. 635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool LowLevelPolicy::Done() { 645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) typedef std::list<RuleNode> RuleNodes; 655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) typedef std::list<const PolicyRule*> RuleList; 665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) typedef std::map<uint32, RuleList> Mmap; 675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Mmap mmap; 685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (RuleNodes::iterator it = rules_.begin(); it != rules_.end(); ++it) { 705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) mmap[it->service].push_back(it->rule); 715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PolicyBuffer* current_buffer = &policy_store_->data[0]; 745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* buffer_end = reinterpret_cast<char*>(current_buffer) + 755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) policy_store_->data_size; 765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t avail_size = policy_store_->data_size; 775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (Mmap::iterator it = mmap.begin(); it != mmap.end(); ++it) { 795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) uint32 service = (*it).first; 805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (service >= kMaxServiceCount) { 815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) policy_store_->entry[service] = current_buffer; 845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RuleList::iterator rules_it = (*it).second.begin(); 865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RuleList::iterator rules_it_end = (*it).second.end(); 875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t svc_opcode_count = 0; 895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (; rules_it != rules_it_end; ++rules_it) { 915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const PolicyRule* rule = (*rules_it); 925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t op_count = rule->GetOpcodeCount(); 935821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t opcodes_size = op_count * sizeof(PolicyOpcode); 955821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (avail_size < opcodes_size) { 965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t data_size = avail_size - opcodes_size; 995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PolicyOpcode* opcodes_start = ¤t_buffer->opcodes[svc_opcode_count]; 1005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!rule->RebindCopy(opcodes_start, opcodes_size, 1015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) buffer_end, &data_size)) { 1025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 1035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t used = avail_size - data_size; 1055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) buffer_end -= used; 1065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) avail_size -= used; 1075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) svc_opcode_count += op_count; 1085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) current_buffer->opcode_count += svc_opcode_count; 1115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t policy_byte_count = (svc_opcode_count * sizeof(PolicyOpcode)) 1125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) / sizeof(current_buffer[0]); 1135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) current_buffer = ¤t_buffer[policy_byte_count + 1]; 1145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 1175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)PolicyRule::PolicyRule(EvalResult action) 1205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) : action_(action), done_(false) { 1215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* memory = new char[sizeof(PolicyBuffer) + kRuleBufferSize]; 1225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) buffer_ = reinterpret_cast<PolicyBuffer*>(memory); 1235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) buffer_->opcode_count = 0; 1245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) opcode_factory_ = new OpcodeFactory(buffer_, 1255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kRuleBufferSize + sizeof(PolicyOpcode)); 1265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)PolicyRule::PolicyRule(const PolicyRule& other) { 1295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (this == &other) 1305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return; 1315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) action_ = other.action_; 1325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) done_ = other.done_; 1335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t buffer_size = sizeof(PolicyBuffer) + kRuleBufferSize; 1345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* memory = new char[buffer_size]; 1355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) buffer_ = reinterpret_cast<PolicyBuffer*>(memory); 1365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) memcpy(buffer_, other.buffer_, buffer_size); 1375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* opcode_buffer = reinterpret_cast<char*>(&buffer_->opcodes[0]); 1395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* next_opcode = &opcode_buffer[GetOpcodeCount() * sizeof(PolicyOpcode)]; 1402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) opcode_factory_ = 1412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) new OpcodeFactory(next_opcode, other.opcode_factory_->memory_size()); 1425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// This function get called from a simple state machine implemented in 1455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// AddStringMatch() which passes the current state (in state) and it passes 1465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// true in last_call if AddStringMatch() has finished processing the input 1475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// pattern string and this would be the last call to generate any pending 1485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// opcode. The skip_count is the currently accumulated number of '?' seen so 1495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// far and once the associated opcode is generated this function sets it back 1505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// to zero. 1515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool PolicyRule::GenStringOpcode(RuleType rule_type, 1525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) StringMatchOptions match_opts, 1535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) uint16 parameter, int state, bool last_call, 1545d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) int* skip_count, base::string16* fragment) { 1555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The last opcode must: 1575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // 1) Always clear the context. 1585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // 2) Preserve the negation. 1595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // 3) Remove the 'OR' mode flag. 1605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) uint32 options = kPolNone; 1615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (last_call) { 1625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (IF_NOT == rule_type) { 1635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) options = kPolClearContext | kPolNegateEval; 1645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else { 1655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) options = kPolClearContext; 1665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else if (IF_NOT == rule_type) { 1685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) options = kPolUseOREval | kPolNegateEval; 1695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PolicyOpcode* op = NULL; 1725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The fragment string contains the accumulated characters to match with, it 1745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // never contains wildcards (unless they have been escaped) and while there 1755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // is no fragment there is no new string match opcode to generate. 1765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (fragment->empty()) { 1775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // There is no new opcode to generate but in the last call we have to fix 1785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // the previous opcode because it was really the last but we did not know 1795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // it at that time. 1805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (last_call && (buffer_->opcode_count > 0)) { 1815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op = &buffer_->opcodes[buffer_->opcode_count - 1]; 1825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op->SetOptions(options); 1835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 1855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (PENDING_ASTERISK == state) { 1885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (last_call) { 1895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op = opcode_factory_->MakeOpWStringMatch(parameter, fragment->c_str(), 1905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kSeekToEnd, match_opts, 1915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) options); 1925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else { 1935821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op = opcode_factory_->MakeOpWStringMatch(parameter, fragment->c_str(), 1945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) kSeekForward, match_opts, 1955821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) options); 1965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else if (PENDING_QMARK == state) { 1995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op = opcode_factory_->MakeOpWStringMatch(parameter, fragment->c_str(), 2005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) *skip_count, match_opts, options); 2015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) *skip_count = 0; 2025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else { 2035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (last_call) { 2045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) match_opts = static_cast<StringMatchOptions>(EXACT_LENGHT | match_opts); 2055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) op = opcode_factory_->MakeOpWStringMatch(parameter, fragment->c_str(), 0, 2075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) match_opts, options); 2085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (NULL == op) { 2105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++buffer_->opcode_count; 2135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) fragment->clear(); 2145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 2155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 2165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool PolicyRule::AddStringMatch(RuleType rule_type, int16 parameter, 2185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const wchar_t* string, 2195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) StringMatchOptions match_opts) { 2205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (done_) { 2215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Do not allow to add more rules after generating the action opcode. 2225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const wchar_t* current_char = string; 2265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) uint32 last_char = kLastCharIsNone; 2275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) int state = PENDING_NONE; 2285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) int skip_count = 0; // counts how many '?' we have seen in a row. 2295d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) base::string16 fragment; // accumulates the non-wildcard part. 2305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) while (L'\0' != *current_char) { 2325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) switch (*current_char) { 2335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case L'*': 2345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (kLastCharIsWild & last_char) { 2355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // '**' and '&*' is an error. 2365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!GenStringOpcode(rule_type, match_opts, parameter, 2395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state, false, &skip_count, &fragment)) { 2405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) last_char = kLastCharIsAsterisk; 2435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state = PENDING_ASTERISK; 2445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) break; 2455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case L'?': 2465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (kLastCharIsAsterisk == last_char) { 2475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // '*?' is an error. 2485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!GenStringOpcode(rule_type, match_opts, parameter, 2515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state, false, &skip_count, &fragment)) { 2525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++skip_count; 2555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) last_char = kLastCharIsQuestionM; 2565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state = PENDING_QMARK; 2575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) break; 2585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) case L'/': 2595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Note: "/?" is an escaped '?'. Eat the slash and fall through. 2605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (L'?' == current_char[1]) { 2615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++current_char; 2625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) default: 2645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) fragment += *current_char; 2655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) last_char = kLastCharIsAlpha; 2665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++current_char; 2685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!GenStringOpcode(rule_type, match_opts, parameter, 2715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state, true, &skip_count, &fragment)) { 2725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 2755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 2765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool PolicyRule::AddNumberMatch(RuleType rule_type, int16 parameter, 2785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) unsigned long number, RuleOp comparison_op) { 2795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (done_) { 2805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Do not allow to add more rules after generating the action opcode. 2815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) uint32 opts = (rule_type == IF_NOT)? kPolNegateEval : kPolNone; 2845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (EQUAL == comparison_op) { 2865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (NULL == opcode_factory_->MakeOpNumberMatch(parameter, number, opts)) { 2875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } else if (AND == comparison_op) { 2905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (NULL == opcode_factory_->MakeOpUlongAndMatch(parameter, number, opts)) { 2915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 2925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2935821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 2945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++buffer_->opcode_count; 2955821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 2965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 2975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 2985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool PolicyRule::Done() { 2995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (done_) { 3005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 3015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (NULL == opcode_factory_->MakeOpAction(action_, kPolNone)) { 3035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 3045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++buffer_->opcode_count; 3065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) done_ = true; 3075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 3085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 3095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 3105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool PolicyRule::RebindCopy(PolicyOpcode* opcode_start, size_t opcode_size, 3115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) char* data_start, size_t* data_size) const { 3125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t count = buffer_->opcode_count; 3135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (size_t ix = 0; ix != count; ++ix) { 3145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (opcode_size < sizeof(PolicyOpcode)) { 3155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 3165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) PolicyOpcode& opcode = buffer_->opcodes[ix]; 3185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) *opcode_start = opcode; 3195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (OP_WSTRING_MATCH == opcode.GetID()) { 3205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // For this opcode argument 0 is a delta to the string and argument 1 3215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // is the length (in chars) of the string. 3225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const wchar_t* str = opcode.GetRelativeString(0); 3235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) size_t str_len; 3245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) opcode.GetArgument(1, &str_len); 3255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) str_len = str_len * sizeof(wchar_t); 3265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if ((*data_size) < str_len) { 3275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 3285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) *data_size -= str_len; 3305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) data_start -= str_len; 3315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) memcpy(data_start, str, str_len); 3325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Recompute the string displacement 3335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ptrdiff_t delta = data_start - reinterpret_cast<char*>(opcode_start); 3345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) opcode_start->SetArgument(0, delta); 3355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ++opcode_start; 3375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) opcode_size -= sizeof(PolicyOpcode); 3385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 3395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 3405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 3415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 3425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 3435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)PolicyRule::~PolicyRule() { 3445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) delete [] reinterpret_cast<char*>(buffer_); 3455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) delete opcode_factory_; 3465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 3475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 3485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace sandbox 349