1 /*
2 * Copyright (c) 2003, 2017, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation. Oracle designates this
8 * particular file as subject to the "Classpath" exception as provided
9 * by Oracle in the LICENSE file that accompanied this code.
10 *
11 * This code is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 * version 2 for more details (a copy is included in the LICENSE file that
15 * accompanied this code).
16 *
17 * You should have received a copy of the GNU General Public License version
18 * 2 along with this work; if not, write to the Free Software Foundation,
19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 *
21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 * or visit www.oracle.com if you need additional information or have any
23 * questions.
24 */
25
26 package javax.xml.validation;
27
28 import java.io.File;
29 import java.lang.reflect.InvocationTargetException;
30 import java.lang.reflect.Method;
31 import java.lang.reflect.Modifier;
32 import java.security.AccessControlContext;
33 import java.security.AccessController;
34 import java.security.PrivilegedAction;
35 import java.util.Properties;
36 import java.util.ServiceConfigurationError;
37 import java.util.ServiceLoader;
38 import java.util.function.Supplier;
39 import jdk.xml.internal.SecuritySupport;
40
41 /**
42 * Implementation of {@link SchemaFactory#newInstance(String)}.
43 *
44 * @author Kohsuke Kawaguchi
45 * @since 1.5
46 */
47 class SchemaFactoryFinder {
48
49 /** debug support code. */
50 private static boolean debug = false;
51
52 private static final String DEFAULT_PACKAGE = "com.sun.org.apache.xerces.internal";
53 /**
54 * <p>Cache properties for performance.</p>
55 */
56 private static final Properties cacheProps = new Properties();
57
58 /**
59 * <p>First time requires initialization overhead.</p>
60 */
61 private static volatile boolean firstTime = true;
62
63 static {
64 // Use try/catch block to support applets
65 try {
66 debug = SecuritySupport.getSystemProperty("jaxp.debug") != null;
67 } catch (Exception unused) {
68 debug = false;
69 }
70 }
71
72 /**
73 * <p>Conditional debug printing.</p>
74 *
75 * @param msgGen Supplier function that returns debug message
76 */
77 private static void debugPrintln(Supplier<String> msgGen) {
78 if (debug) {
79 System.err.println("JAXP: " + msgGen.get());
80 }
81 }
82
83 /**
84 * <p><code>ClassLoader</code> to use to find <code>SchemaFactory</code>.</p>
85 */
86 private final ClassLoader classLoader;
87
88 /**
89 * <p>Constructor that specifies <code>ClassLoader</code> to use
90 * to find <code>SchemaFactory</code>.</p>
91 *
92 * @param loader
93 * to be used to load resource, {@link SchemaFactory}, and
94 * {@link SchemaFactoryLoader} implementations during
95 * the resolution process.
96 * If this parameter is null, the default system class loader
97 * will be used.
98 */
99 public SchemaFactoryFinder(ClassLoader loader) {
100 this.classLoader = loader;
101 if( debug ) {
102 debugDisplayClassLoader();
103 }
104 }
105
106 private void debugDisplayClassLoader() {
107 try {
108 if( classLoader == SecuritySupport.getContextClassLoader() ) {
109 debugPrintln(()->"using thread context class loader ("+classLoader+") for search");
110 return;
111 }
112 } catch( Throwable unused ) {
113 // getContextClassLoader() undefined in JDK1.1
114 }
115
116 if( classLoader==ClassLoader.getSystemClassLoader() ) {
117 debugPrintln(()->"using system class loader ("+classLoader+") for search");
118 return;
119 }
120
121 debugPrintln(()->"using class loader ("+classLoader+") for search");
122 }
123
124 /**
125 * <p>Creates a new {@link SchemaFactory} object for the specified
126 * schema language.</p>
127 *
128 * @param schemaLanguage
129 * See {@link SchemaFactory Schema Language} table in <code>SchemaFactory</code>
130 * for the list of available schema languages.
131 *
132 * @return <code>null</code> if the callee fails to create one.
133 *
134 * @throws NullPointerException
135 * If the <code>schemaLanguage</code> parameter is null.
136 * @throws SchemaFactoryConfigurationError
137 * If a configuration error is encountered.
138 */
139 public SchemaFactory newFactory(String schemaLanguage) {
140 if(schemaLanguage==null) {
141 throw new NullPointerException();
142 }
143 SchemaFactory f = _newFactory(schemaLanguage);
144 if (f != null) {
145 debugPrintln(()->"factory '" + f.getClass().getName() + "' was found for " + schemaLanguage);
146 } else {
147 debugPrintln(()->"unable to find a factory for " + schemaLanguage);
148 }
149 return f;
150 }
151
152 /**
153 * <p>Lookup a <code>SchemaFactory</code> for the given <code>schemaLanguage</code>.</p>
154 *
155 * @param schemaLanguage Schema language to lookup <code>SchemaFactory</code> for.
156 *
157 * @return <code>SchemaFactory</code> for the given <code>schemaLanguage</code>.
158 */
159 private SchemaFactory _newFactory(String schemaLanguage) {
160 SchemaFactory sf;
161
162 String propertyName = SERVICE_CLASS.getName() + ":" + schemaLanguage;
163
164 // system property look up
165 try {
166 debugPrintln(()->"Looking up system property '"+propertyName+"'" );
167 String r = SecuritySupport.getSystemProperty(propertyName);
168 if(r!=null) {
169 debugPrintln(()->"The value is '"+r+"'");
170 sf = createInstance(r, true);
171 if(sf!=null) return sf;
172 } else
173 debugPrintln(()->"The property is undefined.");
174 } catch( Throwable t ) {
175 if( debug ) {
176 debugPrintln(()->"failed to look up system property '"+propertyName+"'" );
177 t.printStackTrace();
178 }
179 }
180
181 String javah = SecuritySupport.getSystemProperty( "java.home" );
182 String configFile = javah + File.separator +
183 "conf" + File.separator + "jaxp.properties";
184
185
186 // try to read from $java.home/conf/jaxp.properties
187 try {
188 if(firstTime){
189 synchronized(cacheProps){
190 if(firstTime){
191 File f=new File( configFile );
192 firstTime = false;
193 if(SecuritySupport.doesFileExist(f)){
194 debugPrintln(()->"Read properties file " + f);
195 cacheProps.load(SecuritySupport.getFileInputStream(f));
196 }
197 }
198 }
199 }
200 final String factoryClassName = cacheProps.getProperty(propertyName);
201 debugPrintln(()->"found " + factoryClassName + " in $java.home/conf/jaxp.properties");
202
203 if (factoryClassName != null) {
204 sf = createInstance(factoryClassName, true);
205 if(sf != null){
206 return sf;
207 }
208 }
209 } catch (Exception ex) {
210 if (debug) {
211 ex.printStackTrace();
212 }
213 }
214
215 // Try with ServiceLoader
216 final SchemaFactory factoryImpl = findServiceProvider(schemaLanguage);
217
218 // The following assertion should always be true.
219 // Uncomment it, recompile, and run with -ea in case of doubts:
220 // assert factoryImpl == null || factoryImpl.isSchemaLanguageSupported(schemaLanguage);
221
222 if (factoryImpl != null) {
223 return factoryImpl;
224 }
225
226 // platform default
227 if(schemaLanguage.equals("http://www.w3.org/2001/XMLSchema")) {
228 debugPrintln(()->"attempting to use the platform default XML Schema validator");
229 return createInstance("com.sun.org.apache.xerces.internal.jaxp.validation.XMLSchemaFactory", true);
230 }
231
232 debugPrintln(()->"all things were tried, but none was found. bailing out.");
233 return null;
234 }
235
236 /** <p>Create class using appropriate ClassLoader.</p>
237 *
238 * @param className Name of class to create.
239 * @return Created class or <code>null</code>.
240 */
241 private Class<?> createClass(String className) {
242 Class<?> clazz;
243 // make sure we have access to restricted packages
244 boolean internal = false;
245 if (System.getSecurityManager() != null) {
246 if (className != null && className.startsWith(DEFAULT_PACKAGE)) {
247 internal = true;
248 }
249 }
250
251 try {
252 if (classLoader != null && !internal) {
253 clazz = Class.forName(className, false, classLoader);
254 } else {
255 clazz = Class.forName(className);
256 }
257 } catch (Throwable t) {
258 if(debug) {
259 t.printStackTrace();
260 }
261 return null;
262 }
263
264 return clazz;
265 }
266
267 /**
268 * <p>Creates an instance of the specified and returns it.</p>
269 *
270 * @param className
271 * fully qualified class name to be instantiated.
272 *
273 * @return null
274 * if it fails. Error messages will be printed by this method.
275 */
276 SchemaFactory createInstance( String className ) {
277 return createInstance( className, false );
278 }
279
280 SchemaFactory createInstance( String className, boolean useServicesMechanism ) {
281 SchemaFactory schemaFactory = null;
282
283 debugPrintln(()->"createInstance(" + className + ")");
284
285 // get Class from className
286 Class<?> clazz = createClass(className);
287 if (clazz == null) {
288 debugPrintln(()->"failed to getClass(" + className + ")");
289 return null;
290 }
291 debugPrintln(()->"loaded " + className + " from " + which(clazz));
292
293 // instantiate Class as a SchemaFactory
294 try {
295 if (!SchemaFactory.class.isAssignableFrom(clazz)) {
296 throw new ClassCastException(clazz.getName()
297 + " cannot be cast to " + SchemaFactory.class);
298 }
299 if (!useServicesMechanism) {
300 schemaFactory = newInstanceNoServiceLoader(clazz);
301 }
302 if (schemaFactory == null) {
303 schemaFactory = (SchemaFactory) clazz.getConstructor().newInstance();
304 }
305 } catch (ClassCastException | IllegalAccessException | IllegalArgumentException |
306 InstantiationException | InvocationTargetException | NoSuchMethodException |
307 SecurityException ex) {
308 debugPrintln(()->"could not instantiate " + clazz.getName());
309 if (debug) {
310 ex.printStackTrace();
311 }
312 return null;
313 }
314
315 return schemaFactory;
316 }
317
318 /**
319 * Try to construct using newXMLSchemaFactoryNoServiceLoader
320 * method if available.
321 */
322 private static SchemaFactory newInstanceNoServiceLoader(
323 Class<?> providerClass
324 ) {
325 // Retain maximum compatibility if no security manager.
326 if (System.getSecurityManager() == null) {
327 return null;
328 }
329 try {
330 final Method creationMethod =
331 providerClass.getDeclaredMethod(
332 "newXMLSchemaFactoryNoServiceLoader"
333 );
334 final int modifiers = creationMethod.getModifiers();
335
336 // Do not call the method if it's not public static.
337 if (!Modifier.isStatic(modifiers) || !Modifier.isPublic(modifiers)) {
338 return null;
339 }
340
341 // Only calls "newXMLSchemaFactoryNoServiceLoader" if it's
342 // declared to return an instance of SchemaFactory.
343 final Class<?> returnType = creationMethod.getReturnType();
344 if (SERVICE_CLASS.isAssignableFrom(returnType)) {
345 return SERVICE_CLASS.cast(creationMethod.invoke(null, (Object[])null));
346 } else {
347 // Should not happen since
348 // XMLSchemaFactory.newXMLSchemaFactoryNoServiceLoader is
349 // declared to return XMLSchemaFactory.
350 throw new ClassCastException(returnType
351 + " cannot be cast to " + SERVICE_CLASS);
352 }
353 } catch(ClassCastException e) {
354 throw new SchemaFactoryConfigurationError(e.getMessage(), e);
355 } catch (NoSuchMethodException exc) {
356 return null;
357 } catch (Exception exc) {
358 return null;
359 }
360 }
361
362 // Call isSchemaLanguageSupported with initial context.
363 private boolean isSchemaLanguageSupportedBy(final SchemaFactory factory,
364 final String schemaLanguage,
365 AccessControlContext acc) {
366 return AccessController.doPrivileged(new PrivilegedAction<Boolean>() {
367 public Boolean run() {
368 return factory.isSchemaLanguageSupported(schemaLanguage);
369 }
370 }, acc);
371 }
372
373 /**
374 * Finds a service provider subclass of SchemaFactory that supports the
375 * given schema language using the ServiceLoader.
376 *
377 * @param schemaLanguage The schema language for which we seek a factory.
378 * @return A SchemaFactory supporting the specified schema language, or null
379 * if none is found.
380 * @throws SchemaFactoryConfigurationError if a configuration error is found.
381 */
382 private SchemaFactory findServiceProvider(final String schemaLanguage) {
383 assert schemaLanguage != null;
384 // store current context.
385 final AccessControlContext acc = AccessController.getContext();
386 try {
387 return AccessController.doPrivileged(new PrivilegedAction<SchemaFactory>() {
388 public SchemaFactory run() {
389 final ServiceLoader<SchemaFactory> loader =
390 ServiceLoader.load(SERVICE_CLASS);
391 for (SchemaFactory factory : loader) {
392 // restore initial context to call
393 // factory.isSchemaLanguageSupported
394 if (isSchemaLanguageSupportedBy(factory, schemaLanguage, acc)) {
395 return factory;
396 }
397 }
398 return null; // no factory found.
399 }
400 });
401 } catch (ServiceConfigurationError error) {
402 throw new SchemaFactoryConfigurationError(
403 "Provider for " + SERVICE_CLASS + " cannot be created", error);
404 }
405 }
406
407 private static final Class<SchemaFactory> SERVICE_CLASS = SchemaFactory.class;
408
409
410 // Used for debugging purposes
411 private static String which( Class<?> clazz ) {
412 return SecuritySupport.getClassSource(clazz);
413 }
414 }