1 /* 2 * Copyright (c) 1998, 2013, Oracle and/or its affiliates. All rights reserved. 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4 * 5 * This code is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 only, as 7 * published by the Free Software Foundation. Oracle designates this 8 * particular file as subject to the "Classpath" exception as provided 9 * by Oracle in the LICENSE file that accompanied this code. 10 * 11 * This code is distributed in the hope that it will be useful, but WITHOUT 12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 14 * version 2 for more details (a copy is included in the LICENSE file that 15 * accompanied this code). 16 * 17 * You should have received a copy of the GNU General Public License version 18 * 2 along with this work; if not, write to the Free Software Foundation, 19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 20 * 21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 22 * or visit www.oracle.com if you need additional information or have any 23 * questions. 24 */ 25 26 #include <dlfcn.h> 27 #include <sys/socket.h> 28 #include <netinet/in.h> 29 #include <arpa/inet.h> 30 31 #include <Security/AuthSession.h> 32 #include <CoreFoundation/CoreFoundation.h> 33 #include <SystemConfiguration/SystemConfiguration.h> 34 #include <Foundation/Foundation.h> 35 36 #include "java_props_macosx.h" 37 38 39 // need dlopen/dlsym trick to avoid pulling in JavaRuntimeSupport before libjava.dylib is loaded 40 static void *getJRSFramework() { 41 static void *jrsFwk = NULL; 42 if (jrsFwk == NULL) { 43 jrsFwk = dlopen("/System/Library/Frameworks/JavaVM.framework/Frameworks/JavaRuntimeSupport.framework/JavaRuntimeSupport", RTLD_LAZY | RTLD_LOCAL); 44 } 45 return jrsFwk; 46 } 47 48 char *getPosixLocale(int cat) { 49 char *lc = setlocale(cat, NULL); 50 if ((lc == NULL) || (strcmp(lc, "C") == 0)) { 51 lc = getenv("LANG"); 52 } 53 if (lc == NULL) return NULL; 54 return strdup(lc); 55 } 56 57 #define LOCALEIDLENGTH 128 58 char *getMacOSXLocale(int cat) { 59 switch (cat) { 60 case LC_MESSAGES: 61 { 62 void *jrsFwk = getJRSFramework(); 63 if (jrsFwk == NULL) return NULL; 64 65 char *(*JRSCopyPrimaryLanguage)() = dlsym(jrsFwk, "JRSCopyPrimaryLanguage"); 66 char *primaryLanguage = JRSCopyPrimaryLanguage ? JRSCopyPrimaryLanguage() : NULL; 67 if (primaryLanguage == NULL) return NULL; 68 69 char *(*JRSCopyCanonicalLanguageForPrimaryLanguage)(char *) = dlsym(jrsFwk, "JRSCopyCanonicalLanguageForPrimaryLanguage"); 70 char *canonicalLanguage = JRSCopyCanonicalLanguageForPrimaryLanguage ? JRSCopyCanonicalLanguageForPrimaryLanguage(primaryLanguage) : NULL; 71 free (primaryLanguage); 72 73 return canonicalLanguage; 74 } 75 break; 76 default: 77 { 78 char localeString[LOCALEIDLENGTH]; 79 if (CFStringGetCString(CFLocaleGetIdentifier(CFLocaleCopyCurrent()), 80 localeString, LOCALEIDLENGTH, CFStringGetSystemEncoding())) { 81 return strdup(localeString); 82 } 83 } 84 break; 85 } 86 87 return NULL; 88 } 89 90 char *setupMacOSXLocale(int cat) { 91 char * ret = getMacOSXLocale(cat); 92 93 if (cat == LC_MESSAGES && ret != NULL) { 94 void *jrsFwk = getJRSFramework(); 95 if (jrsFwk != NULL) { 96 void (*JRSSetDefaultLocalization)(char *) = dlsym(jrsFwk, "JRSSetDefaultLocalization"); 97 if (JRSSetDefaultLocalization) JRSSetDefaultLocalization(ret); 98 } 99 } 100 101 if (ret == NULL) { 102 return getPosixLocale(cat); 103 } else { 104 return ret; 105 } 106 } 107 108 int isInAquaSession() { 109 // environment variable to bypass the aqua session check 110 char *ev = getenv("AWT_FORCE_HEADFUL"); 111 if (ev && (strncasecmp(ev, "true", 4) == 0)) { 112 // if "true" then tell the caller we're in an Aqua session without actually checking 113 return 1; 114 } 115 // Is the WindowServer available? 116 SecuritySessionId session_id; 117 SessionAttributeBits session_info; 118 OSStatus status = SessionGetInfo(callerSecuritySession, &session_id, &session_info); 119 if (status == noErr) { 120 if (session_info & sessionHasGraphicAccess) { 121 return 1; 122 } 123 } 124 return 0; 125 } 126 127 void setOSNameAndVersion(java_props_t *sprops) { 128 /* Don't rely on JRSCopyOSName because there's no guarantee the value will 129 * remain the same, or even if the JRS functions will continue to be part of 130 * Mac OS X. So hardcode os_name, and fill in os_version if we can. 131 */ 132 sprops->os_name = strdup("Mac OS X"); 133 134 void *jrsFwk = getJRSFramework(); 135 if (jrsFwk != NULL) { 136 char *(*copyOSVersion)() = dlsym(jrsFwk, "JRSCopyOSVersion"); 137 if (copyOSVersion != NULL) { 138 sprops->os_version = copyOSVersion(); 139 return; 140 } 141 } 142 sprops->os_version = strdup("Unknown"); 143 } 144 145 146 static Boolean getProxyInfoForProtocol(CFDictionaryRef inDict, CFStringRef inEnabledKey, CFStringRef inHostKey, CFStringRef inPortKey, CFStringRef *outProxyHost, int *ioProxyPort) { 147 /* See if the proxy is enabled. */ 148 CFNumberRef cf_enabled = CFDictionaryGetValue(inDict, inEnabledKey); 149 if (cf_enabled == NULL) { 150 return false; 151 } 152 153 int isEnabled = false; 154 if (!CFNumberGetValue(cf_enabled, kCFNumberIntType, &isEnabled)) { 155 return isEnabled; 156 } 157 158 if (!isEnabled) return false; 159 *outProxyHost = CFDictionaryGetValue(inDict, inHostKey); 160 161 // If cf_host is null, that means the checkbox is set, 162 // but no host was entered. We'll treat that as NOT ENABLED. 163 // If cf_port is null or cf_port isn't a number, that means 164 // no port number was entered. Treat this as ENABLED with the 165 // protocol's default port. 166 if (*outProxyHost == NULL) { 167 return false; 168 } 169 170 if (CFStringGetLength(*outProxyHost) == 0) { 171 return false; 172 } 173 174 int newPort = 0; 175 CFNumberRef cf_port = NULL; 176 if ((cf_port = CFDictionaryGetValue(inDict, inPortKey)) != NULL && 177 CFNumberGetValue(cf_port, kCFNumberIntType, &newPort) && 178 newPort > 0) { 179 *ioProxyPort = newPort; 180 } else { 181 // bad port or no port - leave *ioProxyPort unchanged 182 } 183 184 return true; 185 } 186 187 static char *createUTF8CString(const CFStringRef theString) { 188 if (theString == NULL) return NULL; 189 190 const CFIndex stringLength = CFStringGetLength(theString); 191 const CFIndex bufSize = CFStringGetMaximumSizeForEncoding(stringLength, kCFStringEncodingUTF8) + 1; 192 char *returnVal = (char *)malloc(bufSize); 193 194 if (CFStringGetCString(theString, returnVal, bufSize, kCFStringEncodingUTF8)) { 195 return returnVal; 196 } 197 198 free(returnVal); 199 return NULL; 200 } 201 202 // Return TRUE if str is a syntactically valid IP address. 203 // Using inet_pton() instead of inet_aton() for IPv6 support. 204 // len is only a hint; cstr must still be nul-terminated 205 static int looksLikeIPAddress(char *cstr, size_t len) { 206 if (len == 0 || (len == 1 && cstr[0] == '.')) return FALSE; 207 208 char dst[16]; // big enough for INET6 209 return (1 == inet_pton(AF_INET, cstr, dst) || 210 1 == inet_pton(AF_INET6, cstr, dst)); 211 } 212 213 214 215 // Convert Mac OS X proxy exception entry to Java syntax. 216 // See Radar #3441134 for details. 217 // Returns NULL if this exception should be ignored by Java. 218 // May generate a string with multiple exceptions separated by '|'. 219 static char * createConvertedException(CFStringRef cf_original) { 220 // This is done with char* instead of CFString because inet_pton() 221 // needs a C string. 222 char *c_exception = createUTF8CString(cf_original); 223 if (!c_exception) return NULL; 224 225 int c_len = strlen(c_exception); 226 227 // 1. sanitize exception prefix 228 if (c_len >= 1 && 0 == strncmp(c_exception, ".", 1)) { 229 memmove(c_exception, c_exception+1, c_len); 230 c_len -= 1; 231 } else if (c_len >= 2 && 0 == strncmp(c_exception, "*.", 2)) { 232 memmove(c_exception, c_exception+2, c_len-1); 233 c_len -= 2; 234 } 235 236 // 2. pre-reject other exception wildcards 237 if (strchr(c_exception, '*')) { 238 free(c_exception); 239 return NULL; 240 } 241 242 // 3. no IP wildcarding 243 if (looksLikeIPAddress(c_exception, c_len)) { 244 return c_exception; 245 } 246 247 // 4. allow domain suffixes 248 // c_exception is now "str\0" - change to "str|*.str\0" 249 c_exception = reallocf(c_exception, c_len+3+c_len+1); 250 if (!c_exception) return NULL; 251 252 strncpy(c_exception+c_len, "|*.", 3); 253 strncpy(c_exception+c_len+3, c_exception, c_len); 254 c_exception[c_len+3+c_len] = '\0'; 255 return c_exception; 256 } 257 258 /* 259 * Method for fetching the user.home path and storing it in the property list. 260 * For signed .apps running in the Mac App Sandbox, user.home is set to the 261 * app's sandbox container. 262 */ 263 void setUserHome(java_props_t *sprops) { 264 if (sprops == NULL) { return; } 265 NSAutoreleasePool *pool = [[NSAutoreleasePool alloc] init]; 266 sprops->user_home = createUTF8CString((CFStringRef)NSHomeDirectory()); 267 [pool drain]; 268 } 269 270 /* 271 * Method for fetching proxy info and storing it in the property list. 272 */ 273 void setProxyProperties(java_props_t *sProps) { 274 if (sProps == NULL) return; 275 276 char buf[16]; /* Used for %d of an int - 16 is plenty */ 277 CFStringRef 278 cf_httpHost = NULL, 279 cf_httpsHost = NULL, 280 cf_ftpHost = NULL, 281 cf_socksHost = NULL, 282 cf_gopherHost = NULL; 283 int 284 httpPort = 80, // Default proxy port values 285 httpsPort = 443, 286 ftpPort = 21, 287 socksPort = 1080, 288 gopherPort = 70; 289 290 CFDictionaryRef dict = SCDynamicStoreCopyProxies(NULL); 291 if (dict == NULL) return; 292 293 /* Read the proxy exceptions list */ 294 CFArrayRef cf_list = CFDictionaryGetValue(dict, kSCPropNetProxiesExceptionsList); 295 296 CFMutableStringRef cf_exceptionList = NULL; 297 if (cf_list != NULL) { 298 CFIndex len = CFArrayGetCount(cf_list), idx; 299 300 cf_exceptionList = CFStringCreateMutable(NULL, 0); 301 for (idx = (CFIndex)0; idx < len; idx++) { 302 CFStringRef cf_ehost; 303 if ((cf_ehost = CFArrayGetValueAtIndex(cf_list, idx))) { 304 /* Convert this exception from Mac OS X syntax to Java syntax. 305 See Radar #3441134 for details. This may generate a string 306 with multiple Java exceptions separated by '|'. */ 307 char *c_exception = createConvertedException(cf_ehost); 308 if (c_exception) { 309 /* Append the host to the list of exclusions. */ 310 if (CFStringGetLength(cf_exceptionList) > 0) { 311 CFStringAppendCString(cf_exceptionList, "|", kCFStringEncodingMacRoman); 312 } 313 CFStringAppendCString(cf_exceptionList, c_exception, kCFStringEncodingMacRoman); 314 free(c_exception); 315 } 316 } 317 } 318 } 319 320 if (cf_exceptionList != NULL) { 321 if (CFStringGetLength(cf_exceptionList) > 0) { 322 sProps->exceptionList = createUTF8CString(cf_exceptionList); 323 } 324 CFRelease(cf_exceptionList); 325 } 326 327 #define CHECK_PROXY(protocol, PROTOCOL) \ 328 sProps->protocol##ProxyEnabled = \ 329 getProxyInfoForProtocol(dict, kSCPropNetProxies##PROTOCOL##Enable, \ 330 kSCPropNetProxies##PROTOCOL##Proxy, \ 331 kSCPropNetProxies##PROTOCOL##Port, \ 332 &cf_##protocol##Host, &protocol##Port); \ 333 if (sProps->protocol##ProxyEnabled) { \ 334 sProps->protocol##Host = createUTF8CString(cf_##protocol##Host); \ 335 snprintf(buf, sizeof(buf), "%d", protocol##Port); \ 336 sProps->protocol##Port = malloc(strlen(buf) + 1); \ 337 strcpy(sProps->protocol##Port, buf); \ 338 } 339 340 CHECK_PROXY(http, HTTP); 341 CHECK_PROXY(https, HTTPS); 342 CHECK_PROXY(ftp, FTP); 343 CHECK_PROXY(socks, SOCKS); 344 CHECK_PROXY(gopher, Gopher); 345 346 #undef CHECK_PROXY 347 348 CFRelease(dict); 349 }