/*
 * Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

import java.io.File;
import java.io.FilePermission;
import java.io.IOException;
import java.io.UncheckedIOException;
import java.lang.reflect.Field;
import java.lang.reflect.ReflectPermission;
import java.nio.file.Files;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.security.CodeSource;
import java.security.Permission;
import java.security.PermissionCollection;
import java.security.Permissions;
import java.security.Policy;
import java.security.ProtectionDomain;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collections;
import java.util.Enumeration;
import java.util.Iterator;
import java.util.List;
import java.util.PropertyPermission;
import java.util.Set;
import java.util.TreeSet;
import java.util.concurrent.atomic.AtomicBoolean;
import java.util.concurrent.atomic.AtomicLong;
import java.util.stream.Collectors;
import java.util.stream.Stream;
import jdk.internal.jimage.BasicImageReader;

/**
 * @test
 * @bug 8065552
 * @summary test that all fields returned by getDeclaredFields() can be
 *          set accessible if the right permission is granted; this test
 *          loads all the classes in the BCL, get their declared fields,
 *          and call setAccessible(false) followed by setAccessible(true);
 * @run main/othervm FieldSetAccessibleTest UNSECURE
 * @run main/othervm FieldSetAccessibleTest SECURE
 *
 * @author danielfuchs
 */
public class FieldSetAccessibleTest {

    static final List<String> skipped = new ArrayList<>();
    static final List<String> cantread = new ArrayList<>();
    static final List<String> failed = new ArrayList<>();
    static final AtomicLong classCount = new AtomicLong();
    static final AtomicLong fieldCount = new AtomicLong();
    static long startIndex = 0;
    static long maxSize = Long.MAX_VALUE;
    static long maxIndex = Long.MAX_VALUE;

    // You can use -Dtest.boot.only=false if you want to run this test
    // over all 3 images (bootmodules, extmodules, appmodules)
    final static boolean restrictToBoot = Boolean.parseBoolean(
        System.getProperty("test.boot.only", "true"));

    // You can use -Dtest.list.classes=true if you want this test to print
    // out a list of all the classes it has loaded for each of the
    // three loaders (boot CL, extension CL, application CL)
    final static boolean listClassesByLoader = Boolean.parseBoolean(
        System.getProperty("test.list.classes", "false"));


    // Test that all fields for any given class can be made accessibles
    static void testSetFieldsAccessible(Class<?> c) {
        for (Field f : c.getDeclaredFields()) {
            fieldCount.incrementAndGet();
            f.setAccessible(false);
            f.setAccessible(true);
        }
    }

    // Performs a series of test on the given class.
    // At this time, we only call testSetFieldsAccessible(c)
    public static boolean test(Class<?> c) {
        //System.out.println(c.getName());
        classCount.incrementAndGet();

        // Call getDeclaredFields() and try to set their accessible flag.
        testSetFieldsAccessible(c);

        // add more tests here...

        return c == Class.class;
    }

    // The ClassLoader that will be passed at Class.forName in order to
    // load this class. This test uses either 'null' (when restrictToBoot is
    // true) or the system class loader otherwise.
    static ClassLoader getClassLoaderFor(String classFileName) {
        return ClassLoaders.getFor(classFileName);
    }

    // Can be used to verify assumptions about the defining class loader
    // of a given class. 'loader' is the class loader that was passed to
    // Class.forName when loading 'c'.
    static void checkClassLoaderFor(Class<?> c, ClassLoader loader) {
        ClassLoaders.checkFor(c, loader);
    }

    // Prints a summary at the end of the test.
    static void printSummary(long secs, long millis, long nanos) {
        ClassLoaders.printClasses();
        System.out.println("Tested " + fieldCount.get() + " fields of "
                + classCount.get() + " classes in "
                + secs + "s " + millis + "ms " + nanos + "ns");
    }


    static class ClassLoaders {
        final static ClassLoader systemClassLoader = ClassLoader.getSystemClassLoader();
        final static ClassLoader extensionClassLoader = systemClassLoader.getParent();
        final static Set<String> bootClasses = new TreeSet<>();
        final static Set<String> applicationClasses = new TreeSet<>();
        final static Set<String> extensionClasses = new TreeSet<>();

        static ClassLoader getFor(String classFileName) {
            if (restrictToBoot) return null; // only bootmodules
            return ClassLoaders.systemClassLoader;
        }
        static void checkFor(Class<?> c, ClassLoader loader) {
            final ClassLoader cl = c.getClassLoader();
            if (cl != null) {
                if (restrictToBoot || (cl != systemClassLoader && cl != extensionClassLoader)) {
                    System.err.println("Unexpected loader for " + c + ": " + cl);
                }
                if (cl == extensionClassLoader) {
                    extensionClasses.add(c.getName());
                }
                if (cl == systemClassLoader) {
                    applicationClasses.add(c.getName());
                }
            } else {
                bootClasses.add(c.getName());
            }
        }

        static void printClasses() {
            if (listClassesByLoader) {
                System.out.println("\n-------------    Boot  Classes    -------------\n");
                bootClasses.stream().forEachOrdered(s -> System.out.println(s));
                System.out.println("\n-------------  Extension Classes  -------------\n");
                extensionClasses.stream().forEachOrdered(s -> System.out.println(s));
                System.out.println("\n------------- Application Classes -------------\n");
                applicationClasses.stream().forEachOrdered(s -> System.out.println(s));
                System.out.println("\n-----------------------------------------------\n");
            }
        }
    }

    /**
     * @param args the command line arguments:
     *
     *     SECURE|UNSECURE [startIndex (default=0)] [maxSize (default=Long.MAX_VALUE)]
     *
     * @throws java.lang.Exception if the test fails
     */
    public static void main(String[] args) throws Exception {
        if (args == null || args.length == 0) {
            args = new String[] {"SECURE", "0"};
        } else if (args.length > 3) {
            throw new RuntimeException("Expected at most one argument. Found "
                    + Arrays.asList(args));
        }
        try {
            if (args.length > 1) {
                startIndex = Long.parseLong(args[1]);
                if (startIndex < 0) {
                    throw new IllegalArgumentException("startIndex args[1]: "
                            + startIndex);
                }
            }
            if (args.length > 2) {
                maxSize = Long.parseLong(args[2]);
                if (maxSize <= 0) {
                    maxSize = Long.MAX_VALUE;
                }
                maxIndex = (Long.MAX_VALUE - startIndex) < maxSize
                        ? Long.MAX_VALUE : startIndex + maxSize;
            }
            TestCase.valueOf(args[0]).run();
        } catch (OutOfMemoryError oome) {
            System.err.println(classCount.get());
            throw oome;
        }
    }

    public static void run(TestCase test) {
        System.out.println("Testing " + test);
        test(listAllClassNames());
        System.out.println("Passed " + test);
    }

    static Iterable<String> listAllClassNames() {
        return new ClassNameJImageStreamBuilder();
    }

    static void test(Iterable<String> iterable) {
        final long start = System.nanoTime();
        boolean classFound = false;
        int index = 0;
        for (String s: iterable) {
            if (index == maxIndex) break;
            try {
                if (index < startIndex) continue;
                if (test(getClassLoaderFor(s), s)) {
                    classFound = true;
                }
            } finally {
                index++;
            }
        }
        long elapsed = System.nanoTime() - start;
        long secs = elapsed / 1000_000_000;
        long millis = (elapsed % 1000_000_000) / 1000_000;
        long nanos  = elapsed % 1000_000;
        System.out.println("Unreadable path elements: " + cantread);
        System.out.println("Skipped path elements: " + skipped);
        System.out.println("Failed path elements: " + failed);
        printSummary(secs, millis, nanos);

        if (!failed.isEmpty()) {
            throw new RuntimeException("Test failed for the following classes: " + failed);
        }
        if (!classFound && startIndex == 0 && index < maxIndex) {
            // this is just to verify that we have indeed parsed rt.jar
            // (or the java.base module)
            throw  new RuntimeException("Test failed: Class.class not found...");
        }
        if (classCount.get() == 0 && startIndex == 0) {
            throw  new RuntimeException("Test failed: no class found?");
        }
    }

    static boolean test(ClassLoader loader, String s) {
        try {
            if (s.startsWith("WrapperGenerator")) {
                System.out.println("Skipping "+ s);
                return false;
            }
            final Class<?> c = Class.forName(
                    s.replace('/', '.').substring(0, s.length() - 6),
                    false,
                    loader);
            checkClassLoaderFor(c, loader);
            return test(c);
        } catch (Exception t) {
            t.printStackTrace(System.err);
            failed.add(s);
        }
        return false;
    }

    static class ClassNameJImageStreamBuilder implements Iterable<String>{

        final String[] images;

        ClassNameJImageStreamBuilder() {
            images = findImageFiles();
        }

        static String[] findImageFiles() {
            if (restrictToBoot) {
                return System.getProperty("sun.boot.class.path")
                        .split(File.pathSeparator);
            } else {
                Path modules = Paths.get(System.getProperty("java.home"),
                        "lib", "modules");
                try {
                    return Files.walk(modules)
                        .filter(p -> p.getFileName().toString().endsWith(".jimage"))
                        .map(p -> p.toString())
                        .collect(Collectors.toList())
                        .toArray(new String[3]);
                } catch (IOException x) {
                    throw new UncheckedIOException(x);
                }
            }
        }

        Stream<String> build() {
            return Arrays.stream(images)
                    .filter(x -> x.endsWith(".jimage"))
                    .flatMap(this::toJImageReader)
                    .flatMap(r -> Arrays.stream(r.getEntryNames()))
                    .filter(n -> n.endsWith(".class"));
        }

        @Override
        public Iterator<String> iterator() {
            return build().iterator();
        }

        private Stream<JImageReader> toJImageReader(String imageName) {
            try {
                return Stream.of(new JImageReader(Paths.get(imageName)));
            } catch(IOException x) {
                x.printStackTrace(System.err);
                skipped.add(imageName);
            }
            return Collections.<JImageReader>emptyList().stream();
        }

        static class JImageReader extends BasicImageReader {

            final Path jimage;

            JImageReader(Path p) throws IOException {
                super(p.toString());
                System.out.println("JImageReader: " + p.toString());
                this.jimage = p;
            }

            String imageName() {
                return jimage.getFileName().toString();
            }

            int entries() {
                return getHeader().getLocationCount();
            }
        }
    }

    // Test with or without a security manager
    public static enum TestCase {
        UNSECURE, SECURE;
        public void run() throws Exception {
            System.out.println("Running test case: " + name());
            Configure.setUp(this);
            FieldSetAccessibleTest.run(this);
        }
    }

    // A helper class to configure the security manager for the test,
    // and bypass it when needed.
    static class Configure {
        static Policy policy = null;
        static final ThreadLocal<AtomicBoolean> allowAll = new ThreadLocal<AtomicBoolean>() {
            @Override
            protected AtomicBoolean initialValue() {
                return  new AtomicBoolean(false);
            }
        };
        static void setUp(TestCase test) {
            switch (test) {
                case SECURE:
                    if (policy == null && System.getSecurityManager() != null) {
                        throw new IllegalStateException("SecurityManager already set");
                    } else if (policy == null) {
                        policy = new SimplePolicy(TestCase.SECURE, allowAll);
                        Policy.setPolicy(policy);
                        System.setSecurityManager(new SecurityManager());
                    }
                    if (System.getSecurityManager() == null) {
                        throw new IllegalStateException("No SecurityManager.");
                    }
                    if (policy == null) {
                        throw new IllegalStateException("policy not configured");
                    }
                    break;
                case UNSECURE:
                    if (System.getSecurityManager() != null) {
                        throw new IllegalStateException("SecurityManager already set");
                    }
                    break;
                default:
                    throw new InternalError("No such testcase: " + test);
            }
        }
        static void doPrivileged(Runnable run) {
            allowAll.get().set(true);
            try {
                run.run();
            } finally {
                allowAll.get().set(false);
            }
        }
    }

    // A Helper class to build a set of permissions.
    final static class PermissionsBuilder {
        final Permissions perms;
        public PermissionsBuilder() {
            this(new Permissions());
        }
        public PermissionsBuilder(Permissions perms) {
            this.perms = perms;
        }
        public PermissionsBuilder add(Permission p) {
            perms.add(p);
            return this;
        }
        public PermissionsBuilder addAll(PermissionCollection col) {
            if (col != null) {
                for (Enumeration<Permission> e = col.elements(); e.hasMoreElements(); ) {
                    perms.add(e.nextElement());
                }
            }
            return this;
        }
        public Permissions toPermissions() {
            final PermissionsBuilder builder = new PermissionsBuilder();
            builder.addAll(perms);
            return builder.perms;
        }
    }

    // Policy for the test...
    public static class SimplePolicy extends Policy {

        final Permissions permissions;
        final Permissions allPermissions;
        final ThreadLocal<AtomicBoolean> allowAll;
        public SimplePolicy(TestCase test, ThreadLocal<AtomicBoolean> allowAll) {
            this.allowAll = allowAll;

            // Permission needed by the tested code exercised in the test
            permissions = new Permissions();
            permissions.add(new RuntimePermission("createClassLoader"));
            permissions.add(new RuntimePermission("closeClassLoader"));
            permissions.add(new RuntimePermission("getClassLoader"));
            permissions.add(new RuntimePermission("accessDeclaredMembers"));
            permissions.add(new ReflectPermission("suppressAccessChecks"));
            permissions.add(new PropertyPermission("sun.boot.class.path", "read"));
            permissions.add(new PropertyPermission("java.home", "read"));
            permissions.add(new PropertyPermission("test.list.classes", "read"));
            permissions.add(new PropertyPermission("test.boot.only", "read"));
            permissions.add(new FilePermission("<<ALL FILES>>", "read"));

            // these are used for configuring the test itself...
            allPermissions = new Permissions();
            allPermissions.add(new java.security.AllPermission());
        }

        @Override
        public boolean implies(ProtectionDomain domain, Permission permission) {
            if (allowAll.get().get()) return allPermissions.implies(permission);
            if (permissions.implies(permission)) return true;
            if (permission instanceof java.lang.RuntimePermission) {
                if (permission.getName().startsWith("accessClassInPackage.")) {
                    // add these along to the set of permission we have, when we
                    // discover that we need them.
                    permissions.add(permission);
                    return true;
                }
            }
            return false;
        }

        @Override
        public PermissionCollection getPermissions(CodeSource codesource) {
            return new PermissionsBuilder().addAll(allowAll.get().get()
                    ? allPermissions : permissions).toPermissions();
        }

        @Override
        public PermissionCollection getPermissions(ProtectionDomain domain) {
            return new PermissionsBuilder().addAll(allowAll.get().get()
                    ? allPermissions : permissions).toPermissions();
        }
    }

}