Security-57031.1.35.tar.gz

[apple/security.git] / Security / libsecurity_codesigning / lib / machorep.h

diff --git a/Security/libsecurity_codesigning/lib/machorep.h b/Security/libsecurity_codesigning/lib/machorep.h
new file mode 100644 (file)
index 0000000..c338e91
--- /dev/null
+++ b/Security/libsecurity_codesigning/lib/machorep.h
@@ -0,0 +1,104 @@
+/*
+ * Copyright (c) 2006,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * @APPLE_LICENSE_HEADER_START@
+ * 
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this
+ * file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ * 
+ * @APPLE_LICENSE_HEADER_END@
+ */
+
+//
+// machorep - DiskRep mix-in for handling Mach-O main executables
+//
+#ifndef _H_MACHOREP
+#define _H_MACHOREP
+
+#include "singlediskrep.h"
+#include "sigblob.h"
+#include <security_utilities/unix++.h>
+#include <security_utilities/macho++.h>
+
+namespace Security {
+namespace CodeSigning {
+
+
+//
+// MachORep is a DiskRep class that supports code signatures
+// directly embedded in Mach-O binary files.
+//
+// It does not have write support (for writing signatures);
+// writing multi-architecture binaries is complicated enough
+// that it's driven directly from the signing code, with no
+// abstractions to get in the way.
+//
+class MachORep : public SingleDiskRep {
+public:
+       MachORep(const char *path, const Context *ctx = NULL);
+       virtual ~MachORep();
+       
+       CFDataRef component(CodeDirectory::SpecialSlot slot);
+       CFDataRef identification();
+       Universal *mainExecutableImage();
+       size_t signingBase();
+       std::string format();
+       
+       std::string recommendedIdentifier(const SigningContext &ctx);
+       const Requirements *defaultRequirements(const Architecture *arch, const SigningContext &ctx);
+       size_t pageSize(const SigningContext &ctx);
+
+       void strictValidate(const ToleratedErrors& tolerated);
+       
+       void flush();           // flush cache
+       
+       static bool candidate(UnixPlusPlus::FileDesc &fd);
+       
+public:
+       static CFDataRef identificationFor(MachO *macho);
+       
+public:
+       DiskRep::Writer *writer();
+       class Writer;
+       friend class Writer;
+       
+protected:
+       CFDataRef embeddedComponent(CodeDirectory::SpecialSlot slot);
+       CFDataRef infoPlist();
+       Requirement *libraryRequirements(const Architecture *arch, const SigningContext &ctx);
+
+private:
+       Universal *mExecutable; // cached Mach-O/Universal reference to mainExecutablePath()
+       EmbeddedSignatureBlob *mSigningData; // cached signing data from current architecture
+};
+
+
+//
+// The write side of a MachORep.
+// This is purposely dysfunctional; Mach-O signatures are written
+// by code in signerutils, not by DiskRep::Writers.
+//
+class MachORep::Writer : public SingleDiskRep::Writer {
+       friend class FileDiskRep;
+public:
+       Writer(MachORep *r) : SingleDiskRep::Writer(r, writerNoGlobal) { }
+       void component(CodeDirectory::SpecialSlot slot, CFDataRef data);
+};
+
+
+} // end namespace CodeSigning
+} // end namespace Security
+
+#endif // !_H_MACHOREP