X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/80e2389990082500d76eb566d4946be3e786c3ef..d8f41ccd20de16f8ebe2ccc84d47bf1cb2b26bbb:/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp?ds=sidebyside

diff --git a/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp b/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp
new file mode 100644
index 00000000..70ec05e5
--- /dev/null
+++ b/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp
@@ -0,0 +1,160 @@
+/*
+ * Copyright (c) 2000-2004,2006,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * @APPLE_LICENSE_HEADER_START@
+ * 
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this
+ * file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ * 
+ * @APPLE_LICENSE_HEADER_END@
+ */
+
+
+//
+// aclsubject - abstract ACL subject implementation
+//
+#include <security_cdsa_utilities/cssmacl.h>
+#include <security_cdsa_utilities/cssmbridge.h>
+#include <security_utilities/endian.h>
+#include <security_utilities/debugging.h>
+#include <algorithm>
+#include <cstdarg>
+
+
+//
+// Validation contexts
+//
+AclValidationContext::~AclValidationContext()
+{ /* virtual */ }
+
+
+void AclValidationContext::init(ObjectAcl *acl, AclSubject *subject)
+{
+	mAcl = acl;
+	mSubject = subject;
+}
+
+
+const char *AclValidationContext::credTag() const
+{
+	return mCred ? mCred->tag() : NULL;
+}
+
+std::string AclValidationContext::s_credTag() const
+{
+	const char *s = this->credTag();
+	return s ? s : "";
+}
+
+const char *AclValidationContext::entryTag() const
+{
+	return mEntryTag;
+}
+
+void AclValidationContext::entryTag(const char *tag)
+{
+	mEntryTag = (tag && tag[0]) ? tag : NULL;
+}
+
+void AclValidationContext::entryTag(const std::string &tag)
+{
+	mEntryTag = tag.empty() ? NULL : tag.c_str();
+}
+
+
+//
+// Common (basic) features of AclSubjects
+//
+AclSubject::AclSubject(uint32 type, Version v /* = 0 */)
+	: mType(type), mVersion(v)
+{
+	assert(!(type & versionMask));
+}
+
+AclSubject::~AclSubject()
+{ }
+
+AclValidationEnvironment::~AclValidationEnvironment()
+{ }
+
+Adornable &AclValidationEnvironment::store(const AclSubject *subject)
+{
+	CssmError::throwMe(CSSM_ERRCODE_ACL_SUBJECT_TYPE_NOT_SUPPORTED);
+}
+
+void AclSubject::exportBlob(Writer::Counter &, Writer::Counter &)
+{ }
+
+void AclSubject::exportBlob(Writer &, Writer &)
+{ }
+
+void AclSubject::importBlob(Reader &, Reader &)
+{ }
+
+void AclSubject::reset()
+{ }
+
+AclSubject::Maker::~Maker()
+{
+}
+
+
+//
+// A SimpleAclSubject accepts only a single type of sample, validates
+// samples independently, and makes no use of certificates.
+//
+bool SimpleAclSubject::validate(const AclValidationContext &ctx) const
+{
+    for (uint32 n = 0; n < ctx.count(); n++) {
+        const TypedList &sample = ctx[n];
+        if (!sample.isProper())
+            CssmError::throwMe(CSSM_ERRCODE_INVALID_SAMPLE_VALUE);
+        if (sample.type() == type() && validate(ctx, sample)) {
+			ctx.matched(ctx[n]);
+            return true;	// matched this sample; validation successful
+		}
+    }
+    return false;
+}
+
+
+//
+// AclSubjects always have a (virtual) dump method.
+// It's empty unless DEBUGDUMP is enabled.
+//
+void AclSubject::debugDump() const
+{
+#if defined(DEBUGDUMP)
+	switch (type()) {
+	case CSSM_ACL_SUBJECT_TYPE_ANY:
+		Debug::dump("ANY");
+		break;
+	default:
+		Debug::dump("subject type=%d", type());
+		break;
+	}
+#endif //DEBUGDUMP
+}
+
+#if defined(DEBUGDUMP)
+
+void AclSubject::dump(const char *title) const
+{
+	Debug::dump(" ** %s ", title);
+	this->debugDump();
+	Debug::dump("\n");
+}
+
+#endif //DEBUGDUMP