LockScreen.mm

   1 /* Cydget - open-source AwayView plugin multiplexer
   2  * Copyright (C) 2009-2011  Jay Freeman (saurik)
   3 */
   4
   5 /*
   6  *        Redistribution and use in source and binary
   7  * forms, with or without modification, are permitted
   8  * provided that the following conditions are met:
   9  *
  10  * 1. Redistributions of source code must retain the
  11  *    above copyright notice, this list of conditions
  12  *    and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the
  14  *    above copyright notice, this list of conditions
  15  *    and the following disclaimer in the documentation
  16  *    and/or other materials provided with the
  17  *    distribution.
  18  * 3. The name of the author may not be used to endorse
  19  *    or promote products derived from this software
  20  *    without specific prior written permission.
  21  *
  22  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS''
  23  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
  24  * BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  25  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  26  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE
  27  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
  28  * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  29  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  30  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  31  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  32  * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
  33  * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
  34  * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
  35  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  36 */
  37
  38 #include <substrate.h>
  39 #include <sys/sysctl.h>
  40
  41 #import <GraphicsServices/GraphicsServices.h>
  42 #import <UIKit/UIKit.h>
  43 #import <AddressBook/AddressBook.h>
  44
  45 #import <SpringBoard/SBStatusBarController.h>
  46 #import <SpringBoardUI/SBAwayViewPluginController.h>
  47 #import <TelephonyUI/TPBottomLockBar.h>
  48
  49 #import <QuartzCore/CALayer.h>
  50 // XXX: fix the minimum requirement
  51 extern NSString * const kCAFilterNearest;
  52
  53 #include <WebKit/DOMCSSPrimitiveValue.h>
  54 #include <WebKit/DOMCSSStyleDeclaration.h>
  55 #include <WebKit/DOMDocument.h>
  56 #include <WebKit/DOMHTMLBodyElement.h>
  57 #include <WebKit/DOMNodeList.h>
  58 #include <WebKit/DOMRGBColor.h>
  59
  60 #include <WebKit/WebFrame.h>
  61 #include <WebKit/WebPolicyDelegate.h>
  62 #include <WebKit/WebPreferences.h>
  63 #include <WebKit/WebScriptObject.h>
  64
  65 #import <WebKit/WebView.h>
  66 #import <WebKit/WebView-WebPrivate.h>
  67
  68 #include <WebCore/Page.h>
  69 #include <WebCore/Settings.h>
  70
  71 #include <WebCore/WebCoreThread.h>
  72 #include <WebKit/WebPreferences-WebPrivate.h>
  73
  74 #include "JSGlobalData.h"
  75
  76 #include "SourceCode.h"
  77
  78 #include "yieldToSelector.h"
  79
  80 #include <apr-1/apr_pools.h>
  81 #include <pcre.h>
  82
  83 #define _transient
  84 #define _forever for (;;)
  85
  86 _disused static unsigned trace_;
  87
  88 #define _trace() do { \
  89     NSLog(@"_trace(%u)@%s:%u[%s](%p)\n", \
  90         trace_++, __FILE__, __LINE__, __FUNCTION__, pthread_self() \
  91     ); \
  92 } while (false)
  93
  94 #define _assert(test) do \
  95     if (!(test)) { \
  96         fprintf(stderr, "_assert(%d:%s)@%s:%u[%s]\n", errno, #test, __FILE__, __LINE__, __FUNCTION__); \
  97         exit(-1); \
  98     } \
  99 while (false)
 100
 101 #define _syscall(expr) \
 102     do if ((long) (expr) != -1) \
 103         break; \
 104     else switch (errno) { \
 105         case EINTR: \
 106             continue; \
 107         default: \
 108             _assert(false); \
 109     } while (true)
 110
 111 @protocol CydgetController
 112 - (NSDictionary *) currentConfiguration;
 113 @end
 114
 115 static Class $CydgetController(objc_getClass("CydgetController"));
 116
 117 static bool iOS32, iOS4;
 118
 119 @interface NSString (UIKit)
 120 - (NSString *) stringByAddingPercentEscapes;
 121 @end
 122
 123 @implementation UIWebDocumentView (WebCycript)
 124
 125 - (void) _setScrollerOffset:(CGPoint)offset {
 126     UIScroller *scroller([self _scroller]);
 127
 128     CGSize size([scroller contentSize]);
 129     CGSize bounds([scroller bounds].size);
 130
 131     CGPoint max;
 132     max.x = size.width - bounds.width;
 133     max.y = size.height - bounds.height;
 134
 135     // wtf Apple?!
 136     if (max.x < 0)
 137         max.x = 0;
 138     if (max.y < 0)
 139         max.y = 0;
 140
 141     offset.x = offset.x < 0 ? 0 : offset.x > max.x ? max.x : offset.x;
 142     offset.y = offset.y < 0 ? 0 : offset.y > max.y ? max.y : offset.y;
 143
 144     [scroller setOffset:offset];
 145 }
 146
 147 @end
 148
 149 /* Perl-Compatible RegEx {{{ */
 150 class Pcre {
 151   private:
 152     pcre *code_;
 153     pcre_extra *study_;
 154     int capture_;
 155     int *matches_;
 156     const char *data_;
 157
 158   public:
 159     Pcre(const char *regex, int options = 0) :
 160         study_(NULL)
 161     {
 162         const char *error;
 163         int offset;
 164         code_ = pcre_compile(regex, options, &error, &offset, NULL);
 165
 166         if (code_ == NULL)
 167             @throw [NSException exceptionWithName:NSInvalidArgumentException reason:[NSString stringWithFormat:@"*** Pcre(,): [%u] %s", offset, error] userInfo:nil];
 168
 169         pcre_fullinfo(code_, study_, PCRE_INFO_CAPTURECOUNT, &capture_);
 170         matches_ = new int[(capture_ + 1) * 3];
 171     }
 172
 173     ~Pcre() {
 174         pcre_free(code_);
 175         delete matches_;
 176     }
 177
 178     NSString *operator [](size_t match) {
 179         return [[[NSString alloc] initWithBytes:(data_ + matches_[match * 2]) length:(matches_[match * 2 + 1] - matches_[match * 2]) encoding:NSUTF8StringEncoding] autorelease];
 180     }
 181
 182     bool operator ()(NSString *data) {
 183         // XXX: length is for characters, not for bytes
 184         return operator ()([data UTF8String], [data length]);
 185     }
 186
 187     bool operator ()(const char *data, size_t size) {
 188         data_ = data;
 189         return pcre_exec(code_, study_, data, size, 0, 0, matches_, (capture_ + 1) * 3) >= 0;
 190     }
 191 };
 192 /* }}} */
 193
 194 static float CYScrollViewDecelerationRateNormal;
 195
 196 @interface NSURL (Apple)
 197 - (BOOL) isSpringboardHandledURL;
 198 @end
 199
 200 @interface UIScrollView (Apple)
 201 - (void) setDecelerationRate:(float)value;
 202 - (void) setScrollingEnabled:(BOOL)enabled;
 203 @end
 204
 205 @interface UIWebView (Apple)
 206 - (void) setDataDetectorTypes:(int)types;
 207 - (void) _setDrawInWebThread:(BOOL)draw;
 208 - (UIScrollView *) _scrollView;
 209 - (UIScroller *) _scroller;
 210 - (void) webView:(WebView *)view addMessageToConsole:(NSDictionary *)message;
 211 - (void) webView:(WebView *)view didClearWindowObject:(WebScriptObject *)window forFrame:(WebFrame *)frame;
 212 @end
 213
 214 @interface WebView (Apple)
 215 - (void) _setLayoutInterval:(float)interval;
 216 - (void) _setAllowsMessaging:(BOOL)allows;
 217 - (void) setShouldUpdateWhileOffscreen:(BOOL)update;
 218 @end
 219
 220 @protocol CydgetWebViewDelegate //<UIWebViewDelegate>
 221 - (void) webView:(WebView *)view didClearWindowObject:(WebScriptObject *)window forFrame:(WebFrame *)frame;
 222 @end
 223
 224 @class UIWebViewWebViewDelegate;
 225
 226 @interface CydgetWebView : UIWebView {
 227 }
 228
 229 @end
 230
 231 MSClassHook(UIApplication)
 232
 233 MSInstanceMessageHook1(void, UIApplication, openURL, NSURL *, url) {
 234     [self applicationOpenURL:url];
 235 }
 236
 237 @implementation NSURL (Cydget)
 238
 239 - (NSNumber *) cydget$isSpringboardHandledURL {
 240     return [NSNumber numberWithBool:[self isSpringboardHandledURL]];
 241 }
 242
 243 @end
 244
 245 MSClassHook(NSURL)
 246
 247 MSInstanceMessageHook0(BOOL, NSURL, isSpringboardHandledURL) {
 248     if (![NSThread isMainThread])
 249         return MSOldCall();
 250
 251     return [[self cydget$yieldToSelector:@selector(cydget$isSpringboardHandledURL)] boolValue];
 252 }
 253
 254 @implementation CydgetWebView
 255
 256 - (void) webView:(WebView *)view didClearWindowObject:(WebScriptObject *)window forFrame:(WebFrame *)frame {
 257     NSObject<CydgetWebViewDelegate> *delegate([self delegate]);
 258     if ([delegate respondsToSelector:@selector(webView:didClearWindowObject:forFrame:)])
 259         [delegate webView:view didClearWindowObject:window forFrame:frame];
 260     if ([UIWebView instancesRespondToSelector:@selector(webView:didClearWindowObject:forFrame:)])
 261         [super webView:view didClearWindowObject:window forFrame:frame];
 262 }
 263
 264 - (void) webView:(WebView *)view addMessageToConsole:(NSDictionary *)message {
 265     NSLog(@"addMessageToConsole:%@", message);
 266
 267     if ([UIWebView instancesRespondToSelector:@selector(webView:addMessageToConsole:)])
 268         [super webView:view addMessageToConsole:message];
 269 }
 270
 271 @end
 272
 273 @interface WebCydgetLockScreenView : UIView {
 274     CydgetWebView *webview_;
 275     UIScrollView *scroller_;
 276     NSString *cycript_;
 277 }
 278
 279 @end
 280
 281 @implementation WebCydgetLockScreenView
 282
 283 //#include "UICaboodle/UCInternal.h"
 284
 285 - (void) dealloc {
 286     [webview_ setDelegate:nil];
 287     [webview_ release];
 288     [super dealloc];
 289 }
 290
 291 - (void) loadRequest:(NSURLRequest *)request {
 292     [webview_ loadRequest:request];
 293 }
 294
 295 - (void) loadURL:(NSURL *)url cachePolicy:(NSURLRequestCachePolicy)policy {
 296     [self loadRequest:[NSURLRequest
 297         requestWithURL:url
 298         cachePolicy:policy
 299         timeoutInterval:30.0
 300     ]];
 301 }
 302
 303 - (void) loadURL:(NSURL *)url {
 304     [self loadURL:url cachePolicy:NSURLRequestUseProtocolCachePolicy];
 305 }
 306
 307 - (id) init {
 308     CGRect frame = {{0, 0}, {320, 480}};
 309     frame.size.height -= 20; //[[[$SBStatusBarController sharedStatusBarController] statusBarView] frame].size.height;
 310
 311     if ((self = [super initWithFrame:frame]) != nil) {
 312         CGRect bounds([self bounds]);
 313         bounds.size.height -= [TPBottomLockBar defaultHeight];
 314
 315         webview_ = [[CydgetWebView alloc] initWithFrame:bounds];
 316         [webview_ setDelegate:self];
 317         [self addSubview:webview_];
 318
 319         if ([webview_ respondsToSelector:@selector(setDataDetectorTypes:)])
 320             [webview_ setDataDetectorTypes:0x80000000];
 321         else
 322             [webview_ setDetectsPhoneNumbers:NO];
 323
 324         [webview_ setScalesPageToFit:YES];
 325
 326         if (kCFCoreFoundationVersionNumber < 478.61)
 327             if ([webview_ respondsToSelector:@selector(_setDrawInWebThread:)])
 328                 [webview_ _setDrawInWebThread:NO];
 329
 330         UIWebDocumentView *document([webview_ _documentView]);
 331         WebView *webview([document webView]);
 332         WebPreferences *preferences([webview preferences]);
 333
 334         [document setTileSize:CGSizeMake(bounds.size.width, 500)];
 335
 336         [document setBackgroundColor:[UIColor blackColor]];
 337         [document setDrawsBackground:NO];
 338
 339         [webview setPreferencesIdentifier:@"WebCycript"];
 340
 341         if ([webview respondsToSelector:@selector(_setLayoutInterval:)])
 342             [webview _setLayoutInterval:0];
 343         else
 344             [preferences _setLayoutInterval:0];
 345
 346         [preferences setCacheModel:WebCacheModelDocumentViewer];
 347         [preferences setJavaScriptCanOpenWindowsAutomatically:YES];
 348         [preferences setOfflineWebApplicationCacheEnabled:YES];
 349
 350         if ([webview respondsToSelector:@selector(setShouldUpdateWhileOffscreen:)])
 351             [webview setShouldUpdateWhileOffscreen:NO];
 352
 353         if ([document respondsToSelector:@selector(setAllowsMessaging:)])
 354             [document setAllowsMessaging:YES];
 355         if ([webview respondsToSelector:@selector(_setAllowsMessaging:)])
 356             [webview _setAllowsMessaging:YES];
 357
 358         if ([webview_ respondsToSelector:@selector(_scrollView)]) {
 359             scroller_ = [webview_ _scrollView];
 360
 361             [scroller_ setDirectionalLockEnabled:YES];
 362             [scroller_ setDecelerationRate:CYScrollViewDecelerationRateNormal];
 363             [scroller_ setDelaysContentTouches:NO];
 364
 365             [scroller_ setCanCancelContentTouches:YES];
 366
 367             [scroller_ setAlwaysBounceVertical:NO];
 368         } else if ([webview_ respondsToSelector:@selector(_scroller)]) {
 369             UIScroller *scroller([webview_ _scroller]);
 370             scroller_ = (UIScrollView *) scroller;
 371
 372             [scroller setDirectionalScrolling:YES];
 373             [scroller setScrollDecelerationFactor:CYScrollViewDecelerationRateNormal]; /* 0.989324 */
 374             [scroller setScrollHysteresis:0]; /* 8 */
 375
 376             [scroller setThumbDetectionEnabled:NO];
 377         }
 378
 379         [scroller_ setFixedBackgroundPattern:YES];
 380         [scroller_ setBackgroundColor:[UIColor blackColor]];
 381         [scroller_ setClipsSubviews:NO];
 382
 383         [scroller_ setBounces:YES];
 384         [scroller_ setShowBackgroundShadow:NO]; /* YES */
 385
 386         [self setAutoresizingMask:(UIViewAutoresizingFlexibleWidth | UIViewAutoresizingFlexibleHeight)];
 387         [webview_ setAutoresizingMask:(UIViewAutoresizingFlexibleWidth | UIViewAutoresizingFlexibleHeight)];
 388
 389         NSDictionary *configuration([$CydgetController currentConfiguration]);
 390
 391         cycript_ = [configuration objectForKey:@"CycriptURLs"];
 392
 393         [scroller_ setScrollingEnabled:[[configuration objectForKey:@"Scrollable"] boolValue]];
 394
 395         NSString *homepage([configuration objectForKey:@"Homepage"]);
 396         [self loadURL:[NSURL URLWithString:homepage]];
 397     } return self;
 398 }
 399
 400 - (void) webView:(WebView *)webview didClearWindowObject:(WebScriptObject *)window forFrame:(WebFrame *)frame {
 401     if (cycript_ != nil)
 402         if (NSString *href = [[[[frame dataSource] request] URL] absoluteString])
 403             if (Pcre([cycript_ UTF8String], 0 /*XXX:PCRE_UTF8*/)(href))
 404                 if (void *handle = dlopen("/usr/lib/libcycript.dylib", RTLD_LAZY | RTLD_GLOBAL))
 405                     if (void (*CYSetupContext)(JSGlobalContextRef) = reinterpret_cast<void (*)(JSGlobalContextRef)>(dlsym(handle, "CydgetSetupContext"))) {
 406                         WebFrame *frame([webview mainFrame]);
 407                         JSGlobalContextRef context([frame globalContext]);
 408                         CYSetupContext(context);
 409                     }
 410 }
 411
 412 @end
 413
 414 @interface WebCycriptLockScreenController : SBAwayViewPluginController {
 415 }
 416
 417 @end
 418
 419 #include <string>
 420
 421 struct State {
 422     unsigned state;
 423 };
 424
 425 // String Helpers {{{
 426 static const UChar *(*_ZNK7WebCore6String10charactersEv)(const WebCore::String *);
 427 static const UChar *(*_ZN7WebCore6String29charactersWithNullTerminationEv)(const WebCore::String *);
 428 static unsigned (*_ZNK7WebCore6String6lengthEv)(const WebCore::String *);
 429
 430 static bool StringGet(const WebCore::String &string, const UChar *&data, size_t &length) {
 431     bool terminated;
 432
 433     if (_ZNK7WebCore6String10charactersEv != NULL) {
 434         data = (*_ZNK7WebCore6String10charactersEv)(&string);
 435         terminated = false;
 436     } else if (_ZN7WebCore6String29charactersWithNullTerminationEv != NULL) {
 437         data = (*_ZN7WebCore6String29charactersWithNullTerminationEv)(&string);
 438         terminated = true;
 439     } else return false;
 440
 441     if (_ZNK7WebCore6String6lengthEv != NULL)
 442         length = (*_ZNK7WebCore6String6lengthEv)(&string);
 443     else if (terminated)
 444         for (length = 0; data[length] != 0; ++length);
 445     else return false;
 446
 447     return true;
 448 }
 449
 450 static bool StringEquals(const WebCore::String &string, const char *value) {
 451     const UChar *data;
 452     size_t size;
 453     if (!StringGet(string, data, size))
 454         return false;
 455
 456     size_t length(strlen(value));
 457     if (size != length)
 458         return false;
 459
 460     for (size_t index(0); index != length; ++index)
 461         if (data[index] != value[index])
 462             return false;
 463
 464     return true;
 465 }
 466 // }}}
 467 // State Machine {{{
 468 static bool cycript_;
 469
 470 MSHook(bool, _ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE, const WebCore::String &mime) {
 471     if (!StringEquals(mime, "text/cycript")) {
 472         cycript_ = false;
 473         return __ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE(mime);
 474     }
 475
 476     static void *handle(dlopen("/usr/lib/libcycript.dylib", RTLD_LAZY | RTLD_GLOBAL));
 477     if (handle == NULL)
 478         return false;
 479
 480     cycript_ = true;
 481     return true;
 482 }
 483 // }}}
 484 // Script Compiler {{{
 485 static void Log(const WebCore::String &string) {
 486 #if 0
 487     const UChar *data;
 488     size_t length;
 489     if (!StringGet(string, data, length))
 490         return;
 491
 492     UChar terminated[length + 1];
 493     terminated[length] = 0;
 494     memcpy(terminated, data, length * 2);
 495     NSLog(@"wtf %p:%zu:%S:", &string, length, terminated);
 496 #endif
 497 }
 498
 499 static void Cycriptify(apr_pool_t *pool, const uint16_t *&data, size_t &size) {
 500     cycript_ = false;
 501
 502     if (void *handle = dlopen("/usr/lib/libcycript.dylib", RTLD_LAZY | RTLD_GLOBAL))
 503         if (void (*CydgetPoolParse)(apr_pool_t *, const uint16_t **, size_t *) = reinterpret_cast<void (*)(apr_pool_t *, const uint16_t **, size_t *)>(dlsym(handle, "CydgetPoolParse")))
 504             CydgetPoolParse(pool, &data, &size);
 505 }
 506
 507 static void (*_ZN7WebCore6String6appendEPKtj)(WebCore::String *, const UChar *, unsigned);
 508 static void (*_ZN7WebCore6String8truncateEj)(WebCore::String *, unsigned);
 509
 510 static void Cycriptify(const WebCore::String &source, int *psize = NULL) {
 511     if (!cycript_)
 512         return;
 513
 514     const UChar *data;
 515     size_t length;
 516
 517     if (!StringGet(source, data, length)) {
 518         return;
 519     }
 520
 521     size_t size(length);
 522
 523     apr_pool_t *pool;
 524     apr_pool_create(&pool, NULL);
 525
 526     Cycriptify(pool, data, size);
 527
 528     WebCore::String &script(const_cast<WebCore::String &>(source));
 529
 530     _ZN7WebCore6String8truncateEj(&script, 0);
 531     _ZN7WebCore6String6appendEPKtj(&script, data, size);
 532
 533     if (psize != NULL)
 534         *psize = size;
 535
 536     apr_pool_destroy(pool);
 537
 538     Log(source);
 539 }
 540 // }}}
 541
 542 static WebCore::String *string;
 543
 544 // iOS 2.x
 545 MSHook(State, _ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i, void *_this, const WebCore::String &string, State state, const WebCore::String &url, int line) {
 546     Cycriptify(string);
 547     return __ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i(_this, string, state, url, line);
 548 }
 549
 550 // iOS 3.x
 551 MSHook(void, _ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE, JSC::SourceCode **_this, JSC::JSGlobalData *global, int *line, JSC::UString *message) {
 552     if (cycript_) {
 553         JSC::SourceCode *source(_this[iOS32 ? 6 : 0]);
 554         const uint16_t *data(source->data());
 555         size_t size(source->length());
 556
 557         apr_pool_t *pool;
 558         apr_pool_create(&pool, NULL);
 559
 560         Cycriptify(pool, data, size);
 561         source->~SourceCode();
 562         // XXX: I actually don't have the original URL here: pants
 563         new (source) JSC::SourceCode(JSC::UStringSourceProvider::create(JSC::UString(data, size), "cycript://"), 1);
 564
 565         apr_pool_destroy(pool);
 566
 567     }
 568
 569     return __ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE(_this, global, line, message);
 570 }
 571
 572 // iOS 4.x cdata
 573 MSHook(void, _ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi, void *_this, const WebCore::String &source, const WebCore::KURL &url, int line) {
 574     Cycriptify(source);
 575     return __ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi(_this, source, url, line);
 576 }
 577
 578 // iOS 4.x @src=
 579 MSHook(const WebCore::String &, _ZN7WebCore12CachedScript6scriptEv, void *_this) {
 580     const WebCore::String &script(__ZN7WebCore12CachedScript6scriptEv(_this));
 581     string = const_cast<WebCore::String *>(&script);
 582     Log(script);
 583     return script;
 584 }
 585
 586 // iOS 4.x @src=
 587 MSHook(State, _ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE, void *_this, void *source, State state) {
 588     if (string != NULL) {
 589         if (iOS4)
 590             Cycriptify(*string, reinterpret_cast<int *>(source) + 3);
 591         else
 592             Cycriptify(*string);
 593     }
 594     string = NULL;
 595     return __ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE(_this, source, state);
 596 }
 597
 598 // iOS 5.0 cdata
 599 MSHook(void, _ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE, void *_this, const WebCore::String &source, const WebCore::KURL &url, void *position) {
 600     Cycriptify(source);
 601     return __ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE(_this, source, url, position);
 602 }
 603
 604 /* Cydget:// Protocol {{{ */
 605 @interface CydgetURLProtocol : NSURLProtocol {
 606 }
 607
 608 @end
 609
 610 @implementation CydgetURLProtocol
 611
 612 + (BOOL) canInitWithRequest:(NSURLRequest *)request {
 613     NSURL *url([request URL]);
 614     if (url == nil)
 615         return NO;
 616     NSString *scheme([[url scheme] lowercaseString]);
 617     if (scheme == nil || ![scheme isEqualToString:@"cydget"])
 618         return NO;
 619     return YES;
 620 }
 621
 622 + (NSURLRequest *) canonicalRequestForRequest:(NSURLRequest *)request {
 623     return request;
 624 }
 625
 626 - (void) _returnPNGWithImage:(UIImage *)icon forRequest:(NSURLRequest *)request {
 627     id<NSURLProtocolClient> client([self client]);
 628     if (icon == nil)
 629         [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorFileDoesNotExist userInfo:nil]];
 630     else {
 631         NSData *data(UIImagePNGRepresentation(icon));
 632
 633         NSURLResponse *response([[[NSURLResponse alloc] initWithURL:[request URL] MIMEType:@"image/png" expectedContentLength:-1 textEncodingName:nil] autorelease]);
 634         [client URLProtocol:self didReceiveResponse:response cacheStoragePolicy:NSURLCacheStorageNotAllowed];
 635         [client URLProtocol:self didLoadData:data];
 636         [client URLProtocolDidFinishLoading:self];
 637     }
 638 }
 639
 640 - (void) startLoading {
 641     id<NSURLProtocolClient> client([self client]);
 642     NSURLRequest *request([self request]);
 643
 644     NSURL *url([request URL]);
 645     NSString *href([url absoluteString]);
 646
 647     NSString *path([href substringFromIndex:9]);
 648     NSRange slash([path rangeOfString:@"/"]);
 649
 650     NSString *command;
 651     if (slash.location == NSNotFound) {
 652         command = path;
 653         path = nil;
 654     } else {
 655         command = [path substringToIndex:slash.location];
 656         path = [path substringFromIndex:(slash.location + 1)];
 657     }
 658
 659     if ([command isEqualToString:@"_UIImageWithName"]) {
 660         if (path == nil)
 661             goto fail;
 662         path = [path stringByReplacingPercentEscapesUsingEncoding:NSUTF8StringEncoding];
 663         UIImage *icon(_UIImageWithName(path));
 664         [self _returnPNGWithImage:icon forRequest:request];
 665     } else fail: {
 666         [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorResourceUnavailable userInfo:nil]];
 667     }
 668 }
 669
 670 - (void) stopLoading {
 671 }
 672
 673 @end
 674 /* }}} */
 675 /* Cydget-CGI:// Protocol {{{ */
 676 @interface CydgetCGIURLProtocol : NSURLProtocol {
 677     pid_t pid_;
 678     CFHTTPMessageRef http_;
 679     NSFileHandle *handle_;
 680 }
 681
 682 @end
 683
 684 @implementation CydgetCGIURLProtocol
 685
 686 + (BOOL) canInitWithRequest:(NSURLRequest *)request {
 687     NSURL *url([request URL]);
 688     if (url == nil)
 689         return NO;
 690     NSString *scheme([[url scheme] lowercaseString]);
 691     if (scheme == nil || ![scheme isEqualToString:@"cydget-cgi"])
 692         return NO;
 693     return YES;
 694 }
 695
 696 + (NSURLRequest *) canonicalRequestForRequest:(NSURLRequest *)request {
 697     return request;
 698 }
 699
 700 - (id) initWithRequest:(NSURLRequest *)request cachedResponse:(NSCachedURLResponse *)response client:(id<NSURLProtocolClient>)client {
 701     if ((self = [super initWithRequest:request cachedResponse:response client:client]) != nil) {
 702         pid_ = -1;
 703     } return self;
 704 }
 705
 706 - (void) startLoading {
 707     id<NSURLProtocolClient> client([self client]);
 708     NSURLRequest *request([self request]);
 709     NSURL *url([request URL]);
 710
 711     NSString *path([url path]);
 712     if (path == nil) {
 713         [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorResourceUnavailable userInfo:nil]];
 714         return;
 715     }
 716
 717     NSFileManager *manager([NSFileManager defaultManager]);
 718     if (![manager fileExistsAtPath:path]) {
 719         [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorFileDoesNotExist userInfo:nil]];
 720         return;
 721     }
 722
 723     int fds[2];
 724     _assert(pipe(fds) != -1);
 725
 726     _assert(pid_ == -1);
 727     pid_ = fork();
 728     if (pid_ == -1) {
 729         _assert(close(fds[0]) != -1);
 730         _assert(close(fds[1]) != -1);
 731         [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorResourceUnavailable userInfo:nil]];
 732         return;
 733     }
 734
 735     if (pid_ == 0) {
 736         const char *script([path UTF8String]);
 737
 738         setenv("GATEWAY_INTERFACE", "CGI/1.1", true);
 739         setenv("SCRIPT_FILENAME", script, true);
 740         NSString *query([url query]);
 741         if (query != nil)
 742             setenv("QUERY_STRING", [query UTF8String], true);
 743
 744         _assert(dup2(fds[1], 1) != -1);
 745         _assert(close(fds[0]) != -1);
 746         _assert(close(fds[1]) != -1);
 747
 748         execl(script, script, NULL);
 749         exit(1);
 750         _assert(false);
 751     }
 752
 753     _assert(close(fds[1]) != -1);
 754
 755     _assert(http_ == NULL);
 756     http_ = CFHTTPMessageCreateEmpty(kCFAllocatorDefault, FALSE);
 757     CFHTTPMessageAppendBytes(http_, (const uint8_t *) "HTTP/1.1 200 OK\r\n", 17);
 758
 759     _assert(handle_ == nil);
 760     handle_ = [[NSFileHandle alloc] initWithFileDescriptor:fds[0] closeOnDealloc:YES];
 761
 762     [[NSNotificationCenter defaultCenter]
 763         addObserver:self
 764         selector:@selector(onRead:)
 765         name:@"NSFileHandleReadCompletionNotification"
 766         object:handle_
 767     ];
 768
 769     [handle_ readInBackgroundAndNotify];
 770 }
 771
 772 - (void) onRead:(NSNotification *)notification {
 773     NSFileHandle *handle([notification object]);
 774
 775     NSData *data([[notification userInfo] objectForKey:NSFileHandleNotificationDataItem]);
 776
 777     if (size_t length = [data length]) {
 778         CFHTTPMessageAppendBytes(http_, reinterpret_cast<const UInt8 *>([data bytes]), length);
 779         [handle readInBackgroundAndNotify];
 780     } else {
 781         id<NSURLProtocolClient> client([self client]);
 782
 783         CFStringRef mime(CFHTTPMessageCopyHeaderFieldValue(http_, CFSTR("Content-type")));
 784         if (mime == NULL)
 785             [client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorBadServerResponse userInfo:nil]];
 786         else {
 787             NSURLRequest *request([self request]);
 788
 789             NSURLResponse *response([[[NSURLResponse alloc] initWithURL:[request URL] MIMEType:(NSString *)mime expectedContentLength:-1 textEncodingName:nil] autorelease]);
 790             CFRelease(mime);
 791
 792             [client URLProtocol:self didReceiveResponse:response cacheStoragePolicy:NSURLCacheStorageNotAllowed];
 793
 794             CFDataRef body(CFHTTPMessageCopyBody(http_));
 795             [client URLProtocol:self didLoadData:(NSData *)body];
 796             CFRelease(body);
 797
 798             [client URLProtocolDidFinishLoading:self];
 799         }
 800
 801         CFRelease(http_);
 802         http_ = NULL;
 803     }
 804 }
 805
 806     //[client URLProtocol:self didFailWithError:[NSError errorWithDomain:NSURLErrorDomain code:NSURLErrorNetworkConnectionLost userInfo:nil]];
 807
 808 - (void) stopLoading_ {
 809     [[NSNotificationCenter defaultCenter] removeObserver:self];
 810
 811     if (handle_ != nil) {
 812         [handle_ release];
 813         handle_ = nil;
 814     }
 815
 816     if (pid_ != -1) {
 817         kill(pid_, SIGTERM);
 818         int status;
 819         _syscall(waitpid(pid_, &status, 0));
 820         pid_ = -1;
 821     }
 822 }
 823
 824 - (void) stopLoading {
 825     [self
 826         performSelectorOnMainThread:@selector(stopLoading_)
 827         withObject:nil
 828         waitUntilDone:NO
 829     ];
 830 }
 831
 832 @end
 833 /* }}} */
 834
 835 template <typename Type_>
 836 static void nlset(Type_ &function, struct nlist *nl, size_t index) {
 837     struct nlist &name(nl[index]);
 838     uintptr_t value(name.n_value);
 839     if ((name.n_desc & N_ARM_THUMB_DEF) != 0)
 840         value |= 0x00000001;
 841     function = reinterpret_cast<Type_>(value);
 842 }
 843
 844 template <typename Type_>
 845 static void dlset(Type_ &function, const char *name) {
 846     function = reinterpret_cast<Type_>(dlsym(RTLD_DEFAULT, name));
 847 }
 848
 849 template <typename Type_>
 850 static void msset_(Type_ &function, const char *name, MSImageRef handle) {
 851     function = reinterpret_cast<Type_>(MSFindSymbol(handle, name));
 852 }
 853
 854 #define msset(function, handle) \
 855     msset_(function, "_" #function, handle)
 856
 857 @implementation WebCycriptLockScreenController
 858
 859 static void $UIWebViewWebViewDelegate$webView$addMessageToConsole$(UIWebViewWebViewDelegate *self, SEL sel, WebView *view, NSDictionary *message) {
 860     UIWebView *uiWebView(MSHookIvar<UIWebView *>(self, "uiWebView"));
 861     if ([uiWebView respondsToSelector:@selector(webView:addMessageToConsole:)])
 862         [uiWebView webView:view addMessageToConsole:message];
 863 }
 864
 865 static void $UIWebViewWebViewDelegate$webView$didClearWindowObject$forFrame$(UIWebViewWebViewDelegate *self, SEL sel, WebView *view, WebScriptObject *window, WebFrame *frame) {
 866     UIWebView *uiWebView(MSHookIvar<UIWebView *>(self, "uiWebView"));
 867     if ([uiWebView respondsToSelector:@selector(webView:didClearWindowObject:forFrame:)])
 868         [uiWebView webView:view didClearWindowObject:window forFrame:frame];
 869 }
 870
 871 + (void) initialize {
 872     if (Class $UIWebViewWebViewDelegate = objc_getClass("UIWebViewWebViewDelegate")) {
 873         class_addMethod($UIWebViewWebViewDelegate, @selector(webView:addMessageToConsole:), (IMP) &$UIWebViewWebViewDelegate$webView$addMessageToConsole$, "v16@0:4@8@12");
 874         class_addMethod($UIWebViewWebViewDelegate, @selector(webView:didClearWindowObject:forFrame:), (IMP) &$UIWebViewWebViewDelegate$webView$didClearWindowObject$forFrame$, "v20@0:4@8@12@16");
 875     }
 876
 877     if (float *_UIScrollViewDecelerationRateNormal = reinterpret_cast<float *>(dlsym(RTLD_DEFAULT, "UIScrollViewDecelerationRateNormal")))
 878         CYScrollViewDecelerationRateNormal = *_UIScrollViewDecelerationRateNormal;
 879     else // XXX: this actually might be fast on some older systems: we should look into this
 880         CYScrollViewDecelerationRateNormal = 0.998;
 881
 882     iOS4 = kCFCoreFoundationVersionNumber >= 550.32;
 883     iOS32 = !iOS4 && kCFCoreFoundationVersionNumber >= 478.61;
 884
 885     int maxproc;
 886     size_t size(sizeof(maxproc));
 887     if (sysctlbyname("kern.maxproc", &maxproc, &size, NULL, 0) == -1)
 888         NSLog(@"sysctlbyname(\"kern.maxproc\", ?)");
 889     else if (maxproc < 72) {
 890         maxproc = 72;
 891         if (sysctlbyname("kern.maxproc", NULL, NULL, &maxproc, sizeof(maxproc)) == -1)
 892             NSLog(@"sysctlbyname(\"kern.maxproc\", #)");
 893     }
 894
 895     apr_initialize();
 896
 897     [NSURLProtocol registerClass:[CydgetURLProtocol class]];
 898     [WebView registerURLSchemeAsLocal:@"cydget"];
 899
 900     [NSURLProtocol registerClass:[CydgetCGIURLProtocol class]];
 901     [WebView registerURLSchemeAsLocal:@"cydget-cgi"];
 902
 903     MSImageRef JavaScriptCore(MSGetImageByName("/System/Library/PrivateFrameworks/JavaScriptCore.framework/JavaScriptCore"));
 904     MSImageRef WebCore(MSGetImageByName("/System/Library/PrivateFrameworks/WebCore.framework/WebCore"));
 905
 906     if (!iOS4) {
 907         void (*_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE)(JSC::SourceCode **, JSC::JSGlobalData *, int *, JSC::UString *);
 908         dlset(_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE, "_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE");
 909         if (_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE != NULL)
 910             MSHookFunction(_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE, MSHake(_ZN3JSC6Parser5parseEPNS_12JSGlobalDataEPiPNS_7UStringE));
 911     }
 912
 913     struct nlist nl[9];
 914     memset(nl, 0, sizeof(nl));
 915
 916     nl[0].n_un.n_name = (char *) "__ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE";
 917
 918     nl[1].n_un.n_name = (char *) "__ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi";
 919
 920     nl[2].n_un.n_name = (char *) "__ZN7WebCore12CachedScript6scriptEv";
 921     nl[3].n_un.n_name = (char *) "__ZNK7WebCore20StringSourceProvider6sourceEv";
 922
 923     nl[4].n_un.n_name = (char *) "__ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i";
 924     nl[5].n_un.n_name = (char *) "__ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE";
 925
 926     nl[6].n_un.n_name = (char *) "__ZN7WebCore6String6appendEPKtj";
 927     nl[7].n_un.n_name = (char *) "__ZN7WebCore6String8truncateEj";
 928
 929     nlist("/System/Library/PrivateFrameworks/WebCore.framework/WebCore", nl);
 930
 931     bool (*_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE)(const WebCore::String &);
 932     nlset(_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE, nl, 0);
 933     if (_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE == NULL)
 934         MSHookSymbol(_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE, "__ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKN3WTF6StringE", WebCore);
 935     if (_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE != NULL)
 936         MSHookFunction(_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE, MSHake(_ZN7WebCore16MIMETypeRegistry29isSupportedJavaScriptMIMETypeERKNS_6StringE));
 937
 938     void (*_ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi)(void *, const WebCore::String &, const WebCore::KURL &, int);
 939     nlset(_ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi, nl, 1);
 940     if (_ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi != NULL)
 941         MSHookFunction(_ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi, MSHake(_ZN7WebCore16ScriptSourceCodeC2ERKNS_6StringERKNS_4KURLEi));
 942
 943     if (iOS4) {
 944         const WebCore::String &(*_ZN7WebCore12CachedScript6scriptEv)(void *);
 945         nlset(_ZN7WebCore12CachedScript6scriptEv, nl, 2);
 946         if (_ZN7WebCore12CachedScript6scriptEv != NULL)
 947             MSHookFunction(_ZN7WebCore12CachedScript6scriptEv, MSHake(_ZN7WebCore12CachedScript6scriptEv));
 948     }
 949
 950     State (*_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i)(void *, const WebCore::String &, State, const WebCore::String &, int);
 951     nlset(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i, nl, 4);
 952     if (_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i != NULL)
 953         MSHookFunction(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i, MSHake(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_6StringENS0_5StateES3_i));
 954
 955     if (iOS4) {
 956         State (*_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE)(void *, void *, State);
 957         nlset(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE, nl, 5);
 958         if (_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE != NULL)
 959             MSHookFunction(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE, MSHake(_ZN7WebCore13HTMLTokenizer15scriptExecutionERKNS_16ScriptSourceCodeENS0_5StateE));
 960     }
 961
 962     nlset(_ZN7WebCore6String6appendEPKtj, nl, 6);
 963     nlset(_ZN7WebCore6String8truncateEj, nl, 7);
 964
 965     void (*_ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE)(void *, const WebCore::String &, const WebCore::KURL &, void *);
 966     msset(_ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE, WebCore);
 967     if (_ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE != NULL)
 968         MSHookFunction(_ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE, MSHake(_ZN7WebCore16ScriptSourceCodeC2ERKN3WTF6StringERKNS_4KURLERKNS1_12TextPositionINS1_14OneBasedNumberEEE));
 969
 970     if (_ZN7WebCore6String6appendEPKtj == NULL)
 971         msset(_ZN7WebCore6String6appendEPKtj, JavaScriptCore);
 972     if (_ZN7WebCore6String6appendEPKtj == NULL)
 973         MSHookSymbol(_ZN7WebCore6String6appendEPKtj, "__ZN3WTF6String6appendEPKtj", JavaScriptCore);
 974
 975     if (_ZN7WebCore6String8truncateEj == NULL)
 976         msset(_ZN7WebCore6String8truncateEj, JavaScriptCore);
 977     if (_ZN7WebCore6String8truncateEj == NULL)
 978         MSHookSymbol(_ZN7WebCore6String8truncateEj, "__ZN3WTF6String8truncateEj", JavaScriptCore);
 979
 980     msset(_ZNK7WebCore6String10charactersEv, WebCore);
 981
 982     msset(_ZN7WebCore6String29charactersWithNullTerminationEv, JavaScriptCore);
 983     if (_ZN7WebCore6String29charactersWithNullTerminationEv == NULL)
 984         MSHookSymbol(_ZN7WebCore6String29charactersWithNullTerminationEv, "__ZN3WTF6String29charactersWithNullTerminationEv", JavaScriptCore);
 985
 986     msset(_ZNK7WebCore6String6lengthEv, WebCore);
 987 }
 988
 989 + (id) rootViewController {
 990     return [[[self alloc] init] autorelease];
 991 }
 992
 993 - (void) loadView {
 994     [self setView:[[[WebCydgetLockScreenView alloc] init] autorelease]];
 995 }
 996
 997 - (BOOL) showAwayItems {
 998     return NO;
 999 }
1000
1001 @end
1002
1003 MSClassHook(WebView)
1004 MSMetaClassHook(WebView)
1005
1006 MSClassMessageHook0(void, WebView, enableWebThread) {
1007     if (kCFCoreFoundationVersionNumber >= 478.61)
1008         return MSOldCall();
1009
1010     NSLog(@"-[WebView enableWebThread]");
1011 }