1 /* Veency - VNC Remote Access Server for iPhoneOS
2 * Copyright (C) 2008-2014 Jay Freeman (saurik)
5 /* GNU Affero General Public License, Version 3 {{{ */
7 * This program is free software: you can redistribute it and/or modify
8 * it under the terms of the GNU Affero General Public License as published by
9 * the Free Software Foundation, either version 3 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU Affero General Public License for more details.
17 * You should have received a copy of the GNU Affero General Public License
18 * along with this program. If not, see <http://www.gnu.org/licenses/>.
23 fprintf(stderr, "_trace()@%s:%u[%s]\n", __FILE__, __LINE__, __FUNCTION__)
24 #define _likely(expr) \
25 __builtin_expect(expr, 1)
26 #define _unlikely(expr) \
27 __builtin_expect(expr, 0)
29 #include <substrate.h>
32 #include <rfb/keysym.h>
34 #include <mach/mach.h>
35 #include <mach/mach_time.h>
38 #include <sys/sysctl.h>
42 #include <CoreFoundation/CFUserNotification.h>
43 #import <CoreGraphics/CGGeometry.h>
44 #import <GraphicsServices/GraphicsServices.h>
45 #import <Foundation/Foundation.h>
46 #import <UIKit/UIKit.h>
48 #include <IOKit/hid/IOHIDEventTypes.h>
49 #include <IOKit/hidsystem/IOHIDUsageTables.h>
52 #include "SpringBoardAccess.h"
55 typedef CFTypeRef IOHIDEventRef;
56 typedef CFTypeRef IOHIDEventSystemClientRef;
57 typedef CFTypeRef IOHIDEventSystemConnectionRef;
59 MSClassHook(BKAccessibility)
60 MSClassHook(UIApplication)
62 @interface UIApplication (Apple)
63 - (void) addStatusBarImageNamed:(NSString *)name;
64 - (void) removeStatusBarImageNamed:(NSString *)name;
67 @interface CAWindowServerDisplay : NSObject
68 - (mach_port_t) clientPortAtPosition:(CGPoint)position;
71 @interface CAWindowServer : NSObject
72 + (CAWindowServer *) serverIfRunning;
73 - (NSArray *) displays;
76 @interface UIModalView : UIView
77 - (id) addButtonWithTitle:(NSString *)title;
78 - (void) setBodyText:(NSString *)text;
79 - (void) setDelegate:(id)delegate;
80 - (void) setTitle:(NSString *)title;
83 @interface SBAlertItem : NSObject
85 - (UIModalView *) alertSheet;
88 @interface SBAlertItemsController : NSObject
89 + (SBAlertItemsController *) sharedInstance;
90 - (void) activateAlertItem:(SBAlertItem *)item;
93 @interface SBStatusBarController : NSObject
94 + (SBStatusBarController *) sharedStatusBarController;
95 - (void) addStatusBarItem:(NSString *)item;
96 - (void) removeStatusBarItem:(NSString *)item;
99 #if defined(_ARM_ARCH_6) && !defined(_ARM_ARCH_7)
101 #define kIOSurfaceAllocSize kCoreSurfaceBufferAllocSize
102 #define kIOSurfaceBytesPerRow kCoreSurfaceBufferPitch
103 #define kIOSurfaceHeight kCoreSurfaceBufferHeight
104 #define kIOSurfaceIsGlobal kCoreSurfaceBufferGlobal
105 #define kIOSurfaceMemoryRegion kCoreSurfaceBufferMemoryRegion
106 #define kIOSurfacePixelFormat kCoreSurfaceBufferPixelFormat
107 #define kIOSurfaceWidth kCoreSurfaceBufferWidth
109 #define IOSurfaceRef CoreSurfaceBufferRef
110 #define IOSurfaceAcceleratorRef CoreSurfaceAcceleratorRef
112 #define IOSurfaceCreate CoreSurfaceBufferCreate
113 #define IOSurfaceFlushProcessorCaches CoreSurfaceBufferFlushProcessorCaches
114 #define IOSurfaceGetBaseAddress CoreSurfaceBufferGetBaseAddress
115 #define IOSurfaceLock CoreSurfaceBufferLock
116 #define IOSurfaceUnlock CoreSurfaceBufferUnlock
118 #define IOSurfaceAcceleratorCreate CoreSurfaceAcceleratorCreate
119 #define IOSurfaceAcceleratorTransferSurface CoreSurfaceAcceleratorTransferSurface
123 typedef void *IOSurfaceRef;
125 extern CFStringRef kIOSurfaceIsGlobal;
126 extern CFStringRef kIOSurfaceMemoryRegion;
127 extern CFStringRef kIOSurfaceBytesPerRow;
128 extern CFStringRef kIOSurfaceWidth;
129 extern CFStringRef kIOSurfaceHeight;
130 extern CFStringRef kIOSurfacePixelFormat;
131 extern CFStringRef kIOSurfaceAllocSize;
133 #define kIOSurfaceLockReadOnly 1
134 #define kIOSurfaceLockAvoidSync 2
136 extern "C" IOSurfaceRef IOSurfaceCreate(CFDictionaryRef dict);
137 extern "C" int IOSurfaceLock(IOSurfaceRef surface, uint32_t options, uint32_t *seed);
138 extern "C" int IOSurfaceUnlock(IOSurfaceRef surface, uint32_t options, uint32_t *seed);
139 extern "C" void *IOSurfaceGetBaseAddress(IOSurfaceRef surface);
141 extern "C" void IOSurfaceFlushProcessorCaches(IOSurfaceRef buffer);
143 typedef void *IOSurfaceAcceleratorRef;
145 extern "C" int IOSurfaceAcceleratorCreate(CFAllocatorRef allocator, void *type, IOSurfaceAcceleratorRef *accel);
146 extern "C" unsigned int IOSurfaceAcceleratorTransferSurface(IOSurfaceAcceleratorRef accelerator, IOSurfaceRef dest, IOSurfaceRef src, void *, void *, void *, void *);
148 #if defined(_ARM_ARCH_6) && !defined(_ARM_ARCH_7)
149 #define CoreSurfaceBufferLock(surface, options, seed) \
150 CoreSurfaceBufferLock(surface, 3, NULL)
151 #define CoreSurfaceBufferUnlock(surface, options, seed) \
152 CoreSurfaceBufferUnlock(surface, 3, NULL)
155 typedef void *IOMobileFramebufferRef;
157 extern "C" kern_return_t IOMobileFramebufferSwapSetLayer(
158 IOMobileFramebufferRef fb,
166 extern "C" void IOMobileFramebufferGetDisplaySize(IOMobileFramebufferRef connect, CGSize *size);
167 void (*$IOMobileFramebufferIsMainDisplay)(IOMobileFramebufferRef, BOOL *);
170 IOHIDEventRef IOHIDEventCreateKeyboardEvent(CFAllocatorRef allocator, uint64_t time, uint16_t page, uint16_t usage, Boolean down, IOHIDEventOptionBits flags);
172 IOHIDEventRef IOHIDEventCreateDigitizerEvent(CFAllocatorRef allocator, uint64_t timeStamp, IOHIDDigitizerTransducerType type, uint32_t index, uint32_t identity, uint32_t eventMask, uint32_t buttonMask, IOHIDFloat x, IOHIDFloat y, IOHIDFloat z, IOHIDFloat tipPressure, IOHIDFloat barrelPressure, Boolean range, Boolean touch, IOOptionBits options);
173 IOHIDEventRef IOHIDEventCreateDigitizerFingerEvent(CFAllocatorRef allocator, uint64_t timeStamp, uint32_t index, uint32_t identity, uint32_t eventMask, IOHIDFloat x, IOHIDFloat y, IOHIDFloat z, IOHIDFloat tipPressure, IOHIDFloat twist, Boolean range, Boolean touch, IOOptionBits options);
175 IOHIDEventSystemClientRef IOHIDEventSystemClientCreate(CFAllocatorRef allocator);
177 void IOHIDEventAppendEvent(IOHIDEventRef parent, IOHIDEventRef child);
178 void IOHIDEventSetIntegerValue(IOHIDEventRef event, IOHIDEventField field, int value);
179 void IOHIDEventSetSenderID(IOHIDEventRef event, uint64_t sender);
181 void IOHIDEventSystemClientDispatchEvent(IOHIDEventSystemClientRef client, IOHIDEventRef event);
182 void IOHIDEventSystemConnectionDispatchEvent(IOHIDEventSystemConnectionRef connection, IOHIDEventRef event);
185 static size_t width_;
186 static size_t height_;
187 static NSUInteger ratio_ = 0;
189 static const size_t BytesPerPixel = 4;
190 static const size_t BitsPerSample = 8;
192 static IOSurfaceAcceleratorRef accelerator_;
193 static IOSurfaceRef buffer_;
195 static NSMutableSet *handlers_;
196 static rfbScreenInfoPtr screen_;
197 static bool running_;
201 static unsigned clients_;
203 static CFMessagePortRef ashikase_;
206 static rfbPixel *black_;
208 static void VNCBlack() {
209 if (_unlikely(black_ == NULL))
210 black_ = reinterpret_cast<rfbPixel *>(mmap(NULL, sizeof(rfbPixel) * width_ * height_, PROT_READ, MAP_ANON | MAP_PRIVATE | MAP_NOCACHE, VM_FLAGS_PURGABLE, 0));
211 screen_->frameBuffer = reinterpret_cast<char *>(black_);
214 static bool Ashikase(bool always) {
215 if (!always && !cursor_)
218 if (ashikase_ == NULL)
219 ashikase_ = CFMessagePortCreateRemote(kCFAllocatorDefault, CFSTR("jp.ashikase.mousesupport"));
220 if (ashikase_ != NULL)
227 static CFDataRef cfTrue_;
228 static CFDataRef cfFalse_;
236 static MouseEvent event_;
237 static CFDataRef cfEvent_;
240 MouseMessageTypeEvent,
241 MouseMessageTypeSetEnabled
244 static void AshikaseSendEvent(float x, float y, int buttons = 0) {
247 event_.buttons = buttons;
248 event_.absolute = true;
250 CFMessagePortSendRequest(ashikase_, MouseMessageTypeEvent, cfEvent_, 0, 0, NULL, NULL);
253 static void AshikaseSetEnabled(bool enabled, bool always) {
254 if (!Ashikase(always))
257 CFMessagePortSendRequest(ashikase_, MouseMessageTypeSetEnabled, enabled ? cfTrue_ : cfFalse_, 0, 0, NULL, NULL);
260 AshikaseSendEvent(x_, y_);
263 MSClassHook(SBAlertItem)
264 MSClassHook(SBAlertItemsController)
265 MSClassHook(SBStatusBarController)
267 @interface VNCAlertItem : SBAlertItem
270 static Class $VNCAlertItem;
272 static NSString *DialogTitle(@"Remote Access Request");
273 static NSString *DialogFormat(@"Accept connection from\n%s?\n\nVeency VNC Server\nby Jay Freeman (saurik)\nsaurik@saurik.com\nhttp://www.saurik.com/\n\nSet a VNC password in Settings!");
274 static NSString *DialogAccept(@"Accept");
275 static NSString *DialogReject(@"Reject");
277 static volatile rfbNewClientAction action_ = RFB_CLIENT_ON_HOLD;
278 static NSCondition *condition_;
279 static NSLock *lock_;
281 static rfbClientPtr client_;
283 static void VNCSetup();
284 static void VNCEnabled();
286 float (*$GSMainScreenScaleFactor)();
288 static void VNCAction(rfbNewClientAction action) {
295 static void OnUserNotification(CFUserNotificationRef notification, CFOptionFlags flags) {
296 if ((flags & 0x3) == 1)
297 VNCAction(RFB_CLIENT_ACCEPT);
299 VNCAction(RFB_CLIENT_REFUSE);
301 CFRelease(notification);
304 @interface VNCBridge : NSObject {
307 + (void) askForConnection;
308 + (void) removeStatusBarItem;
309 + (void) registerClient;
313 @implementation VNCBridge
315 + (void) askForConnection {
316 if ($VNCAlertItem != nil) {
317 [[$SBAlertItemsController sharedInstance] activateAlertItem:[[[$VNCAlertItem alloc] init] autorelease]];
322 CFUserNotificationRef notification(CFUserNotificationCreate(kCFAllocatorDefault, 0, kCFUserNotificationPlainAlertLevel, &error, (CFDictionaryRef) [NSDictionary dictionaryWithObjectsAndKeys:
323 DialogTitle, kCFUserNotificationAlertHeaderKey,
324 [NSString stringWithFormat:DialogFormat, client_->host], kCFUserNotificationAlertMessageKey,
325 DialogAccept, kCFUserNotificationAlternateButtonTitleKey,
326 DialogReject, kCFUserNotificationDefaultButtonTitleKey,
330 CFRelease(notification);
334 if (notification == NULL) {
335 VNCAction(RFB_CLIENT_REFUSE);
339 CFRunLoopSourceRef source(CFUserNotificationCreateRunLoopSource(kCFAllocatorDefault, notification, &OnUserNotification, 0));
340 CFRunLoopAddSource(CFRunLoopGetCurrent(), source, kCFRunLoopDefaultMode);
343 + (void) removeStatusBarItem {
344 AshikaseSetEnabled(false, false);
347 SBA_removeStatusBarImage(const_cast<char *>("Veency"));
348 else if ($SBStatusBarController != nil)
349 [[$SBStatusBarController sharedStatusBarController] removeStatusBarItem:@"Veency"];
350 else if (UIApplication *app = [$UIApplication sharedApplication])
351 [app removeStatusBarImageNamed:@"Veency"];
354 + (void) registerClient {
355 // XXX: this could find a better home
357 if ($GSMainScreenScaleFactor == NULL)
360 ratio_ = $GSMainScreenScaleFactor();
364 AshikaseSetEnabled(true, false);
367 SBA_addStatusBarImage(const_cast<char *>("Veency"));
368 else if ($SBStatusBarController != nil)
369 [[$SBStatusBarController sharedStatusBarController] addStatusBarItem:@"Veency"];
370 else if (UIApplication *app = [$UIApplication sharedApplication])
371 [app addStatusBarImageNamed:@"Veency"];
374 + (void) performSetup:(NSThread *)thread {
375 NSAutoreleasePool *pool([[NSAutoreleasePool alloc] init]);
376 [thread autorelease];
384 MSInstanceMessage2(void, VNCAlertItem, alertSheet,buttonClicked, id, sheet, int, button) {
387 VNCAction(RFB_CLIENT_ACCEPT);
391 VNCAction(RFB_CLIENT_REFUSE);
398 MSInstanceMessage2(void, VNCAlertItem, configure,requirePasscodeForActions, BOOL, configure, BOOL, require) {
399 UIModalView *sheet([self alertSheet]);
400 [sheet setDelegate:self];
401 [sheet setTitle:DialogTitle];
402 [sheet setBodyText:[NSString stringWithFormat:DialogFormat, client_->host]];
403 [sheet addButtonWithTitle:DialogAccept];
404 [sheet addButtonWithTitle:DialogReject];
407 MSInstanceMessage0(void, VNCAlertItem, performUnlockAction) {
408 [[$SBAlertItemsController sharedInstance] activateAlertItem:self];
411 static mach_port_t (*GSTakePurpleSystemEventPort)(void);
412 static bool PurpleAllocated;
415 static void FixRecord(GSEventRecord *record) {
417 memmove(&record->windowContextId, &record->windowContextId + 1, sizeof(*record) - (reinterpret_cast<uint8_t *>(&record->windowContextId + 1) - reinterpret_cast<uint8_t *>(record)) + record->size);
420 static void VNCSettings() {
421 @synchronized (lock_) {
422 for (NSValue *handler in handlers_)
423 rfbUnregisterSecurityHandler(reinterpret_cast<rfbSecurityHandler *>([handler pointerValue]));
424 [handlers_ removeAllObjects];
427 @synchronized (condition_) {
431 [(NSString *) screen_->authPasswdData release];
432 screen_->authPasswdData = NULL;
434 if (CFStringRef password = (CFStringRef) CFPreferencesCopyAppValue(CFSTR("Password"), CFSTR("com.saurik.Veency")))
435 if (CFStringGetLength(password) == 0)
438 screen_->authPasswdData = (void *) password;
441 cursor_ = CFPreferencesGetAppBooleanValue(CFSTR("ShowCursor"), CFSTR("com.saurik.Veency"), &valid);
446 AshikaseSetEnabled(cursor_, true);
450 static void VNCNotifySettings(
451 CFNotificationCenterRef center,
457 CFPreferencesAppSynchronize(CFSTR("com.saurik.Veency"));
461 static rfbBool VNCCheck(rfbClientPtr client, const char *data, int size) {
462 @synchronized (condition_) {
463 if (NSString *password = reinterpret_cast<NSString *>(screen_->authPasswdData)) {
464 NSAutoreleasePool *pool([[NSAutoreleasePool alloc] init]);
465 rfbEncryptBytes(client->authChallenge, const_cast<char *>([password UTF8String]));
466 bool good(memcmp(client->authChallenge, data, size) == 0);
476 struct GSEventRecord record;
478 struct GSEventRecordInfo info;
479 struct GSPathInfo path;
483 static void VNCPointerOld(int buttons, int x, int y, CGPoint location, int diff, bool twas, bool tis);
484 static void VNCPointerNew(int buttons, int x, int y, CGPoint location, int diff, bool twas, bool tis);
486 static void VNCPointer(int buttons, int x, int y, rfbClientPtr client) {
490 CGPoint location = {x, y};
492 if (width_ > height_) {
507 int diff = buttons_ ^ buttons;
508 bool twas((buttons_ & 0x1) != 0);
509 bool tis((buttons & 0x1) != 0);
512 rfbDefaultPtrAddEvent(buttons, x, y, client);
514 if (Ashikase(false)) {
515 AshikaseSendEvent(x, y, buttons);
519 if (kCFCoreFoundationVersionNumber >= 800)
520 return VNCPointerNew(buttons, x, y, location, diff, twas, tis);
522 return VNCPointerOld(buttons, x, y, location, diff, twas, tis);
525 static void VNCPointerOld(int buttons, int x, int y, CGPoint location, int diff, bool twas, bool tis) {
526 mach_port_t purple(0);
528 if ((diff & 0x10) != 0) {
529 struct GSEventRecord record;
531 memset(&record, 0, sizeof(record));
533 record.type = (buttons & 0x10) != 0 ?
534 GSEventTypeHeadsetButtonDown :
535 GSEventTypeHeadsetButtonUp;
537 record.timestamp = GSCurrentEventTimestamp();
540 GSSendSystemEvent(&record);
543 if ((diff & 0x04) != 0) {
544 struct GSEventRecord record;
546 memset(&record, 0, sizeof(record));
548 record.type = (buttons & 0x04) != 0 ?
549 GSEventTypeMenuButtonDown :
550 GSEventTypeMenuButtonUp;
552 record.timestamp = GSCurrentEventTimestamp();
555 GSSendSystemEvent(&record);
558 if ((diff & 0x02) != 0) {
559 struct GSEventRecord record;
561 memset(&record, 0, sizeof(record));
563 record.type = (buttons & 0x02) != 0 ?
564 GSEventTypeLockButtonDown :
565 GSEventTypeLockButtonUp;
567 record.timestamp = GSCurrentEventTimestamp();
570 GSSendSystemEvent(&record);
573 if (twas != tis || tis) {
574 struct VeencyEvent event;
576 memset(&event, 0, sizeof(event));
578 event.record.type = GSEventTypeMouse;
579 event.record.locationInWindow.x = x;
580 event.record.locationInWindow.y = y;
581 event.record.timestamp = GSCurrentEventTimestamp();
582 event.record.size = sizeof(event.data);
584 event.data.info.handInfo.type = twas == tis ?
585 GSMouseEventTypeDragged :
587 GSMouseEventTypeDown :
590 event.data.info.handInfo.x34 = 0x1;
591 event.data.info.handInfo.x38 = tis ? 0x1 : 0x0;
594 event.data.info.pathPositions = 1;
596 event.data.info.x52 = 1;
598 event.data.path.x00 = 0x01;
599 event.data.path.x01 = 0x02;
600 event.data.path.x02 = tis ? 0x03 : 0x00;
601 event.data.path.position = event.record.locationInWindow;
605 if (CAWindowServer *server = [CAWindowServer serverIfRunning]) {
606 NSArray *displays([server displays]);
607 if (displays != nil && [displays count] != 0)
608 if (CAWindowServerDisplay *display = [displays objectAtIndex:0])
609 port = [display clientPortAtPosition:location];
614 purple = (*GSTakePurpleSystemEventPort)();
618 FixRecord(&event.record);
619 GSSendEvent(&event.record, port);
622 if (purple != 0 && PurpleAllocated)
623 mach_port_deallocate(mach_task_self(), purple);
626 static void VNCSendHIDEvent(IOHIDEventRef event) {
627 static IOHIDEventSystemClientRef client_(NULL);
629 client_ = IOHIDEventSystemClientCreate(kCFAllocatorDefault);
631 IOHIDEventSetSenderID(event, 0xDEFACEDBEEFFECE5);
632 IOHIDEventSystemClientDispatchEvent(client_, event);
636 static void VNCPointerNew(int buttons, int x, int y, CGPoint location, int diff, bool twas, bool tis) {
637 if ((diff & 0x10) != 0)
638 VNCSendHIDEvent(IOHIDEventCreateKeyboardEvent(kCFAllocatorDefault, mach_absolute_time(), kHIDPage_Telephony, kHIDUsage_Tfon_Flash, (buttons & 0x10) != 0, 0));
639 if ((diff & 0x04) != 0)
640 VNCSendHIDEvent(IOHIDEventCreateKeyboardEvent(kCFAllocatorDefault, mach_absolute_time(), kHIDPage_Consumer, kHIDUsage_Csmr_Menu, (buttons & 0x04) != 0, 0));
641 if ((diff & 0x02) != 0)
642 VNCSendHIDEvent(IOHIDEventCreateKeyboardEvent(kCFAllocatorDefault, mach_absolute_time(), kHIDPage_Consumer, kHIDUsage_Csmr_Power, (buttons & 0x02) != 0, 0));
647 if (twas == 0 && tis == 1) {
648 handm = kIOHIDDigitizerEventRange | kIOHIDDigitizerEventTouch | kIOHIDDigitizerEventIdentity;
649 fingerm = kIOHIDDigitizerEventRange | kIOHIDDigitizerEventTouch;
650 } else if (twas == 1 && tis == 1) {
651 handm = kIOHIDDigitizerEventPosition;
652 fingerm = kIOHIDDigitizerEventPosition;
653 } else if (twas == 1 && tis == 0) {
654 handm = kIOHIDDigitizerEventRange | kIOHIDDigitizerEventTouch | kIOHIDDigitizerEventIdentity | kIOHIDDigitizerEventPosition;
655 fingerm = kIOHIDDigitizerEventRange | kIOHIDDigitizerEventTouch;
658 // XXX: avoid division in VNCPointer()
668 IOHIDEventRef hand(IOHIDEventCreateDigitizerEvent(kCFAllocatorDefault, mach_absolute_time(), kIOHIDDigitizerTransducerTypeHand, 1<<22, 1, handm, 0, xf, yf, 0, 0, 0, 0, 0, 0));
669 IOHIDEventSetIntegerValue(hand, kIOHIDEventFieldIsBuiltIn, true);
670 IOHIDEventSetIntegerValue(hand, kIOHIDEventFieldDigitizerIsDisplayIntegrated, true);
672 IOHIDEventRef finger(IOHIDEventCreateDigitizerFingerEvent(kCFAllocatorDefault, mach_absolute_time(), 3, 2, fingerm, xf, yf, 0, 0, 0, tis, tis, 0));
673 IOHIDEventAppendEvent(hand, finger);
676 VNCSendHIDEvent(hand);
679 GSEventRef (*$GSEventCreateKeyEvent)(int, CGPoint, CFStringRef, CFStringRef, id, UniChar, short, short);
680 GSEventRef (*$GSCreateSyntheticKeyEvent)(UniChar, BOOL, BOOL);
682 static void VNCKeyboardNew(rfbBool down, rfbKeySym key, rfbClientPtr client) {
683 //NSLog(@"VNC d:%u k:%04x", down, key);
688 case XK_exclam: case XK_1: usage = kHIDUsage_Keyboard1; break;
689 case XK_at: case XK_2: usage = kHIDUsage_Keyboard2; break;
690 case XK_numbersign: case XK_3: usage = kHIDUsage_Keyboard3; break;
691 case XK_dollar: case XK_4: usage = kHIDUsage_Keyboard4; break;
692 case XK_percent: case XK_5: usage = kHIDUsage_Keyboard5; break;
693 case XK_asciicircum: case XK_6: usage = kHIDUsage_Keyboard6; break;
694 case XK_ampersand: case XK_7: usage = kHIDUsage_Keyboard7; break;
695 case XK_asterisk: case XK_8: usage = kHIDUsage_Keyboard8; break;
696 case XK_parenleft: case XK_9: usage = kHIDUsage_Keyboard9; break;
697 case XK_parenright: case XK_0: usage = kHIDUsage_Keyboard0; break;
699 case XK_A: case XK_a: usage = kHIDUsage_KeyboardA; break;
700 case XK_B: case XK_b: usage = kHIDUsage_KeyboardB; break;
701 case XK_C: case XK_c: usage = kHIDUsage_KeyboardC; break;
702 case XK_D: case XK_d: usage = kHIDUsage_KeyboardD; break;
703 case XK_E: case XK_e: usage = kHIDUsage_KeyboardE; break;
704 case XK_F: case XK_f: usage = kHIDUsage_KeyboardF; break;
705 case XK_G: case XK_g: usage = kHIDUsage_KeyboardG; break;
706 case XK_H: case XK_h: usage = kHIDUsage_KeyboardH; break;
707 case XK_I: case XK_i: usage = kHIDUsage_KeyboardI; break;
708 case XK_J: case XK_j: usage = kHIDUsage_KeyboardJ; break;
709 case XK_K: case XK_k: usage = kHIDUsage_KeyboardK; break;
710 case XK_L: case XK_l: usage = kHIDUsage_KeyboardL; break;
711 case XK_M: case XK_m: usage = kHIDUsage_KeyboardM; break;
712 case XK_N: case XK_n: usage = kHIDUsage_KeyboardN; break;
713 case XK_O: case XK_o: usage = kHIDUsage_KeyboardO; break;
714 case XK_P: case XK_p: usage = kHIDUsage_KeyboardP; break;
715 case XK_Q: case XK_q: usage = kHIDUsage_KeyboardQ; break;
716 case XK_R: case XK_r: usage = kHIDUsage_KeyboardR; break;
717 case XK_S: case XK_s: usage = kHIDUsage_KeyboardS; break;
718 case XK_T: case XK_t: usage = kHIDUsage_KeyboardT; break;
719 case XK_U: case XK_u: usage = kHIDUsage_KeyboardU; break;
720 case XK_V: case XK_v: usage = kHIDUsage_KeyboardV; break;
721 case XK_W: case XK_w: usage = kHIDUsage_KeyboardW; break;
722 case XK_X: case XK_x: usage = kHIDUsage_KeyboardX; break;
723 case XK_Y: case XK_y: usage = kHIDUsage_KeyboardY; break;
724 case XK_Z: case XK_z: usage = kHIDUsage_KeyboardZ; break;
726 case XK_underscore: case XK_minus: usage = kHIDUsage_KeyboardHyphen; break;
727 case XK_plus: case XK_equal: usage = kHIDUsage_KeyboardEqualSign; break;
728 case XK_braceleft: case XK_bracketleft: usage = kHIDUsage_KeyboardOpenBracket; break;
729 case XK_braceright: case XK_bracketright: usage = kHIDUsage_KeyboardCloseBracket; break;
730 case XK_bar: case XK_backslash: usage = kHIDUsage_KeyboardBackslash; break;
731 case XK_colon: case XK_semicolon: usage = kHIDUsage_KeyboardSemicolon; break;
732 case XK_quotedbl: case XK_apostrophe: usage = kHIDUsage_KeyboardQuote; break;
733 case XK_asciitilde: case XK_grave: usage = kHIDUsage_KeyboardGraveAccentAndTilde; break;
734 case XK_less: case XK_comma: usage = kHIDUsage_KeyboardComma; break;
735 case XK_greater: case XK_period: usage = kHIDUsage_KeyboardPeriod; break;
736 case XK_question: case XK_slash: usage = kHIDUsage_KeyboardSlash; break;
738 case XK_Return: usage = kHIDUsage_KeyboardReturnOrEnter; break;
739 case XK_BackSpace: usage = kHIDUsage_KeyboardDeleteOrBackspace; break;
740 case XK_Tab: usage = kHIDUsage_KeyboardTab; break;
741 case XK_space: usage = kHIDUsage_KeyboardSpacebar; break;
743 case XK_Shift_L: usage = kHIDUsage_KeyboardLeftShift; break;
744 case XK_Shift_R: usage = kHIDUsage_KeyboardRightShift; break;
745 case XK_Control_L: usage = kHIDUsage_KeyboardLeftControl; break;
746 case XK_Control_R: usage = kHIDUsage_KeyboardRightControl; break;
747 case XK_Meta_L: usage = kHIDUsage_KeyboardLeftAlt; break;
748 case XK_Meta_R: usage = kHIDUsage_KeyboardRightAlt; break;
749 case XK_Alt_L: usage = kHIDUsage_KeyboardLeftGUI; break;
750 case XK_Alt_R: usage = kHIDUsage_KeyboardRightGUI; break;
752 case XK_Up: usage = kHIDUsage_KeyboardUpArrow; break;
753 case XK_Down: usage = kHIDUsage_KeyboardDownArrow; break;
754 case XK_Left: usage = kHIDUsage_KeyboardLeftArrow; break;
755 case XK_Right: usage = kHIDUsage_KeyboardRightArrow; break;
757 case XK_Home: case XK_Begin: usage = kHIDUsage_KeyboardHome; break;
758 case XK_End: usage = kHIDUsage_KeyboardEnd; break;
759 case XK_Page_Up: usage = kHIDUsage_KeyboardPageUp; break;
760 case XK_Page_Down: usage = kHIDUsage_KeyboardPageDown; break;
765 VNCSendHIDEvent(IOHIDEventCreateKeyboardEvent(kCFAllocatorDefault, mach_absolute_time(), kHIDPage_KeyboardOrKeypad, usage, down, 0));
768 static void VNCKeyboard(rfbBool down, rfbKeySym key, rfbClientPtr client) {
769 if (kCFCoreFoundationVersionNumber >= 800)
770 return VNCKeyboardNew(down, key, client);
776 case XK_Return: key = '\r'; break;
777 case XK_BackSpace: key = 0x7f; break;
783 CGPoint point(CGPointMake(x_, y_));
785 UniChar unicode(key);
786 CFStringRef string(NULL);
788 GSEventRef event0, event1(NULL);
789 if ($GSEventCreateKeyEvent != NULL) {
790 string = CFStringCreateWithCharacters(kCFAllocatorDefault, &unicode, 1);
791 event0 = (*$GSEventCreateKeyEvent)(10, point, string, string, nil, 0, 0, 1);
792 event1 = (*$GSEventCreateKeyEvent)(11, point, string, string, nil, 0, 0, 1);
793 } else if ($GSCreateSyntheticKeyEvent != NULL) {
794 event0 = (*$GSCreateSyntheticKeyEvent)(unicode, YES, YES);
795 GSEventRecord *record(_GSEventGetGSEventRecord(event0));
796 record->type = GSEventTypeKeyDown;
801 if (CAWindowServer *server = [CAWindowServer serverIfRunning]) {
802 NSArray *displays([server displays]);
803 if (displays != nil && [displays count] != 0)
804 if (CAWindowServerDisplay *display = [displays objectAtIndex:0])
805 port = [display clientPortAtPosition:point];
808 mach_port_t purple(0);
812 purple = (*GSTakePurpleSystemEventPort)();
817 GSSendEvent(_GSEventGetGSEventRecord(event0), port);
819 GSSendEvent(_GSEventGetGSEventRecord(event1), port);
822 if (purple != 0 && PurpleAllocated)
823 mach_port_deallocate(mach_task_self(), purple);
832 static void VNCDisconnect(rfbClientPtr client) {
833 @synchronized (condition_) {
835 [VNCBridge performSelectorOnMainThread:@selector(removeStatusBarItem) withObject:nil waitUntilDone:YES];
839 static rfbNewClientAction VNCClient(rfbClientPtr client) {
842 rfbNewClientAction action;
843 if (screen_->authPasswdData != NULL)
844 action = RFB_CLIENT_ACCEPT;
847 [VNCBridge performSelectorOnMainThread:@selector(askForConnection) withObject:nil waitUntilDone:NO];
848 while (action_ == RFB_CLIENT_ON_HOLD)
851 action_ = RFB_CLIENT_ON_HOLD;
854 if (action == RFB_CLIENT_ACCEPT) {
855 [VNCBridge performSelectorOnMainThread:@selector(registerClient) withObject:nil waitUntilDone:YES];
856 client->clientGoneHook = &VNCDisconnect;
863 extern "C" bool GSSystemHasCapability(NSString *);
865 static CFTypeRef (*$GSSystemCopyCapability)(CFStringRef);
866 static CFTypeRef (*$GSSystemGetCapability)(CFStringRef);
867 static BOOL (*$MGGetBoolAnswer)(CFStringRef);
869 static void VNCLog(const char *format, ...) {
871 va_start(args, format);
872 NSLogv([NSString stringWithUTF8String:format], args);
876 static void VNCSetup() {
882 @synchronized (condition_) {
884 char *arg0(strdup("VNCServer"));
885 char *argv[] = {arg0, NULL};
886 screen_ = rfbGetScreen(&argc, argv, width_, height_, BitsPerSample, 3, BytesPerPixel);
892 screen_->desktopName = strdup([[[NSProcessInfo processInfo] hostName] UTF8String]);
894 screen_->alwaysShared = TRUE;
895 screen_->handleEventsEagerly = TRUE;
896 screen_->deferUpdateTime = 1000 / 25;
898 screen_->serverFormat.redShift = BitsPerSample * 2;
899 screen_->serverFormat.greenShift = BitsPerSample * 1;
900 screen_->serverFormat.blueShift = BitsPerSample * 0;
902 $GSSystemCopyCapability = reinterpret_cast<CFTypeRef (*)(CFStringRef)>(dlsym(RTLD_DEFAULT, "GSSystemCopyCapability"));
903 $GSSystemGetCapability = reinterpret_cast<CFTypeRef (*)(CFStringRef)>(dlsym(RTLD_DEFAULT, "GSSystemGetCapability"));
904 $MGGetBoolAnswer = reinterpret_cast<BOOL (*)(CFStringRef)>(dlsym(RTLD_DEFAULT, "MGGetBoolAnswer"));
908 if ($GSSystemCopyCapability != NULL) {
909 opengles2 = (*$GSSystemCopyCapability)(CFSTR("opengles-2"));
910 } else if ($GSSystemGetCapability != NULL) {
911 opengles2 = (*$GSSystemGetCapability)(CFSTR("opengles-2"));
912 if (opengles2 != NULL)
914 } else if ($MGGetBoolAnswer != NULL) {
915 opengles2 = $MGGetBoolAnswer(CFSTR("opengles-2")) ? kCFBooleanTrue : kCFBooleanFalse;
920 bool accelerated(opengles2 != NULL && [(NSNumber *)opengles2 boolValue]);
923 IOSurfaceAcceleratorCreate(NULL, NULL, &accelerator_);
925 if (opengles2 != NULL)
926 CFRelease(opengles2);
928 if (accelerator_ == NULL)
931 buffer_ = IOSurfaceCreate((CFDictionaryRef) [NSDictionary dictionaryWithObjectsAndKeys:
932 @"PurpleEDRAM", kIOSurfaceMemoryRegion,
933 [NSNumber numberWithBool:YES], kIOSurfaceIsGlobal,
934 [NSNumber numberWithInt:(width_ * BytesPerPixel)], kIOSurfaceBytesPerRow,
935 [NSNumber numberWithInt:width_], kIOSurfaceWidth,
936 [NSNumber numberWithInt:height_], kIOSurfaceHeight,
937 [NSNumber numberWithInt:'BGRA'], kIOSurfacePixelFormat,
938 [NSNumber numberWithInt:(width_ * height_ * BytesPerPixel)], kIOSurfaceAllocSize,
941 screen_->frameBuffer = reinterpret_cast<char *>(IOSurfaceGetBaseAddress(buffer_));
944 screen_->kbdAddEvent = &VNCKeyboard;
945 screen_->ptrAddEvent = &VNCPointer;
947 screen_->newClientHook = &VNCClient;
948 screen_->passwordCheck = &VNCCheck;
950 screen_->cursor = NULL;
953 static void VNCEnabled() {
957 @synchronized (lock_) {
960 bool enabled(CFPreferencesGetAppBooleanValue(CFSTR("Enabled"), CFSTR("com.saurik.Veency"), &valid));
964 if (enabled != running_)
967 screen_->socketState = RFB_SOCKET_INIT;
968 rfbInitServer(screen_);
969 rfbRunEventLoop(screen_, -1, true);
971 rfbShutdownServer(screen_, true);
978 static void VNCNotifyEnabled(
979 CFNotificationCenterRef center,
985 CFPreferencesAppSynchronize(CFSTR("com.saurik.Veency"));
990 static IOMobileFramebufferRef main_;
991 static IOSurfaceRef layer_;
993 static void OnLayer(IOMobileFramebufferRef fb, IOSurfaceRef layer) {
994 if (_unlikely(width_ == 0 || height_ == 0)) {
996 IOMobileFramebufferGetDisplaySize(fb, &size);
999 height_ = size.height;
1001 if (width_ == 0 || height_ == 0)
1004 NSThread *thread([NSThread alloc]);
1007 initWithTarget:[VNCBridge class]
1008 selector:@selector(performSetup:)
1013 } else if (_unlikely(clients_ != 0)) {
1014 if (layer == NULL) {
1015 if (accelerator_ != NULL) {
1016 IOSurfaceLock(layer, 0, NULL);
1017 memset(screen_->frameBuffer, 0, sizeof(rfbPixel) * width_ * height_);
1018 IOSurfaceUnlock(layer, 0, NULL);
1022 if (accelerator_ != NULL)
1023 IOSurfaceAcceleratorTransferSurface(accelerator_, layer, buffer_, NULL, NULL, NULL, NULL);
1025 IOSurfaceLock(layer, kIOSurfaceLockReadOnly, NULL);
1026 rfbPixel *data(reinterpret_cast<rfbPixel *>(IOSurfaceGetBaseAddress(layer)));
1028 IOSurfaceFlushProcessorCaches(layer);
1030 /*rfbPixel corner(data[0]);
1034 screen_->frameBuffer = const_cast<char *>(reinterpret_cast<volatile char *>(data));
1035 IOSurfaceUnlock(layer, kIOSurfaceLockReadOnly, NULL);
1039 rfbMarkRectAsModified(screen_, 0, 0, width_, height_);
1043 static bool wait_ = false;
1045 MSHook(kern_return_t, IOMobileFramebufferSwapSetLayer,
1046 IOMobileFramebufferRef fb,
1048 IOSurfaceRef buffer,
1056 else if (_unlikely(layer != 0))
1058 else if (_unlikely(buffer == NULL))
1060 else if (_unlikely(fb == NULL))
1062 else if ($IOMobileFramebufferIsMainDisplay == NULL)
1065 (*$IOMobileFramebufferIsMainDisplay)(fb, &main);
1067 if (_likely(main)) {
1072 OnLayer(fb, buffer);
1075 return _IOMobileFramebufferSwapSetLayer(fb, layer, buffer, bounds, frame, flags);
1078 // XXX: beg rpetrich for the type of this function
1079 extern "C" void *IOMobileFramebufferSwapWait(IOMobileFramebufferRef, void *, unsigned);
1081 MSHook(void *, IOMobileFramebufferSwapWait, IOMobileFramebufferRef fb, void *arg1, unsigned flags) {
1082 void *value(_IOMobileFramebufferSwapWait(fb, arg1, flags));
1084 OnLayer(fb, layer_);
1088 MSHook(void, rfbRegisterSecurityHandler, rfbSecurityHandler *handler) {
1089 NSAutoreleasePool *pool([[NSAutoreleasePool alloc] init]);
1091 @synchronized (lock_) {
1092 [handlers_ addObject:[NSValue valueWithPointer:handler]];
1093 _rfbRegisterSecurityHandler(handler);
1099 template <typename Type_>
1100 static void dlset(Type_ &function, const char *name) {
1101 function = reinterpret_cast<Type_>(dlsym(RTLD_DEFAULT, name));
1105 NSAutoreleasePool *pool([[NSAutoreleasePool alloc] init]);
1107 MSHookSymbol(GSTakePurpleSystemEventPort, "_GSGetPurpleSystemEventPort");
1108 if (GSTakePurpleSystemEventPort == NULL) {
1109 MSHookSymbol(GSTakePurpleSystemEventPort, "_GSCopyPurpleSystemEventPort");
1110 PurpleAllocated = true;
1113 if (dlsym(RTLD_DEFAULT, "GSLibraryCopyGenerationInfoValueForKey") != NULL)
1115 else if (dlsym(RTLD_DEFAULT, "GSKeyboardCreate") != NULL)
1117 else if (dlsym(RTLD_DEFAULT, "GSEventGetWindowContextId") != NULL)
1123 sysctlbyname("hw.machine", NULL, &size, NULL, 0);
1125 sysctlbyname("hw.machine", machine, &size, NULL, 0);
1126 iPad1_ = strcmp(machine, "iPad1,1") == 0;
1128 dlset($GSMainScreenScaleFactor, "GSMainScreenScaleFactor");
1129 dlset($GSEventCreateKeyEvent, "GSEventCreateKeyEvent");
1130 dlset($GSCreateSyntheticKeyEvent, "_GSCreateSyntheticKeyEvent");
1131 dlset($IOMobileFramebufferIsMainDisplay, "IOMobileFramebufferIsMainDisplay");
1133 MSHookFunction(&IOMobileFramebufferSwapSetLayer, MSHake(IOMobileFramebufferSwapSetLayer));
1134 MSHookFunction(&rfbRegisterSecurityHandler, MSHake(rfbRegisterSecurityHandler));
1137 MSHookFunction(&IOMobileFramebufferSwapWait, MSHake(IOMobileFramebufferSwapWait));
1139 if ($SBAlertItem != nil) {
1140 $VNCAlertItem = objc_allocateClassPair($SBAlertItem, "VNCAlertItem", 0);
1141 MSAddMessage2(VNCAlertItem, "v@:@i", alertSheet,buttonClicked);
1142 MSAddMessage2(VNCAlertItem, "v@:cc", configure,requirePasscodeForActions);
1143 MSAddMessage0(VNCAlertItem, "v@:", performUnlockAction);
1144 objc_registerClassPair($VNCAlertItem);
1147 CFNotificationCenterAddObserver(
1148 CFNotificationCenterGetDarwinNotifyCenter(),
1149 NULL, &VNCNotifyEnabled, CFSTR("com.saurik.Veency-Enabled"), NULL, 0
1152 CFNotificationCenterAddObserver(
1153 CFNotificationCenterGetDarwinNotifyCenter(),
1154 NULL, &VNCNotifySettings, CFSTR("com.saurik.Veency-Settings"), NULL, 0
1157 condition_ = [[NSCondition alloc] init];
1158 lock_ = [[NSLock alloc] init];
1159 handlers_ = [[NSMutableSet alloc] init];
1164 cfTrue_ = CFDataCreate(kCFAllocatorDefault, reinterpret_cast<UInt8 *>(&value), sizeof(value));
1167 cfFalse_ = CFDataCreate(kCFAllocatorDefault, reinterpret_cast<UInt8 *>(&value), sizeof(value));
1169 cfEvent_ = CFDataCreateWithBytesNoCopy(kCFAllocatorDefault, reinterpret_cast<UInt8 *>(&event_), sizeof(event_), kCFAllocatorNull);