These are a set of CLs merged from the wv cdm repo to the android repo. * Correct error logging Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/40000 ] In tests, we set the cipher list to avoid using insecure ciphers when connecting to the provisioning/license service. The result of setting the cipher list was being incorrectly validated. Bug: 64847919 * Move mips cache headers to clear_cache_function.h Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39700 ] Since the clear_cache function has been moved away from the dynamic adapter, we need these conditional includes to be migrated as well for MIPS. * Comment out Level 3 debug call until merge Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39761 ] This call was introduced in go/wvgerrit/34260/. Since the haystack tool in google3 still needs this merge, this should be commented out so the tool can still build until the merge has finished. * Add logging for MAC keys to mock Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39740 ] Bug: 70637842 * Move external interfaces into level3.h + refactor Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39673 ] As part of b/70523618, this CL moves interfaces that partners are responsible for in Level 3 to level3.h so they can be visible as part of the CDM release process. It also cleans up some of the names of the files and adds documentation. * Corrected close session logging level Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/39676 ] Bug: 69460963 * Remove Security Level Path Backward Compatibility Support Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/39505 ] From the android K release onwards certificates were stored in security level specific directories. If upgrading from previous releases persistent information needed to be moved to those directories. Since no device is likely to upgrade from J to Pi, comptibility support can be removed. Bug: 70160032 * Rename privacy_crypto_openssl To privacy_crypto_boringssl Author: John W. Bruce <juce@google.com> [ Merge of http://go/wvgerrit/37122 ] Now that we no longer support OpenSSL in the Shared Source CDM, the name of this file can be updated. Bug: 67907873 Test: build.py x86-64 Test: wv_ce_cdm_unittest Test: jenkins/linux_unit_tests * Remove Conditional Compilation from OpenSSL/BoringSSL Author: John W. Bruce <juce@google.com> [ Merge of http://go/wvgerrit/39460 ] This change removes the usages of conditional compilation to support both BoringSSL and OpenSSL, as well as to support multiple versions of the OpenSSL API. All code is now compiled against one of the two versions of BoringSSL in third_party/. Note that in some cases, the kit/ and legacy_kit/ versions of BoringSSL had different APIs, so when removing the OpenSSL version compatibility conditional compilation, sometimes the older branch was kept and sometimes the newer branch was kept. Bug: 67907873 Test: build.py x86-64 Test: wv_ce_cdm_unittest Test: jenkins/linux_unit_tests * Build CE & Jenkins CDMs With BoringSSL from third_party/ Author: John W. Bruce <juce@google.com> [ Merge of http://go/wvgerrit/37120 ] Up until now, integrators have been responsible for providing a compatible crypto library for use by the CE CDM. (either OpenSSL or BoringSSL) After this change, this decision will no longer be in their hands. The CE CDM build will always use the copy of BoringSSL in third_party/, which will be statically linked with our library with hidden visibility. This allows us to better control what crypto library we use and will prevent continuing problems with trying to support both OpenSSL and BoringSSL. Unfortunately, BoringSSL began using C++11 in mid-2017, and we can't support C++11 right now. Until we can, we need to use a C++11-free version of BoringSSL for libssl. The CDM itself will continue to use a recent BoringSSL, as it only needs libcrypto. But the unit tests that need libssl have to use the legacy version. Bug: 67907873 Test: build.py x86-64 Test: wv_ce_cdm_unittest Test: jenkins/linux_unit_tests * Modified RNG for Level3 to use more entropy Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39220 ] Bug: 65165076 Modified seed generation to use an xor of clock_gettime and client-implemented code to supply random seeds to the RNG. Modified the RNG as well to use xoroshiro128+ instead of xorshift, since it uses more than one seed/state (which are 64-bit) and has higher "statistical quality". The default implementations for the seed generation use /dev/urandom. * Configure base path for Level3FileSystem Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/39506 ] This is in response to b/70354006. This change makes the Android Level3FileSystem use the existing properties method GetDevicesFilesBasePath for binderization. The same is done for the Linux implementation. * Add legacy_kit/ to BoringSSL Directory Author: John W. Bruce <juce@google.com> [ Merge of http://go/wvgerrit/38861 ] This adds a second copy of BoringSSL to the third_party/boringssl/ directory. This second copy is pinned to the last revision of BoringSSL not to require C++11 and is not updated by the UPDATE_BORINGSSL.sh script. This second copy will be used to provide libssl to the tests on devices that do not support C++11. Once we support C++11 in the CDM again, this weight should be removed and all targets should use the copy of BoringSSL in the kit/ directory. Bug: 67907873 * Use Shared Libraries for Unit Tests Author: John W. Bruce <juce@google.com> [ Merge of http://go/wvgerrit/38860 ] Some unit tests were using a statically-linked CDM instead of a dynamically-linked one. (Or, in one case, trying to link both ways into the same binary.) For now, we need to only link dynamically, so that the unit tests and the CDM can use different versions of BoringSSL. Long-term, we would like to test both kinds of linkage. (See b/69548115 for that.) Some unit tests were also using a dynamicaly-linked CDM that was named such that it appeared to be statically-linked. This patch renames some targets to make the linkage clearer. Bug: 67907873 * Change CDM_Backwards_Compatiblity_Tests to dedicated brances Author: Fred Gylys-Colwell <fredgc@google.com> [ Merge of http://go/wvgerrit/39003 ] The build scripts used by CDM_Backwards_Compatiblity_Tests now pull old versions of oemcrypto from the dedicated branches oemcrypto-v*, which [will eventually] contain old oemcrypto versions, that build with the current build system with a current boringssl version. bug: 67907873 * Fix spacing on level3 header Author: Srujan Gaddam <srujzs@google.com> [ Merge of http://go/wvgerrit/38760 ] * Correct Query status calls Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/38640 ] Bug: 70160032 * Refactoring to allow encryption of client ID Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/37460 ] The code has been restructured to allow encryption of client identification in provisioning requests. This will be enabled when server side changes have been made (b/69427217). * Additional information is included in the Client Identification portion of the provisioning request. * Client identification will be encrypted with a service certificate provided by the app/client. Platform changes to enable passing this to core are needed. If a service certificate is not provided, a default one associated with the production Keysmith will be used. * Switched APIs in CdmEngine to take a service certificate for provisioning rather than licensing. Service certificates for licensing are session based and passed as properties from platform code. Bug: 30737060 * Allow some CDM errors to be reported from multiple locations Author: Rahul Frias <rfrias@google.com> [ Merge of http://go/wvgerrit/38360 ] This creates some CdmResponseType errors which may be reused PARAMETER_NULL, NOT_INITIALIZED_ERROR, REINIT_ERROR. I have made changes to a few classes to report these errors. Will work on additional classes in a separate CL. Bug: 69864404 BUG: 71650075 Test: WV Unit/integration tests Change-Id: Icc048770d424ac537d11ff327cda2cb142da802d
223 lines
7.0 KiB
C++
223 lines
7.0 KiB
C++
// Copyright 2017 Google Inc. All rights reserved.
|
|
//
|
|
// Redistribution and use in source and binary forms, with or without
|
|
// modification, are permitted provided that the following conditions are
|
|
// met:
|
|
//
|
|
// * Redistributions of source code must retain the above copyright
|
|
// notice, this list of conditions and the following disclaimer.
|
|
// * Redistributions in binary form must reproduce the above
|
|
// copyright notice, this list of conditions and the following disclaimer
|
|
// in the documentation and/or other materials provided with the
|
|
// distribution.
|
|
// * Neither the name of Google Inc. nor the names of its
|
|
// contributors may be used to endorse or promote products derived from
|
|
// this software without specific prior written permission.
|
|
//
|
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
// from google3/util/gtl/shared_ptr.h
|
|
// from protobuf/src/google/protobuf/stubs/shared_ptr.h
|
|
|
|
#ifndef WVCDM_CORE_SHARED_PTR_H__
|
|
#define WVCDM_CORE_SHARED_PTR_H__
|
|
|
|
#include <algorithm> // for swap
|
|
#include <stddef.h>
|
|
#include <memory>
|
|
|
|
#include "wv_cdm_types.h"
|
|
|
|
namespace {
|
|
bool Barrier_AtomicIncrement(volatile uint32_t* ptr, uint32_t value) {
|
|
*ptr += value;
|
|
return *ptr;
|
|
}
|
|
bool NoBarrier_AtomicIncrement(volatile uint32_t* ptr, uint32_t value) {
|
|
*ptr += value;
|
|
return *ptr;
|
|
}
|
|
|
|
inline bool RefCountDec(volatile uint32_t *ptr) {
|
|
return Barrier_AtomicIncrement(ptr, -1) != 0;
|
|
}
|
|
|
|
inline void RefCountInc(volatile uint32_t *ptr) {
|
|
NoBarrier_AtomicIncrement(ptr, 1);
|
|
}
|
|
|
|
} // namespace
|
|
|
|
namespace wvcdm {
|
|
|
|
template <typename T> class shared_ptr;
|
|
|
|
// This class is an internal implementation detail for shared_ptr. If two
|
|
// shared_ptrs point to the same object, they also share a control block.
|
|
// An "empty" shared_pointer refers to NULL and also has a NULL control block.
|
|
// It contains all of the state that's needed for reference counting or any
|
|
// other kind of resource management. In this implementation the control block
|
|
// consists of a single reference count (the number of shared_ptrs that
|
|
// share ownership of the object).
|
|
class SharedPtrControlBlock {
|
|
template <typename T> friend class shared_ptr;
|
|
private:
|
|
SharedPtrControlBlock() : refcount_(1) {}
|
|
uint32_t refcount_;
|
|
};
|
|
|
|
// Forward declaration. The class is defined below.
|
|
template <typename T> class enable_shared_from_this;
|
|
|
|
template <typename T>
|
|
class shared_ptr {
|
|
public:
|
|
typedef T element_type;
|
|
|
|
shared_ptr() : ptr_(NULL), control_block_(NULL) {}
|
|
|
|
explicit shared_ptr(T* ptr)
|
|
: ptr_(ptr),
|
|
control_block_(ptr != NULL ? new SharedPtrControlBlock : NULL) {
|
|
}
|
|
|
|
// Copy constructor: makes this object a copy of ptr, and increments
|
|
// the reference count.
|
|
template <typename U>
|
|
shared_ptr(const shared_ptr<U>& ptr)
|
|
: ptr_(NULL),
|
|
control_block_(NULL) {
|
|
Initialize(ptr);
|
|
}
|
|
// Need non-templated version to prevent the compiler-generated default
|
|
shared_ptr(const shared_ptr<T>& ptr)
|
|
: ptr_(NULL),
|
|
control_block_(NULL) {
|
|
Initialize(ptr);
|
|
}
|
|
|
|
// Assignment operator. Replaces the existing shared_ptr with ptr.
|
|
// Increment ptr's reference count and decrement the one being replaced.
|
|
template <typename U>
|
|
shared_ptr<T>& operator=(const shared_ptr<U>& ptr) {
|
|
if (ptr_ != ptr.ptr_) {
|
|
shared_ptr<T> me(ptr); // will hold our previous state to be destroyed.
|
|
swap(me);
|
|
}
|
|
return *this;
|
|
}
|
|
|
|
// Need non-templated version to prevent the compiler-generated default
|
|
shared_ptr<T>& operator=(const shared_ptr<T>& ptr) {
|
|
if (ptr_ != ptr.ptr_) {
|
|
shared_ptr<T> me(ptr); // will hold our previous state to be destroyed.
|
|
swap(me);
|
|
}
|
|
return *this;
|
|
}
|
|
|
|
~shared_ptr() {
|
|
if (ptr_ != NULL) {
|
|
if (!RefCountDec(&control_block_->refcount_)) {
|
|
delete ptr_;
|
|
}
|
|
}
|
|
}
|
|
|
|
// Replaces underlying raw pointer with the one passed in. The reference
|
|
// count is set to one (or zero if the pointer is NULL) for the pointer
|
|
// being passed in and decremented for the one being replaced.
|
|
//
|
|
// If you have a compilation error with this code, make sure you aren't
|
|
// passing NULL, nullptr, or 0 to this function. Call reset without an
|
|
// argument to reset to a null ptr.
|
|
template <typename Y>
|
|
void reset(Y* p) {
|
|
if (p != ptr_) {
|
|
shared_ptr<T> tmp(p);
|
|
tmp.swap(*this);
|
|
}
|
|
}
|
|
|
|
void reset() {
|
|
reset(static_cast<T*>(NULL));
|
|
}
|
|
|
|
// Exchanges the contents of this with the contents of r. This function
|
|
// supports more efficient swapping since it eliminates the need for a
|
|
// temporary shared_ptr object.
|
|
void swap(shared_ptr<T>& r) {
|
|
using std::swap; // http://go/using-std-swap
|
|
swap(ptr_, r.ptr_);
|
|
swap(control_block_, r.control_block_);
|
|
}
|
|
|
|
// The following function is useful for gaining access to the underlying
|
|
// pointer when a shared_ptr remains in scope so the reference-count is
|
|
// known to be > 0 (e.g. for parameter passing).
|
|
T* get() const {
|
|
return ptr_;
|
|
}
|
|
|
|
T& operator*() const {
|
|
return *ptr_;
|
|
}
|
|
|
|
T* operator->() const {
|
|
return ptr_;
|
|
}
|
|
|
|
long use_count() const {
|
|
return control_block_ ? control_block_->refcount_ : 1;
|
|
}
|
|
|
|
bool unique() const {
|
|
return use_count() == 1;
|
|
}
|
|
|
|
private:
|
|
// If r is non-empty, initialize *this to share ownership with r,
|
|
// increasing the underlying reference count.
|
|
// If r is empty, *this remains empty.
|
|
// Requires: this is empty, namely this->ptr_ == NULL.
|
|
template <typename U>
|
|
void Initialize(const shared_ptr<U>& r) {
|
|
// This performs a static_cast on r.ptr_ to U*, which is a no-op since it
|
|
// is already a U*. So initialization here requires that r.ptr_ is
|
|
// implicitly convertible to T*.
|
|
InitializeWithStaticCast<U>(r);
|
|
}
|
|
|
|
// Initializes *this as described in Initialize, but additionally performs a
|
|
// static_cast from r.ptr_ (V*) to U*.
|
|
// NOTE(gfc): We'd need a more general form to support const_pointer_cast and
|
|
// dynamic_pointer_cast, but those operations are sufficiently discouraged
|
|
// that supporting static_pointer_cast is sufficient.
|
|
template <typename U, typename V>
|
|
void InitializeWithStaticCast(const shared_ptr<V>& r) {
|
|
if (r.control_block_ != NULL) {
|
|
RefCountInc(&r.control_block_->refcount_);
|
|
|
|
ptr_ = static_cast<U*>(r.ptr_);
|
|
control_block_ = r.control_block_;
|
|
}
|
|
}
|
|
|
|
T* ptr_;
|
|
SharedPtrControlBlock* control_block_;
|
|
};
|
|
|
|
} // namespace wvcdm
|
|
|
|
#endif // WVCDM_CORE_SHARED_PTR_H__
|