// Copyright (c) 2012 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "chrome/common/extensions/unpacker.h" #include #include "base/file_util.h" #include "base/files/scoped_temp_dir.h" #include "base/i18n/rtl.h" #include "base/json/json_file_value_serializer.h" #include "base/memory/scoped_handle.h" #include "base/string_util.h" #include "base/threading/thread.h" #include "base/utf_string_conversions.h" #include "base/values.h" #include "chrome/common/extensions/api/i18n/default_locale_handler.h" #include "chrome/common/extensions/extension.h" #include "chrome/common/extensions/extension_file_util.h" #include "chrome/common/extensions/extension_l10n_util.h" #include "chrome/common/extensions/extension_manifest_constants.h" #include "chrome/common/extensions/manifest.h" #include "chrome/common/url_constants.h" #include "chrome/common/zip.h" #include "content/public/common/common_param_traits.h" #include "grit/generated_resources.h" #include "ipc/ipc_message_utils.h" #include "net/base/file_stream.h" #include "third_party/skia/include/core/SkBitmap.h" #include "ui/base/l10n/l10n_util.h" #include "webkit/glue/image_decoder.h" namespace errors = extension_manifest_errors; namespace keys = extension_manifest_keys; namespace filenames = extension_filenames; namespace { // A limit to stop us passing dangerously large canvases to the browser. const int kMaxImageCanvas = 4096 * 4096; SkBitmap DecodeImage(const base::FilePath& path) { // Read the file from disk. std::string file_contents; if (!file_util::PathExists(path) || !file_util::ReadFileToString(path, &file_contents)) { return SkBitmap(); } // Decode the image using WebKit's image decoder. const unsigned char* data = reinterpret_cast(file_contents.data()); webkit_glue::ImageDecoder decoder; SkBitmap bitmap = decoder.Decode(data, file_contents.length()); Sk64 bitmap_size = bitmap.getSize64(); if (!bitmap_size.is32() || bitmap_size.get32() > kMaxImageCanvas) return SkBitmap(); return bitmap; } bool PathContainsParentDirectory(const base::FilePath& path) { const base::FilePath::StringType kSeparators(base::FilePath::kSeparators); const base::FilePath::StringType kParentDirectory( base::FilePath::kParentDirectory); const size_t npos = base::FilePath::StringType::npos; const base::FilePath::StringType& value = path.value(); for (size_t i = 0; i < value.length(); ) { i = value.find(kParentDirectory, i); if (i != npos) { if ((i == 0 || kSeparators.find(value[i-1]) == npos) && (i+1 < value.length() || kSeparators.find(value[i+1]) == npos)) { return true; } ++i; } } return false; } } // namespace namespace extensions { Unpacker::Unpacker(const base::FilePath& extension_path, const std::string& extension_id, Manifest::Location location, int creation_flags) : extension_path_(extension_path), extension_id_(extension_id), location_(location), creation_flags_(creation_flags) { } Unpacker::~Unpacker() { } DictionaryValue* Unpacker::ReadManifest() { base::FilePath manifest_path = temp_install_dir_.Append(Extension::kManifestFilename); if (!file_util::PathExists(manifest_path)) { SetError(errors::kInvalidManifest); return NULL; } JSONFileValueSerializer serializer(manifest_path); std::string error; scoped_ptr root(serializer.Deserialize(NULL, &error)); if (!root.get()) { SetError(error); return NULL; } if (!root->IsType(Value::TYPE_DICTIONARY)) { SetError(errors::kInvalidManifest); return NULL; } return static_cast(root.release()); } bool Unpacker::ReadAllMessageCatalogs(const std::string& default_locale) { base::FilePath locales_path = temp_install_dir_.Append(Extension::kLocaleFolder); // Not all folders under _locales have to be valid locales. file_util::FileEnumerator locales(locales_path, false, file_util::FileEnumerator::DIRECTORIES); std::set all_locales; extension_l10n_util::GetAllLocales(&all_locales); base::FilePath locale_path; while (!(locale_path = locales.Next()).empty()) { if (extension_l10n_util::ShouldSkipValidation(locales_path, locale_path, all_locales)) continue; base::FilePath messages_path = locale_path.Append(Extension::kMessagesFilename); if (!ReadMessageCatalog(messages_path)) return false; } return true; } bool Unpacker::Run() { DVLOG(1) << "Installing extension " << extension_path_.value(); // /Extensions/CRX_INSTALL temp_install_dir_ = extension_path_.DirName().AppendASCII(filenames::kTempExtensionName); if (!file_util::CreateDirectory(temp_install_dir_)) { SetUTF16Error( l10n_util::GetStringFUTF16( IDS_EXTENSION_PACKAGE_DIRECTORY_ERROR, base::i18n::GetDisplayStringInLTRDirectionality( temp_install_dir_.LossyDisplayName()))); return false; } if (!zip::Unzip(extension_path_, temp_install_dir_)) { SetUTF16Error(l10n_util::GetStringUTF16(IDS_EXTENSION_PACKAGE_UNZIP_ERROR)); return false; } // Parse the manifest. parsed_manifest_.reset(ReadManifest()); if (!parsed_manifest_.get()) return false; // Error was already reported. std::string error; scoped_refptr extension(Extension::Create( temp_install_dir_, location_, *parsed_manifest_, creation_flags_, extension_id_, &error)); if (!extension.get()) { SetError(error); return false; } std::vector warnings; if (!extension_file_util::ValidateExtension(extension.get(), &error, &warnings)) { SetError(error); return false; } extension->AddInstallWarnings(warnings); // Decode any images that the browser needs to display. std::set image_paths = extension->GetBrowserImages(); for (std::set::iterator it = image_paths.begin(); it != image_paths.end(); ++it) { if (!AddDecodedImage(*it)) return false; // Error was already reported. } // Parse all message catalogs (if any). parsed_catalogs_.reset(new DictionaryValue); if (!LocaleInfo::GetDefaultLocale(extension).empty()) { if (!ReadAllMessageCatalogs(LocaleInfo::GetDefaultLocale(extension))) return false; // Error was already reported. } return true; } bool Unpacker::DumpImagesToFile() { IPC::Message pickle; // We use a Message so we can use WriteParam. IPC::WriteParam(&pickle, decoded_images_); base::FilePath path = extension_path_.DirName().AppendASCII( filenames::kDecodedImagesFilename); if (!file_util::WriteFile(path, static_cast(pickle.data()), pickle.size())) { SetError("Could not write image data to disk."); return false; } return true; } bool Unpacker::DumpMessageCatalogsToFile() { IPC::Message pickle; IPC::WriteParam(&pickle, *parsed_catalogs_.get()); base::FilePath path = extension_path_.DirName().AppendASCII( filenames::kDecodedMessageCatalogsFilename); if (!file_util::WriteFile(path, static_cast(pickle.data()), pickle.size())) { SetError("Could not write message catalogs to disk."); return false; } return true; } // static bool Unpacker::ReadImagesFromFile(const base::FilePath& extension_path, DecodedImages* images) { base::FilePath path = extension_path.AppendASCII(filenames::kDecodedImagesFilename); std::string file_str; if (!file_util::ReadFileToString(path, &file_str)) return false; IPC::Message pickle(file_str.data(), file_str.size()); PickleIterator iter(pickle); return IPC::ReadParam(&pickle, &iter, images); } // static bool Unpacker::ReadMessageCatalogsFromFile(const base::FilePath& extension_path, DictionaryValue* catalogs) { base::FilePath path = extension_path.AppendASCII( filenames::kDecodedMessageCatalogsFilename); std::string file_str; if (!file_util::ReadFileToString(path, &file_str)) return false; IPC::Message pickle(file_str.data(), file_str.size()); PickleIterator iter(pickle); return IPC::ReadParam(&pickle, &iter, catalogs); } bool Unpacker::AddDecodedImage(const base::FilePath& path) { // Make sure it's not referencing a file outside the extension's subdir. if (path.IsAbsolute() || PathContainsParentDirectory(path)) { SetUTF16Error( l10n_util::GetStringFUTF16( IDS_EXTENSION_PACKAGE_IMAGE_PATH_ERROR, base::i18n::GetDisplayStringInLTRDirectionality( path.LossyDisplayName()))); return false; } SkBitmap image_bitmap = DecodeImage(temp_install_dir_.Append(path)); if (image_bitmap.isNull()) { SetUTF16Error( l10n_util::GetStringFUTF16( IDS_EXTENSION_PACKAGE_IMAGE_ERROR, base::i18n::GetDisplayStringInLTRDirectionality( path.BaseName().LossyDisplayName()))); return false; } decoded_images_.push_back(MakeTuple(image_bitmap, path)); return true; } bool Unpacker::ReadMessageCatalog(const base::FilePath& message_path) { std::string error; JSONFileValueSerializer serializer(message_path); scoped_ptr root( static_cast(serializer.Deserialize(NULL, &error))); if (!root.get()) { string16 messages_file = message_path.LossyDisplayName(); if (error.empty()) { // If file is missing, Deserialize will fail with empty error. SetError(base::StringPrintf("%s %s", errors::kLocalesMessagesFileMissing, UTF16ToUTF8(messages_file).c_str())); } else { SetError(base::StringPrintf("%s: %s", UTF16ToUTF8(messages_file).c_str(), error.c_str())); } return false; } base::FilePath relative_path; // message_path was created from temp_install_dir. This should never fail. if (!temp_install_dir_.AppendRelativePath(message_path, &relative_path)) { NOTREACHED(); return false; } std::string dir_name = relative_path.DirName().MaybeAsASCII(); if (dir_name.empty()) { NOTREACHED(); return false; } parsed_catalogs_->Set(dir_name, root.release()); return true; } void Unpacker::SetError(const std::string &error) { SetUTF16Error(UTF8ToUTF16(error)); } void Unpacker::SetUTF16Error(const string16 &error) { error_message_ = error; } } // namespace extensions