michael@0: /* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
michael@0: /* vim: set sw=2 ts=8 et tw=80 : */
michael@0: 
michael@0: /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0:  * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0:  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0: 
michael@0: #include "necko-config.h"
michael@0: #include "nsHttp.h"
michael@0: #include "mozilla/net/NeckoParent.h"
michael@0: #include "mozilla/net/HttpChannelParent.h"
michael@0: #include "mozilla/net/CookieServiceParent.h"
michael@0: #include "mozilla/net/WyciwygChannelParent.h"
michael@0: #include "mozilla/net/FTPChannelParent.h"
michael@0: #include "mozilla/net/WebSocketChannelParent.h"
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0: #include "mozilla/net/RtspControllerParent.h"
michael@0: #include "mozilla/net/RtspChannelParent.h"
michael@0: #endif
michael@0: #include "mozilla/net/DNSRequestParent.h"
michael@0: #include "mozilla/net/RemoteOpenFileParent.h"
michael@0: #include "mozilla/net/ChannelDiverterParent.h"
michael@0: #include "mozilla/dom/ContentParent.h"
michael@0: #include "mozilla/dom/TabParent.h"
michael@0: #include "mozilla/dom/network/TCPSocketParent.h"
michael@0: #include "mozilla/dom/network/TCPServerSocketParent.h"
michael@0: #include "mozilla/dom/network/UDPSocketParent.h"
michael@0: #include "mozilla/ipc/URIUtils.h"
michael@0: #include "mozilla/LoadContext.h"
michael@0: #include "mozilla/AppProcessChecker.h"
michael@0: #include "nsPrintfCString.h"
michael@0: #include "nsHTMLDNSPrefetch.h"
michael@0: #include "nsIAppsService.h"
michael@0: #include "nsIUDPSocketFilter.h"
michael@0: #include "nsEscape.h"
michael@0: #include "RemoteOpenFileParent.h"
michael@0: #include "SerializedLoadContext.h"
michael@0: 
michael@0: using mozilla::dom::ContentParent;
michael@0: using mozilla::dom::TabParent;
michael@0: using mozilla::net::PTCPSocketParent;
michael@0: using mozilla::dom::TCPSocketParent;
michael@0: using mozilla::net::PTCPServerSocketParent;
michael@0: using mozilla::dom::TCPServerSocketParent;
michael@0: using mozilla::net::PUDPSocketParent;
michael@0: using mozilla::dom::UDPSocketParent;
michael@0: using IPC::SerializedLoadContext;
michael@0: 
michael@0: namespace mozilla {
michael@0: namespace net {
michael@0: 
michael@0: // C++ file contents
michael@0: NeckoParent::NeckoParent()
michael@0: {
michael@0:   // Init HTTP protocol handler now since we need atomTable up and running very
michael@0:   // early (IPDL argument handling for PHttpChannel constructor needs it) so
michael@0:   // normal init (during 1st Http channel request) isn't early enough.
michael@0:   nsCOMPtr<nsIProtocolHandler> proto =
michael@0:     do_GetService("@mozilla.org/network/protocol;1?name=http");
michael@0: 
michael@0:   if (UsingNeckoIPCSecurity()) {
michael@0:     // cache values for core/packaged apps basepaths
michael@0:     nsAutoString corePath, webPath;
michael@0:     nsCOMPtr<nsIAppsService> appsService = do_GetService(APPS_SERVICE_CONTRACTID);
michael@0:     if (appsService) {
michael@0:       appsService->GetCoreAppsBasePath(corePath);
michael@0:       appsService->GetWebAppsBasePath(webPath);
michael@0:     }
michael@0:     // corePath may be empty: we don't use it for all build types
michael@0:     MOZ_ASSERT(!webPath.IsEmpty());
michael@0: 
michael@0:     LossyCopyUTF16toASCII(corePath, mCoreAppsBasePath);
michael@0:     LossyCopyUTF16toASCII(webPath, mWebAppsBasePath);
michael@0:   }
michael@0: }
michael@0: 
michael@0: NeckoParent::~NeckoParent()
michael@0: {
michael@0: }
michael@0: 
michael@0: static PBOverrideStatus
michael@0: PBOverrideStatusFromLoadContext(const SerializedLoadContext& aSerialized)
michael@0: {
michael@0:   if (!aSerialized.IsNotNull() && aSerialized.IsPrivateBitValid()) {
michael@0:     return aSerialized.mUsePrivateBrowsing ?
michael@0:       kPBOverride_Private :
michael@0:       kPBOverride_NotPrivate;
michael@0:   }
michael@0:   return kPBOverride_Unset;
michael@0: }
michael@0: 
michael@0: const char*
michael@0: NeckoParent::GetValidatedAppInfo(const SerializedLoadContext& aSerialized,
michael@0:                                  PContentParent* aContent,
michael@0:                                  uint32_t* aAppId,
michael@0:                                  bool* aInBrowserElement)
michael@0: {
michael@0:   *aAppId = NECKO_UNKNOWN_APP_ID;
michael@0:   *aInBrowserElement = false;
michael@0: 
michael@0:   if (UsingNeckoIPCSecurity()) {
michael@0:     if (!aSerialized.IsNotNull()) {
michael@0:       return "SerializedLoadContext from child is null";
michael@0:     }
michael@0:   }
michael@0: 
michael@0:   const InfallibleTArray<PBrowserParent*>& browsers = aContent->ManagedPBrowserParent();
michael@0:   for (uint32_t i = 0; i < browsers.Length(); i++) {
michael@0:     nsRefPtr<TabParent> tabParent = static_cast<TabParent*>(browsers[i]);
michael@0:     uint32_t appId = tabParent->OwnOrContainingAppId();
michael@0:     bool inBrowserElement = aSerialized.IsNotNull() ? aSerialized.mIsInBrowserElement
michael@0:                                                     : tabParent->IsBrowserElement();
michael@0: 
michael@0:     if (appId == NECKO_UNKNOWN_APP_ID) {
michael@0:       continue;
michael@0:     }
michael@0:     // We may get appID=NO_APP if child frame is neither a browser nor an app
michael@0:     if (appId == NECKO_NO_APP_ID) {
michael@0:       if (tabParent->HasOwnApp()) {
michael@0:         continue;
michael@0:       }
michael@0:       if (UsingNeckoIPCSecurity() && tabParent->IsBrowserElement()) {
michael@0:         // <iframe mozbrowser> which doesn't have an <iframe mozapp> above it.
michael@0:         // This is not supported now, and we'll need to do a code audit to make
michael@0:         // sure we can handle it (i.e don't short-circuit using separate
michael@0:         // namespace if just appID==0)
michael@0:         continue;
michael@0:       }
michael@0:     }
michael@0:     *aAppId = appId;
michael@0:     *aInBrowserElement = inBrowserElement;
michael@0:     return nullptr;
michael@0:   }
michael@0: 
michael@0:   if (browsers.Length() != 0) {
michael@0:     return "App does not have permission";
michael@0:   }
michael@0: 
michael@0:   if (!UsingNeckoIPCSecurity()) {
michael@0:     // We are running xpcshell tests
michael@0:     if (aSerialized.IsNotNull()) {
michael@0:       *aAppId = aSerialized.mAppId;
michael@0:       *aInBrowserElement = aSerialized.mIsInBrowserElement;
michael@0:     } else {
michael@0:       *aAppId = NECKO_NO_APP_ID;
michael@0:     }
michael@0:     return nullptr;
michael@0:   }
michael@0: 
michael@0:   return "ContentParent does not have any PBrowsers";
michael@0: }
michael@0: 
michael@0: const char *
michael@0: NeckoParent::CreateChannelLoadContext(PBrowserParent* aBrowser,
michael@0:                                       PContentParent* aContent,
michael@0:                                       const SerializedLoadContext& aSerialized,
michael@0:                                       nsCOMPtr<nsILoadContext> &aResult)
michael@0: {
michael@0:   uint32_t appId = NECKO_UNKNOWN_APP_ID;
michael@0:   bool inBrowser = false;
michael@0:   dom::Element* topFrameElement = nullptr;
michael@0:   const char* error = GetValidatedAppInfo(aSerialized, aContent, &appId, &inBrowser);
michael@0:   if (error) {
michael@0:     return error;
michael@0:   }
michael@0: 
michael@0:   if (aBrowser) {
michael@0:     nsRefPtr<TabParent> tabParent = static_cast<TabParent*>(aBrowser);
michael@0:     topFrameElement = tabParent->GetOwnerElement();
michael@0:   }
michael@0: 
michael@0:   // if !UsingNeckoIPCSecurity(), we may not have a LoadContext to set. This is
michael@0:   // the common case for most xpcshell tests.
michael@0:   if (aSerialized.IsNotNull()) {
michael@0:     aResult = new LoadContext(aSerialized, topFrameElement, appId, inBrowser);
michael@0:   }
michael@0: 
michael@0:   return nullptr;
michael@0: }
michael@0: 
michael@0: PHttpChannelParent*
michael@0: NeckoParent::AllocPHttpChannelParent(PBrowserParent* aBrowser,
michael@0:                                      const SerializedLoadContext& aSerialized,
michael@0:                                      const HttpChannelCreationArgs& aOpenArgs)
michael@0: {
michael@0:   nsCOMPtr<nsILoadContext> loadContext;
michael@0:   const char *error = CreateChannelLoadContext(aBrowser, Manager(),
michael@0:                                                aSerialized, loadContext);
michael@0:   if (error) {
michael@0:     printf_stderr("NeckoParent::AllocPHttpChannelParent: "
michael@0:                   "FATAL error: %s: KILLING CHILD PROCESS\n",
michael@0:                   error);
michael@0:     return nullptr;
michael@0:   }
michael@0:   PBOverrideStatus overrideStatus = PBOverrideStatusFromLoadContext(aSerialized);
michael@0:   HttpChannelParent *p = new HttpChannelParent(aBrowser, loadContext, overrideStatus);
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPHttpChannelParent(PHttpChannelParent* channel)
michael@0: {
michael@0:   HttpChannelParent *p = static_cast<HttpChannelParent *>(channel);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPHttpChannelConstructor(
michael@0:                       PHttpChannelParent* aActor,
michael@0:                       PBrowserParent* aBrowser,
michael@0:                       const SerializedLoadContext& aSerialized,
michael@0:                       const HttpChannelCreationArgs& aOpenArgs)
michael@0: {
michael@0:   HttpChannelParent* p = static_cast<HttpChannelParent*>(aActor);
michael@0:   return p->Init(aOpenArgs);
michael@0: }
michael@0: 
michael@0: PFTPChannelParent*
michael@0: NeckoParent::AllocPFTPChannelParent(PBrowserParent* aBrowser,
michael@0:                                     const SerializedLoadContext& aSerialized,
michael@0:                                     const FTPChannelCreationArgs& aOpenArgs)
michael@0: {
michael@0:   nsCOMPtr<nsILoadContext> loadContext;
michael@0:   const char *error = CreateChannelLoadContext(aBrowser, Manager(),
michael@0:                                                aSerialized, loadContext);
michael@0:   if (error) {
michael@0:     printf_stderr("NeckoParent::AllocPFTPChannelParent: "
michael@0:                   "FATAL error: %s: KILLING CHILD PROCESS\n",
michael@0:                   error);
michael@0:     return nullptr;
michael@0:   }
michael@0:   PBOverrideStatus overrideStatus = PBOverrideStatusFromLoadContext(aSerialized);
michael@0:   FTPChannelParent *p = new FTPChannelParent(loadContext, overrideStatus);
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPFTPChannelParent(PFTPChannelParent* channel)
michael@0: {
michael@0:   FTPChannelParent *p = static_cast<FTPChannelParent *>(channel);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPFTPChannelConstructor(
michael@0:                       PFTPChannelParent* aActor,
michael@0:                       PBrowserParent* aBrowser,
michael@0:                       const SerializedLoadContext& aSerialized,
michael@0:                       const FTPChannelCreationArgs& aOpenArgs)
michael@0: {
michael@0:   FTPChannelParent* p = static_cast<FTPChannelParent*>(aActor);
michael@0:   return p->Init(aOpenArgs);
michael@0: }
michael@0: 
michael@0: PCookieServiceParent*
michael@0: NeckoParent::AllocPCookieServiceParent()
michael@0: {
michael@0:   return new CookieServiceParent();
michael@0: }
michael@0: 
michael@0: bool 
michael@0: NeckoParent::DeallocPCookieServiceParent(PCookieServiceParent* cs)
michael@0: {
michael@0:   delete cs;
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PWyciwygChannelParent*
michael@0: NeckoParent::AllocPWyciwygChannelParent()
michael@0: {
michael@0:   WyciwygChannelParent *p = new WyciwygChannelParent();
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPWyciwygChannelParent(PWyciwygChannelParent* channel)
michael@0: {
michael@0:   WyciwygChannelParent *p = static_cast<WyciwygChannelParent *>(channel);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PWebSocketParent*
michael@0: NeckoParent::AllocPWebSocketParent(PBrowserParent* browser,
michael@0:                                    const SerializedLoadContext& serialized)
michael@0: {
michael@0:   nsCOMPtr<nsILoadContext> loadContext;
michael@0:   const char *error = CreateChannelLoadContext(browser, Manager(),
michael@0:                                                serialized, loadContext);
michael@0:   if (error) {
michael@0:     printf_stderr("NeckoParent::AllocPWebSocketParent: "
michael@0:                   "FATAL error: %s: KILLING CHILD PROCESS\n",
michael@0:                   error);
michael@0:     return nullptr;
michael@0:   }
michael@0: 
michael@0:   TabParent* tabParent = static_cast<TabParent*>(browser);
michael@0:   PBOverrideStatus overrideStatus = PBOverrideStatusFromLoadContext(serialized);
michael@0:   WebSocketChannelParent* p = new WebSocketChannelParent(tabParent, loadContext,
michael@0:                                                          overrideStatus);
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPWebSocketParent(PWebSocketParent* actor)
michael@0: {
michael@0:   WebSocketChannelParent* p = static_cast<WebSocketChannelParent*>(actor);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PRtspControllerParent*
michael@0: NeckoParent::AllocPRtspControllerParent()
michael@0: {
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0:   RtspControllerParent* p = new RtspControllerParent();
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: #else
michael@0:   return nullptr;
michael@0: #endif
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPRtspControllerParent(PRtspControllerParent* actor)
michael@0: {
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0:   RtspControllerParent* p = static_cast<RtspControllerParent*>(actor);
michael@0:   p->Release();
michael@0: #endif
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PRtspChannelParent*
michael@0: NeckoParent::AllocPRtspChannelParent(const RtspChannelConnectArgs& aArgs)
michael@0: {
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0:   nsCOMPtr<nsIURI> uri = DeserializeURI(aArgs.uri());
michael@0:   RtspChannelParent *p = new RtspChannelParent(uri);
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: #else
michael@0:   return nullptr;
michael@0: #endif
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPRtspChannelConstructor(
michael@0:                       PRtspChannelParent* aActor,
michael@0:                       const RtspChannelConnectArgs& aConnectArgs)
michael@0: {
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0:   RtspChannelParent* p = static_cast<RtspChannelParent*>(aActor);
michael@0:   return p->Init(aConnectArgs);
michael@0: #else
michael@0:   return nullptr;
michael@0: #endif
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPRtspChannelParent(PRtspChannelParent* actor)
michael@0: {
michael@0: #ifdef NECKO_PROTOCOL_rtsp
michael@0:   RtspChannelParent* p = static_cast<RtspChannelParent*>(actor);
michael@0:   p->Release();
michael@0: #endif
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PTCPSocketParent*
michael@0: NeckoParent::AllocPTCPSocketParent()
michael@0: {
michael@0:   TCPSocketParent* p = new TCPSocketParent();
michael@0:   p->AddIPDLReference();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPTCPSocketParent(PTCPSocketParent* actor)
michael@0: {
michael@0:   TCPSocketParent* p = static_cast<TCPSocketParent*>(actor);
michael@0:   p->ReleaseIPDLReference();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PTCPServerSocketParent*
michael@0: NeckoParent::AllocPTCPServerSocketParent(const uint16_t& aLocalPort,
michael@0:                                    const uint16_t& aBacklog,
michael@0:                                    const nsString& aBinaryType)
michael@0: {
michael@0:   TCPServerSocketParent* p = new TCPServerSocketParent();
michael@0:   p->AddIPDLReference();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPTCPServerSocketConstructor(PTCPServerSocketParent* aActor,
michael@0:                                              const uint16_t& aLocalPort,
michael@0:                                              const uint16_t& aBacklog,
michael@0:                                              const nsString& aBinaryType)
michael@0: {
michael@0:   return static_cast<TCPServerSocketParent*>(aActor)->
michael@0:       Init(this, aLocalPort, aBacklog, aBinaryType);
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPTCPServerSocketParent(PTCPServerSocketParent* actor)
michael@0: {
michael@0:   TCPServerSocketParent* p = static_cast<TCPServerSocketParent*>(actor);
michael@0:    p->ReleaseIPDLReference();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PUDPSocketParent*
michael@0: NeckoParent::AllocPUDPSocketParent(const nsCString& aHost,
michael@0:                                    const uint16_t& aPort,
michael@0:                                    const nsCString& aFilter)
michael@0: {
michael@0:   UDPSocketParent* p = nullptr;
michael@0: 
michael@0:   // Only allow socket if it specifies a valid packet filter.
michael@0:   nsAutoCString contractId(NS_NETWORK_UDP_SOCKET_FILTER_HANDLER_PREFIX);
michael@0:   contractId.Append(aFilter);
michael@0: 
michael@0:   if (!aFilter.IsEmpty()) {
michael@0:     nsCOMPtr<nsIUDPSocketFilterHandler> filterHandler =
michael@0:       do_GetService(contractId.get());
michael@0:     if (filterHandler) {
michael@0:       nsCOMPtr<nsIUDPSocketFilter> filter;
michael@0:       nsresult rv = filterHandler->NewFilter(getter_AddRefs(filter));
michael@0:       if (NS_SUCCEEDED(rv)) {
michael@0:         p = new UDPSocketParent(filter);
michael@0:       } else {
michael@0:         printf_stderr("Cannot create filter that content specified. "
michael@0:                       "filter name: %s, error code: %d.", aFilter.get(), rv);
michael@0:       }
michael@0:     } else {
michael@0:       printf_stderr("Content doesn't have a valid filter. "
michael@0:                     "filter name: %s.", aFilter.get());
michael@0:     }
michael@0:   }
michael@0: 
michael@0:   NS_IF_ADDREF(p);
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPUDPSocketConstructor(PUDPSocketParent* aActor,
michael@0:                                        const nsCString& aHost,
michael@0:                                        const uint16_t& aPort,
michael@0:                                        const nsCString& aFilter)
michael@0: {
michael@0:   return static_cast<UDPSocketParent*>(aActor)->Init(aHost, aPort);
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPUDPSocketParent(PUDPSocketParent* actor)
michael@0: {
michael@0:   UDPSocketParent* p = static_cast<UDPSocketParent*>(actor);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PDNSRequestParent*
michael@0: NeckoParent::AllocPDNSRequestParent(const nsCString& aHost,
michael@0:                                     const uint32_t& aFlags)
michael@0: {
michael@0:   DNSRequestParent *p = new DNSRequestParent();
michael@0:   p->AddRef();
michael@0:   return p;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPDNSRequestConstructor(PDNSRequestParent* aActor,
michael@0:                                         const nsCString& aHost,
michael@0:                                         const uint32_t& aFlags)
michael@0: {
michael@0:   static_cast<DNSRequestParent*>(aActor)->DoAsyncResolve(aHost, aFlags);
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPDNSRequestParent(PDNSRequestParent* aParent)
michael@0: {
michael@0:   DNSRequestParent *p = static_cast<DNSRequestParent*>(aParent);
michael@0:   p->Release();
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PRemoteOpenFileParent*
michael@0: NeckoParent::AllocPRemoteOpenFileParent(const URIParams& aURI,
michael@0:                                         const OptionalURIParams& aAppURI)
michael@0: {
michael@0:   nsCOMPtr<nsIURI> uri = DeserializeURI(aURI);
michael@0:   nsCOMPtr<nsIFileURL> fileURL = do_QueryInterface(uri);
michael@0:   if (!fileURL) {
michael@0:     return nullptr;
michael@0:   }
michael@0: 
michael@0:   // security checks
michael@0:   if (UsingNeckoIPCSecurity()) {
michael@0:     nsCOMPtr<nsIAppsService> appsService =
michael@0:       do_GetService(APPS_SERVICE_CONTRACTID);
michael@0:     if (!appsService) {
michael@0:       return nullptr;
michael@0:     }
michael@0:     bool haveValidBrowser = false;
michael@0:     bool hasManage = false;
michael@0:     nsCOMPtr<mozIApplication> mozApp;
michael@0:     for (uint32_t i = 0; i < Manager()->ManagedPBrowserParent().Length(); i++) {
michael@0:       nsRefPtr<TabParent> tabParent =
michael@0:         static_cast<TabParent*>(Manager()->ManagedPBrowserParent()[i]);
michael@0:       uint32_t appId = tabParent->OwnOrContainingAppId();
michael@0:       nsresult rv = appsService->GetAppByLocalId(appId, getter_AddRefs(mozApp));
michael@0:       if (NS_FAILED(rv) || !mozApp) {
michael@0:         continue;
michael@0:       }
michael@0:       hasManage = false;
michael@0:       rv = mozApp->HasPermission("webapps-manage", &hasManage);
michael@0:       if (NS_FAILED(rv)) {
michael@0:         continue;
michael@0:       }
michael@0:       haveValidBrowser = true;
michael@0:       break;
michael@0:     }
michael@0: 
michael@0:     if (!haveValidBrowser) {
michael@0:       return nullptr;
michael@0:     }
michael@0: 
michael@0:     nsAutoCString requestedPath;
michael@0:     fileURL->GetPath(requestedPath);
michael@0:     NS_UnescapeURL(requestedPath);
michael@0: 
michael@0:     // Check if we load the whitelisted app uri for the neterror page.
michael@0:     bool netErrorWhiteList = false;
michael@0: 
michael@0:     nsCOMPtr<nsIURI> appUri = DeserializeURI(aAppURI);
michael@0:     if (appUri) {
michael@0:       nsAdoptingString netErrorURI;
michael@0:       netErrorURI = Preferences::GetString("b2g.neterror.url");
michael@0:       if (netErrorURI) {
michael@0:         nsAutoCString spec;
michael@0:         appUri->GetSpec(spec);
michael@0:         netErrorWhiteList = spec.Equals(NS_ConvertUTF16toUTF8(netErrorURI).get());
michael@0:       }
michael@0:     }
michael@0: 
michael@0:     if (hasManage || netErrorWhiteList) {
michael@0:       // webapps-manage permission means allow reading any application.zip file
michael@0:       // in either the regular webapps directory, or the core apps directory (if
michael@0:       // we're using one).
michael@0:       NS_NAMED_LITERAL_CSTRING(appzip, "/application.zip");
michael@0:       nsAutoCString pathEnd;
michael@0:       requestedPath.Right(pathEnd, appzip.Length());
michael@0:       if (!pathEnd.Equals(appzip)) {
michael@0:         return nullptr;
michael@0:       }
michael@0:       nsAutoCString pathStart;
michael@0:       requestedPath.Left(pathStart, mWebAppsBasePath.Length());
michael@0:       if (!pathStart.Equals(mWebAppsBasePath)) {
michael@0:         if (mCoreAppsBasePath.IsEmpty()) {
michael@0:           return nullptr;
michael@0:         }
michael@0:         requestedPath.Left(pathStart, mCoreAppsBasePath.Length());
michael@0:         if (!pathStart.Equals(mCoreAppsBasePath)) {
michael@0:           return nullptr;
michael@0:         }
michael@0:       }
michael@0:       // Finally: make sure there are no "../" in URI.
michael@0:       // Note: not checking for symlinks (would cause I/O for each path
michael@0:       // component).  So it's up to us to avoid creating symlinks that could
michael@0:       // provide attack vectors.
michael@0:       if (PL_strnstr(requestedPath.BeginReading(), "/../",
michael@0:                      requestedPath.Length())) {
michael@0:         printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
michael@0:                       "FATAL error: requested file URI '%s' contains '/../' "
michael@0:                       "KILLING CHILD PROCESS\n", requestedPath.get());
michael@0:         return nullptr;
michael@0:       }
michael@0:     } else {
michael@0:       // regular packaged apps can only access their own application.zip file
michael@0:       nsAutoString basePath;
michael@0:       nsresult rv = mozApp->GetBasePath(basePath);
michael@0:       if (NS_FAILED(rv)) {
michael@0:         return nullptr;
michael@0:       }
michael@0:       nsAutoString uuid;
michael@0:       rv = mozApp->GetId(uuid);
michael@0:       if (NS_FAILED(rv)) {
michael@0:         return nullptr;
michael@0:       }
michael@0:       nsPrintfCString mustMatch("%s/%s/application.zip",
michael@0:                                 NS_LossyConvertUTF16toASCII(basePath).get(),
michael@0:                                 NS_LossyConvertUTF16toASCII(uuid).get());
michael@0:       if (!requestedPath.Equals(mustMatch)) {
michael@0:         printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
michael@0:                       "FATAL error: app without webapps-manage permission is "
michael@0:                       "requesting file '%s' but is only allowed to open its "
michael@0:                       "own application.zip at %s: KILLING CHILD PROCESS\n",
michael@0:                       requestedPath.get(), mustMatch.get());
michael@0:         return nullptr;
michael@0:       }
michael@0:     }
michael@0:   }
michael@0: 
michael@0:   RemoteOpenFileParent* parent = new RemoteOpenFileParent(fileURL);
michael@0:   return parent;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPRemoteOpenFileConstructor(PRemoteOpenFileParent* aActor,
michael@0:                                             const URIParams& aFileURI,
michael@0:                                             const OptionalURIParams& aAppURI)
michael@0: {
michael@0:   return static_cast<RemoteOpenFileParent*>(aActor)->OpenSendCloseDelete();
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPRemoteOpenFileParent(PRemoteOpenFileParent* actor)
michael@0: {
michael@0:   delete actor;
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvHTMLDNSPrefetch(const nsString& hostname,
michael@0:                                  const uint16_t& flags)
michael@0: {
michael@0:   nsHTMLDNSPrefetch::Prefetch(hostname, flags);
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvCancelHTMLDNSPrefetch(const nsString& hostname,
michael@0:                                  const uint16_t& flags,
michael@0:                                  const nsresult& reason)
michael@0: {
michael@0:   nsHTMLDNSPrefetch::CancelPrefetch(hostname, flags, reason);
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: PChannelDiverterParent*
michael@0: NeckoParent::AllocPChannelDiverterParent(const ChannelDiverterArgs& channel)
michael@0: {
michael@0:   return new ChannelDiverterParent();
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::RecvPChannelDiverterConstructor(PChannelDiverterParent* actor,
michael@0:                                              const ChannelDiverterArgs& channel)
michael@0: {
michael@0:   auto parent = static_cast<ChannelDiverterParent*>(actor);
michael@0:   parent->Init(channel);
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: bool
michael@0: NeckoParent::DeallocPChannelDiverterParent(PChannelDiverterParent* parent)
michael@0: {
michael@0:   delete static_cast<ChannelDiverterParent*>(parent);
michael@0:   return true;
michael@0: }
michael@0: 
michael@0: void
michael@0: NeckoParent::CloneManagees(ProtocolBase* aSource,
michael@0:                          mozilla::ipc::ProtocolCloneContext* aCtx)
michael@0: {
michael@0:   aCtx->SetNeckoParent(this); // For cloning protocols managed by this.
michael@0:   PNeckoParent::CloneManagees(aSource, aCtx);
michael@0: }
michael@0: 
michael@0: mozilla::ipc::IProtocol*
michael@0: NeckoParent::CloneProtocol(Channel* aChannel,
michael@0:                            mozilla::ipc::ProtocolCloneContext* aCtx)
michael@0: {
michael@0:   ContentParent* contentParent = aCtx->GetContentParent();
michael@0:   nsAutoPtr<PNeckoParent> actor(contentParent->AllocPNeckoParent());
michael@0:   if (!actor || !contentParent->RecvPNeckoConstructor(actor)) {
michael@0:     return nullptr;
michael@0:   }
michael@0:   return actor.forget();
michael@0: }
michael@0: 
michael@0: }} // mozilla::net