Index: chrome/common/plugin_group.cc |
diff --git a/chrome/common/plugin_group.cc b/chrome/common/plugin_group.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..984aebc2b7a025a1fc32f04a800949bfa2911489 |
--- /dev/null |
+++ b/chrome/common/plugin_group.cc |
@@ -0,0 +1,295 @@ |
+// Copyright (c) 2010 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "chrome/common/plugin_group.h" |
+ |
+#include "base/string_util.h" |
+#include "base/utf_string_conversions.h" |
+#include "base/values.h" |
+#include "base/version.h" |
+#include "webkit/glue/plugins/plugin_list.h" |
+ |
+#if defined(OS_MACOSX) |
+// Plugin Groups for Mac. |
+// Plugins are listed here as soon as vulnerabilities and solutions |
+// (new versions) are published. |
+// TODO(panayiotis): Track Java as soon as it's supported on Chrome Mac. |
+// TODO(panayiotis): Get the Real Player version on Mac, somehow. |
+static const PluginGroupDefinition kGroupDefinitions[] = { |
+ { "Quicktime", "QuickTime Plug-in", "", "", "7.6.6", |
+ "http://www.apple.com/quicktime/download/" }, |
+ { "Flash", "Shockwave Flash", "", "", "10.1.53", |
+ "http://get.adobe.com/flashplayer/" }, |
+ { "Silverlight 3", "Silverlight", "0", "4", "3.0.50106.0", |
+ "http://go.microsoft.com/fwlink/?LinkID=185927" }, |
+ { "Silverlight 4", "Silverlight", "4", "5", "", |
+ "http://go.microsoft.com/fwlink/?LinkID=185927" }, |
+ { "Flip4Mac", "Flip4Mac", "", "", "2.2.1", |
+ "http://www.telestream.net/flip4mac-wmv/overview.htm" }, |
+ { "Shockwave", "Shockwave for Director", "", "", "11.5.7.609", |
+ "http://www.adobe.com/shockwave/download/" } |
+}; |
+ |
+#elif defined(OS_WIN) |
+// TODO(panayiotis): We should group "RealJukebox NS Plugin" with the rest of |
+// the RealPlayer files. |
+static const PluginGroupDefinition kGroupDefinitions[] = { |
+ { "Quicktime", "QuickTime Plug-in", "", "", "7.6.6", |
+ "http://www.apple.com/quicktime/download/" }, |
+ { "Java 6", "Java", "", "6", "6.0.200", |
+ "http://www.java.com/" }, |
+ { "Adobe Reader 9", "Adobe Acrobat", "9", "10", "9.3.3", |
+ "http://get.adobe.com/reader/" }, |
+ { "Adobe Reader 8", "Adobe Acrobat", "0", "9", "8.2.3", |
+ "http://get.adobe.com/reader/" }, |
+ { "Flash", "Shockwave Flash", "", "", "10.1.53", |
+ "http://get.adobe.com/flashplayer/" }, |
+ { "Silverlight 3", "Silverlight", "0", "4", "3.0.50106.0", |
+ "http://go.microsoft.com/fwlink/?LinkID=185927" }, |
+ { "Silverlight 4", "Silverlight", "4", "5", "", |
+ "http://go.microsoft.com/fwlink/?LinkID=185927" }, |
+ { "Shockwave", "Shockwave for Director", "", "", "11.5.7.609", |
+ "http://www.adobe.com/shockwave/download/" }, |
+ { "DivX Player", "DivX Web Player", "", "", "1.4.3.4", |
+ "http://download.divx.com/divx/autoupdate/player/DivXWebPlayerInstaller.exe" }, |
+ // These are here for grouping, no vulnerabilies known. |
+ { "Windows Media Player", "Windows Media Player", "", "", "", "" }, |
+ { "Microsoft Office", "Microsoft Office", "", "", "", "" }, |
+ // TODO(panayiotis): The vulnerable versions are |
+ // (v >= 6.0.12.1040 && v <= 6.0.12.1663) |
+ // || v == 6.0.12.1698 || v == 6.0.12.1741 |
+ { "RealPlayer", "RealPlayer", "", "", "", |
+ "http://www.adobe.com/shockwave/download/" }, |
+}; |
+ |
+#else |
+static const PluginGroupDefinition kGroupDefinitions[] = {}; |
+#endif |
+ |
+/*static*/ |
+const PluginGroupDefinition* PluginGroup::GetPluginGroupDefinitions() { |
+ return kGroupDefinitions; |
+} |
+ |
+/*static*/ |
+size_t PluginGroup::GetPluginGroupDefinitionsSize() { |
+ // TODO(viettrungluu): |arraysize()| doesn't work with zero-size arrays. |
+ return ARRAYSIZE_UNSAFE(kGroupDefinitions); |
+} |
+ |
+PluginGroup::PluginGroup(const string16& group_name, |
+ const string16& name_matcher, |
+ const std::string& version_range_low, |
+ const std::string& version_range_high, |
+ const std::string& min_version, |
+ const std::string& update_url) { |
+ group_name_ = group_name; |
+ name_matcher_ = name_matcher; |
+ version_range_low_str_ = version_range_low; |
+ if (!version_range_low.empty()) { |
+ version_range_low_.reset( |
+ Version::GetVersionFromString(version_range_low)); |
+ } |
+ version_range_high_str_ = version_range_high; |
+ if (!version_range_high.empty()) { |
+ version_range_high_.reset( |
+ Version::GetVersionFromString(version_range_high)); |
+ } |
+ min_version_str_ = min_version; |
+ if (!min_version.empty()) { |
+ min_version_.reset(Version::GetVersionFromString(min_version)); |
+ } |
+ update_url_ = update_url; |
+ enabled_ = false; |
+ max_version_.reset(Version::GetVersionFromString("0")); |
+} |
+ |
+PluginGroup* PluginGroup::FromPluginGroupDefinition( |
+ const PluginGroupDefinition& definition) { |
+ return new PluginGroup(ASCIIToUTF16(definition.name), |
+ ASCIIToUTF16(definition.name_matcher), |
+ definition.version_matcher_low, |
+ definition.version_matcher_high, |
+ definition.min_version, |
+ definition.update_url); |
+} |
+ |
+PluginGroup* PluginGroup::FromWebPluginInfo(const WebPluginInfo& wpi) { |
+ // Create a matcher from the name of this plugin. |
+ return new PluginGroup(wpi.name, wpi.name, |
+ "", "", "", ""); |
+} |
+ |
+PluginGroup* PluginGroup::FindHardcodedPluginGroup(const WebPluginInfo& info) { |
+ static std::vector<linked_ptr<PluginGroup> >* hardcoded_plugin_groups = NULL; |
+ if (!hardcoded_plugin_groups) { |
+ std::vector<linked_ptr<PluginGroup> >* groups = |
+ new std::vector<linked_ptr<PluginGroup> >(); |
+ const PluginGroupDefinition* definitions = GetPluginGroupDefinitions(); |
+ for (size_t i = 0; i < GetPluginGroupDefinitionsSize(); ++i) { |
+ PluginGroup* definition_group = PluginGroup::FromPluginGroupDefinition( |
+ definitions[i]); |
+ groups->push_back(linked_ptr<PluginGroup>(definition_group)); |
+ } |
+ hardcoded_plugin_groups = groups; |
+ } |
+ |
+ // See if this plugin matches any of the hardcoded groups. |
+ PluginGroup* hardcoded_group = FindGroupMatchingPlugin( |
+ *hardcoded_plugin_groups, info); |
+ if (hardcoded_group) { |
+ // Make a copy. |
+ return hardcoded_group->Copy(); |
+ } else { |
+ // Not found in our hardcoded list, create a new one. |
+ return PluginGroup::FromWebPluginInfo(info); |
+ } |
+} |
+ |
+PluginGroup* PluginGroup::FindGroupMatchingPlugin( |
+ std::vector<linked_ptr<PluginGroup> >& plugin_groups, |
+ const WebPluginInfo& plugin) { |
+ for (std::vector<linked_ptr<PluginGroup> >::iterator it = |
+ plugin_groups.begin(); |
+ it != plugin_groups.end(); |
+ ++it) { |
+ if ((*it)->Match(plugin)) { |
+ return it->get(); |
+ } |
+ } |
+ return NULL; |
+} |
+ |
+bool PluginGroup::Match(const WebPluginInfo& plugin) const { |
+ if (name_matcher_.empty()) { |
+ return false; |
+ } |
+ |
+ // Look for the name matcher anywhere in the plugin name. |
+ if (plugin.name.find(name_matcher_) == string16::npos) { |
+ return false; |
+ } |
+ |
+ if (version_range_low_.get() == NULL || |
+ version_range_high_.get() == NULL) { |
+ return true; |
+ } |
+ |
+ // There's a version range, we must be in it. |
+ scoped_ptr<Version> plugin_version( |
+ Version::GetVersionFromString(UTF16ToWide(plugin.version))); |
+ if (plugin_version.get() == NULL) { |
+ // No version could be extracted, assume we don't match the range. |
+ return false; |
+ } |
+ |
+ // We match if we are in the range: [low, high) |
+ return (version_range_low_->CompareTo(*plugin_version) <= 0 && |
+ version_range_high_->CompareTo(*plugin_version) > 0); |
+} |
+ |
+void PluginGroup::AddPlugin(const WebPluginInfo& plugin, int position) { |
+ web_plugin_infos_.push_back(plugin); |
+ // The position of this plugin relative to the global list of plugins. |
+ web_plugin_positions_.push_back(position); |
+ description_ = plugin.desc; |
+ |
+ // A group is enabled if any of the files are enabled. |
+ if (plugin.enabled) { |
+ enabled_ = true; |
+ } |
+ |
+ // update max_version_. Remove spaces and ')' from the version string, |
+ // Replace any instances of 'r', ',' or '(' with a dot. |
+ std::wstring version = UTF16ToWide(plugin.version); |
+ RemoveChars(version, L") ", &version); |
+ std::replace(version.begin(), version.end(), 'r', '.'); |
+ std::replace(version.begin(), version.end(), ',', '.'); |
+ std::replace(version.begin(), version.end(), '(', '.'); |
+ |
+ scoped_ptr<Version> plugin_version( |
+ Version::GetVersionFromString(version)); |
+ if (plugin_version.get() != NULL) { |
+ if (plugin_version->CompareTo(*(max_version_)) > 0) { |
+ max_version_.reset(plugin_version.release()); |
+ } |
+ } |
+} |
+ |
+DictionaryValue* PluginGroup::GetSummary() const { |
+ DictionaryValue* result = new DictionaryValue(); |
+ result->SetStringFromUTF16(L"name", group_name_); |
+ result->SetBoolean(L"enabled", enabled_); |
+ return result; |
+} |
+ |
+DictionaryValue* PluginGroup::GetDataForUI() const { |
+ DictionaryValue* result = new DictionaryValue(); |
+ result->SetStringFromUTF16(L"name", group_name_); |
+ result->SetStringFromUTF16(L"description", description_); |
+ result->SetString(L"version", max_version_->GetString()); |
+ result->SetString(L"update_url", update_url_); |
+ result->SetBoolean(L"critical", IsVulnerable()); |
+ result->SetBoolean(L"enabled", enabled_); |
+ |
+ ListValue* plugin_files = new ListValue(); |
+ for (size_t i = 0; i < web_plugin_infos_.size(); ++i) { |
+ const WebPluginInfo& web_plugin = web_plugin_infos_[i]; |
+ int priority = web_plugin_positions_[i]; |
+ DictionaryValue* plugin_file = new DictionaryValue(); |
+ plugin_file->SetStringFromUTF16(L"name", web_plugin.name); |
+ plugin_file->SetStringFromUTF16(L"description", web_plugin.desc); |
+ plugin_file->SetString(L"path", web_plugin.path.value()); |
+ plugin_file->SetStringFromUTF16(L"version", web_plugin.version); |
+ plugin_file->SetBoolean(L"enabled", web_plugin.enabled); |
+ plugin_file->SetInteger(L"priority", priority); |
+ |
+ ListValue* mime_types = new ListValue(); |
+ for (std::vector<WebPluginMimeType>::const_iterator type_it = |
+ web_plugin.mime_types.begin(); |
+ type_it != web_plugin.mime_types.end(); |
+ ++type_it) { |
+ DictionaryValue* mime_type = new DictionaryValue(); |
+ mime_type->SetString(L"mimeType", type_it->mime_type); |
+ mime_type->SetStringFromUTF16(L"description", type_it->description); |
+ |
+ ListValue* file_extensions = new ListValue(); |
+ for (std::vector<std::string>::const_iterator ext_it = |
+ type_it->file_extensions.begin(); |
+ ext_it != type_it->file_extensions.end(); |
+ ++ext_it) { |
+ file_extensions->Append(new StringValue(*ext_it)); |
+ } |
+ mime_type->Set(L"fileExtensions", file_extensions); |
+ |
+ mime_types->Append(mime_type); |
+ } |
+ plugin_file->Set(L"mimeTypes", mime_types); |
+ |
+ plugin_files->Append(plugin_file); |
+ } |
+ result->Set(L"plugin_files", plugin_files); |
+ |
+ return result; |
+} |
+ |
+// Returns true if the latest version of this plugin group is vulnerable. |
+bool PluginGroup::IsVulnerable() const { |
+ if (min_version_.get() == NULL || max_version_->GetString() == "0") { |
+ return false; |
+ } |
+ return max_version_->CompareTo(*min_version_) < 0; |
+} |
+ |
+void PluginGroup::Enable(bool enable) { |
+ for (std::vector<WebPluginInfo>::const_iterator it = |
+ web_plugin_infos_.begin(); |
+ it != web_plugin_infos_.end(); ++it) { |
+ if (enable) { |
+ NPAPI::PluginList::Singleton()->EnablePlugin(FilePath(it->path)); |
+ } else { |
+ NPAPI::PluginList::Singleton()->DisablePlugin(FilePath(it->path)); |
+ } |
+ } |
+} |