| OLD | NEW |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/utility/media_galleries/pmp_column_reader.h" | 5 #include "chrome/utility/media_galleries/pmp_column_reader.h" |
| 6 | 6 |
| 7 #include <stddef.h> |
| 7 #include <stdint.h> | 8 #include <stdint.h> |
| 8 | 9 |
| 9 #include <cstring> | 10 #include <cstring> |
| 10 #include <limits> | 11 #include <limits> |
| 11 | 12 |
| 12 #include "base/files/file.h" | 13 #include "base/files/file.h" |
| 13 #include "base/files/file_util.h" | 14 #include "base/files/file_util.h" |
| 14 #include "base/logging.h" | 15 #include "base/logging.h" |
| 15 #include "base/threading/thread_restrictions.h" | 16 #include "base/threading/thread_restrictions.h" |
| 16 | 17 |
| 17 namespace picasa { | 18 namespace picasa { |
| 18 | 19 |
| 19 namespace { | 20 namespace { |
| 20 | 21 |
| 21 static_assert(sizeof(double) == 8, "double must be 8 bytes long"); | 22 static_assert(sizeof(double) == 8, "double must be 8 bytes long"); |
| 22 const int64 kPmpMaxFilesize = 50*1024*1024; // Arbitrary maximum of 50 MB. | 23 const int64_t kPmpMaxFilesize = |
| 24 50 * 1024 * 1024; // Arbitrary maximum of 50 MB. |
| 23 | 25 |
| 24 } // namespace | 26 } // namespace |
| 25 | 27 |
| 26 PmpColumnReader::PmpColumnReader() | 28 PmpColumnReader::PmpColumnReader() |
| 27 : length_(0), | 29 : length_(0), |
| 28 field_type_(PMP_TYPE_INVALID), | 30 field_type_(PMP_TYPE_INVALID), |
| 29 rows_read_(0) {} | 31 rows_read_(0) {} |
| 30 | 32 |
| 31 PmpColumnReader::~PmpColumnReader() {} | 33 PmpColumnReader::~PmpColumnReader() {} |
| 32 | 34 |
| 33 bool PmpColumnReader::ReadFile(base::File* file, | 35 bool PmpColumnReader::ReadFile(base::File* file, |
| 34 const PmpFieldType expected_type) { | 36 const PmpFieldType expected_type) { |
| 35 DCHECK(!data_.get()); | 37 DCHECK(!data_.get()); |
| 36 base::ThreadRestrictions::AssertIOAllowed(); | 38 base::ThreadRestrictions::AssertIOAllowed(); |
| 37 | 39 |
| 38 if (!file->IsValid()) | 40 if (!file->IsValid()) |
| 39 return false; | 41 return false; |
| 40 | 42 |
| 41 base::File::Info info; | 43 base::File::Info info; |
| 42 if (!file->GetInfo(&info)) | 44 if (!file->GetInfo(&info)) |
| 43 return false; | 45 return false; |
| 44 length_ = info.size; | 46 length_ = info.size; |
| 45 | 47 |
| 46 if (length_ < kPmpHeaderSize || length_ > kPmpMaxFilesize) | 48 if (length_ < kPmpHeaderSize || length_ > kPmpMaxFilesize) |
| 47 return false; | 49 return false; |
| 48 | 50 |
| 49 data_.reset(new uint8[length_]); | 51 data_.reset(new uint8_t[length_]); |
| 50 | 52 |
| 51 char* data_begin = reinterpret_cast<char*>(data_.get()); | 53 char* data_begin = reinterpret_cast<char*>(data_.get()); |
| 52 | 54 |
| 53 DCHECK(length_ < | 55 DCHECK(length_ < |
| 54 std::numeric_limits<int32_t>::max()); // ReadFile expects an int. | 56 std::numeric_limits<int32_t>::max()); // ReadFile expects an int. |
| 55 | 57 |
| 56 bool success = file->Read(0, data_begin, length_) && | 58 bool success = file->Read(0, data_begin, length_) && |
| 57 ParseData(expected_type); | 59 ParseData(expected_type); |
| 58 | 60 |
| 59 // If any of the reading or parsing fails, prevent Read* calls. | 61 // If any of the reading or parsing fails, prevent Read* calls. |
| 60 if (!success) | 62 if (!success) |
| 61 rows_read_ = 0; | 63 rows_read_ = 0; |
| 62 | 64 |
| 63 return success; | 65 return success; |
| 64 } | 66 } |
| 65 | 67 |
| 66 bool PmpColumnReader::ReadString(const uint32 row, std::string* result) const { | 68 bool PmpColumnReader::ReadString(const uint32_t row, |
| 69 std::string* result) const { |
| 67 DCHECK(data_.get() != NULL); | 70 DCHECK(data_.get() != NULL); |
| 68 | 71 |
| 69 if (field_type_ != PMP_TYPE_STRING || row >= rows_read_) | 72 if (field_type_ != PMP_TYPE_STRING || row >= rows_read_) |
| 70 return false; | 73 return false; |
| 71 | 74 |
| 72 DCHECK_LT(row, strings_.size()); | 75 DCHECK_LT(row, strings_.size()); |
| 73 *result = strings_[row]; | 76 *result = strings_[row]; |
| 74 return true; | 77 return true; |
| 75 } | 78 } |
| 76 | 79 |
| 77 bool PmpColumnReader::ReadUInt32(const uint32 row, uint32* result) const { | 80 bool PmpColumnReader::ReadUInt32(const uint32_t row, uint32_t* result) const { |
| 78 DCHECK(data_.get() != NULL); | 81 DCHECK(data_.get() != NULL); |
| 79 | 82 |
| 80 if (field_type_ != PMP_TYPE_UINT32 || row >= rows_read_) | 83 if (field_type_ != PMP_TYPE_UINT32 || row >= rows_read_) |
| 81 return false; | 84 return false; |
| 82 | 85 |
| 83 *result = reinterpret_cast<uint32*>(data_.get() + kPmpHeaderSize)[row]; | 86 *result = reinterpret_cast<uint32_t*>(data_.get() + kPmpHeaderSize)[row]; |
| 84 return true; | 87 return true; |
| 85 } | 88 } |
| 86 | 89 |
| 87 bool PmpColumnReader::ReadDouble64(const uint32 row, double* result) const { | 90 bool PmpColumnReader::ReadDouble64(const uint32_t row, double* result) const { |
| 88 DCHECK(data_.get() != NULL); | 91 DCHECK(data_.get() != NULL); |
| 89 | 92 |
| 90 if (field_type_ != PMP_TYPE_DOUBLE64 || row >= rows_read_) | 93 if (field_type_ != PMP_TYPE_DOUBLE64 || row >= rows_read_) |
| 91 return false; | 94 return false; |
| 92 | 95 |
| 93 *result = reinterpret_cast<double*>(data_.get() + kPmpHeaderSize)[row]; | 96 *result = reinterpret_cast<double*>(data_.get() + kPmpHeaderSize)[row]; |
| 94 return true; | 97 return true; |
| 95 } | 98 } |
| 96 | 99 |
| 97 bool PmpColumnReader::ReadUInt8(const uint32 row, uint8* result) const { | 100 bool PmpColumnReader::ReadUInt8(const uint32_t row, uint8_t* result) const { |
| 98 DCHECK(data_.get() != NULL); | 101 DCHECK(data_.get() != NULL); |
| 99 | 102 |
| 100 if (field_type_ != PMP_TYPE_UINT8 || row >= rows_read_) | 103 if (field_type_ != PMP_TYPE_UINT8 || row >= rows_read_) |
| 101 return false; | 104 return false; |
| 102 | 105 |
| 103 *result = reinterpret_cast<uint8*>(data_.get() + kPmpHeaderSize)[row]; | 106 *result = reinterpret_cast<uint8_t*>(data_.get() + kPmpHeaderSize)[row]; |
| 104 return true; | 107 return true; |
| 105 } | 108 } |
| 106 | 109 |
| 107 bool PmpColumnReader::ReadUInt64(const uint32 row, uint64* result) const { | 110 bool PmpColumnReader::ReadUInt64(const uint32_t row, uint64_t* result) const { |
| 108 DCHECK(data_.get() != NULL); | 111 DCHECK(data_.get() != NULL); |
| 109 | 112 |
| 110 if (field_type_ != PMP_TYPE_UINT64 || row >= rows_read_) | 113 if (field_type_ != PMP_TYPE_UINT64 || row >= rows_read_) |
| 111 return false; | 114 return false; |
| 112 | 115 |
| 113 *result = reinterpret_cast<uint64*>(data_.get() + kPmpHeaderSize)[row]; | 116 *result = reinterpret_cast<uint64_t*>(data_.get() + kPmpHeaderSize)[row]; |
| 114 return true; | 117 return true; |
| 115 } | 118 } |
| 116 | 119 |
| 117 uint32 PmpColumnReader::rows_read() const { | 120 uint32_t PmpColumnReader::rows_read() const { |
| 118 DCHECK(data_.get() != NULL); | 121 DCHECK(data_.get() != NULL); |
| 119 return rows_read_; | 122 return rows_read_; |
| 120 } | 123 } |
| 121 | 124 |
| 122 bool PmpColumnReader::ParseData(const PmpFieldType expected_type) { | 125 bool PmpColumnReader::ParseData(const PmpFieldType expected_type) { |
| 123 DCHECK(data_.get() != NULL); | 126 DCHECK(data_.get() != NULL); |
| 124 DCHECK_GE(length_, kPmpHeaderSize); | 127 DCHECK_GE(length_, kPmpHeaderSize); |
| 125 | 128 |
| 126 // Check all magic bytes. | 129 // Check all magic bytes. |
| 127 if (memcmp(&kPmpMagic1, &data_[kPmpMagic1Offset], sizeof(kPmpMagic1)) != 0 || | 130 if (memcmp(&kPmpMagic1, &data_[kPmpMagic1Offset], sizeof(kPmpMagic1)) != 0 || |
| 128 memcmp(&kPmpMagic2, &data_[kPmpMagic2Offset], sizeof(kPmpMagic2)) != 0 || | 131 memcmp(&kPmpMagic2, &data_[kPmpMagic2Offset], sizeof(kPmpMagic2)) != 0 || |
| 129 memcmp(&kPmpMagic3, &data_[kPmpMagic3Offset], sizeof(kPmpMagic3)) != 0 || | 132 memcmp(&kPmpMagic3, &data_[kPmpMagic3Offset], sizeof(kPmpMagic3)) != 0 || |
| 130 memcmp(&kPmpMagic4, &data_[kPmpMagic4Offset], sizeof(kPmpMagic4)) != 0) { | 133 memcmp(&kPmpMagic4, &data_[kPmpMagic4Offset], sizeof(kPmpMagic4)) != 0) { |
| 131 return false; | 134 return false; |
| 132 } | 135 } |
| 133 | 136 |
| 134 uint16 field_type_data = | 137 uint16_t field_type_data = |
| 135 *(reinterpret_cast<uint16*>(&data_[kPmpFieldType1Offset])); | 138 *(reinterpret_cast<uint16_t*>(&data_[kPmpFieldType1Offset])); |
| 136 | 139 |
| 137 // Verify if field type matches second declaration | 140 // Verify if field type matches second declaration |
| 138 if (field_type_data != | 141 if (field_type_data != |
| 139 *(reinterpret_cast<uint16*>(&data_[kPmpFieldType2Offset]))) { | 142 *(reinterpret_cast<uint16_t*>(&data_[kPmpFieldType2Offset]))) { |
| 140 return false; | 143 return false; |
| 141 } | 144 } |
| 142 | 145 |
| 143 field_type_ = static_cast<PmpFieldType>(field_type_data); | 146 field_type_ = static_cast<PmpFieldType>(field_type_data); |
| 144 | 147 |
| 145 if (field_type_ != expected_type) | 148 if (field_type_ != expected_type) |
| 146 return false; | 149 return false; |
| 147 | 150 |
| 148 rows_read_ = *(reinterpret_cast<uint32*>(&data_[kPmpRowCountOffset])); | 151 rows_read_ = *(reinterpret_cast<uint32_t*>(&data_[kPmpRowCountOffset])); |
| 149 | 152 |
| 150 // Sanity check against malicious row field. | 153 // Sanity check against malicious row field. |
| 151 if (rows_read_ > (kPmpMaxFilesize - kPmpHeaderSize)) | 154 if (rows_read_ > (kPmpMaxFilesize - kPmpHeaderSize)) |
| 152 return false; | 155 return false; |
| 153 | 156 |
| 154 DCHECK_GE(length_, kPmpHeaderSize); | 157 DCHECK_GE(length_, kPmpHeaderSize); |
| 155 int64 body_length = length_ - kPmpHeaderSize; | 158 int64_t body_length = length_ - kPmpHeaderSize; |
| 156 int64 expected_body_length = 0; | 159 int64_t expected_body_length = 0; |
| 157 switch (field_type_) { | 160 switch (field_type_) { |
| 158 case PMP_TYPE_STRING: | 161 case PMP_TYPE_STRING: |
| 159 expected_body_length = IndexStrings(); | 162 expected_body_length = IndexStrings(); |
| 160 break; | 163 break; |
| 161 case PMP_TYPE_UINT32: | 164 case PMP_TYPE_UINT32: |
| 162 expected_body_length = static_cast<int64>(rows_read_) * sizeof(uint32); | 165 expected_body_length = |
| 166 static_cast<int64_t>(rows_read_) * sizeof(uint32_t); |
| 163 break; | 167 break; |
| 164 case PMP_TYPE_DOUBLE64: | 168 case PMP_TYPE_DOUBLE64: |
| 165 expected_body_length = static_cast<int64>(rows_read_) * sizeof(double); | 169 expected_body_length = static_cast<int64_t>(rows_read_) * sizeof(double); |
| 166 break; | 170 break; |
| 167 case PMP_TYPE_UINT8: | 171 case PMP_TYPE_UINT8: |
| 168 expected_body_length = static_cast<int64>(rows_read_) * sizeof(uint8); | 172 expected_body_length = static_cast<int64_t>(rows_read_) * sizeof(uint8_t); |
| 169 break; | 173 break; |
| 170 case PMP_TYPE_UINT64: | 174 case PMP_TYPE_UINT64: |
| 171 expected_body_length = static_cast<int64>(rows_read_) * sizeof(uint64); | 175 expected_body_length = |
| 176 static_cast<int64_t>(rows_read_) * sizeof(uint64_t); |
| 172 break; | 177 break; |
| 173 default: | 178 default: |
| 174 return false; | 179 return false; |
| 175 break; | 180 break; |
| 176 } | 181 } |
| 177 | 182 |
| 178 return body_length == expected_body_length; | 183 return body_length == expected_body_length; |
| 179 } | 184 } |
| 180 | 185 |
| 181 int64 PmpColumnReader::IndexStrings() { | 186 int64_t PmpColumnReader::IndexStrings() { |
| 182 DCHECK(data_.get() != NULL); | 187 DCHECK(data_.get() != NULL); |
| 183 DCHECK_GE(length_, kPmpHeaderSize); | 188 DCHECK_GE(length_, kPmpHeaderSize); |
| 184 | 189 |
| 185 strings_.reserve(rows_read_); | 190 strings_.reserve(rows_read_); |
| 186 | 191 |
| 187 int64 bytes_parsed = kPmpHeaderSize; | 192 int64_t bytes_parsed = kPmpHeaderSize; |
| 188 const uint8* data_cursor = data_.get() + kPmpHeaderSize; | 193 const uint8_t* data_cursor = data_.get() + kPmpHeaderSize; |
| 189 | 194 |
| 190 while (strings_.size() < rows_read_) { | 195 while (strings_.size() < rows_read_) { |
| 191 const uint8* string_end = static_cast<const uint8*>( | 196 const uint8_t* string_end = static_cast<const uint8_t*>( |
| 192 memchr(data_cursor, '\0', length_ - bytes_parsed)); | 197 memchr(data_cursor, '\0', length_ - bytes_parsed)); |
| 193 | 198 |
| 194 // Fail if cannot find null termination. String runs on past file end. | 199 // Fail if cannot find null termination. String runs on past file end. |
| 195 if (string_end == NULL) | 200 if (string_end == NULL) |
| 196 return -1; | 201 return -1; |
| 197 | 202 |
| 198 // Length of string. (+1 to include the termination character). | 203 // Length of string. (+1 to include the termination character). |
| 199 ptrdiff_t length_in_bytes = string_end - data_cursor + 1; | 204 ptrdiff_t length_in_bytes = string_end - data_cursor + 1; |
| 200 | 205 |
| 201 strings_.push_back(reinterpret_cast<const char*>(data_cursor)); | 206 strings_.push_back(reinterpret_cast<const char*>(data_cursor)); |
| 202 data_cursor += length_in_bytes; | 207 data_cursor += length_in_bytes; |
| 203 bytes_parsed += length_in_bytes; | 208 bytes_parsed += length_in_bytes; |
| 204 } | 209 } |
| 205 | 210 |
| 206 return bytes_parsed - kPmpHeaderSize; | 211 return bytes_parsed - kPmpHeaderSize; |
| 207 } | 212 } |
| 208 | 213 |
| 209 } // namespace picasa | 214 } // namespace picasa |
| OLD | NEW |