Embeds the entitlements file in the binary in simulator builds.

build/config/ios/rules.gni

 # Copyright 2015 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/ios/ios_sdk.gni")
 import("//build/config/mac/base_rules.gni")
 import("//build/config/mac/symbols.gni")
 
 # Generates Info.plist files for Mac apps and frameworks.
 #
@@ skipping 133 matching lines @@
   # target has the same role as the "executable" target of a thin build.
   #
   # The rest of the build, including the codesigning step, are the same for
   # thin and fat builds.
 
   _is_fat_build = additional_toolchains != []
   if (_is_fat_build) {
     _is_fat_build_main_target = current_toolchain == default_toolchain
   }
 
+  _executable_extra_deps = []
+  _executable_extra_inputs = []
+  _executable_extra_ldflags = []
+
+  # Embeds the entitlements file if building for simulator. This is optional
+  # with Xcode 7 or older but required with Xcode 8. This is not necessary for
+  # device build as the entitlement is embedded via the codesigning step.
+  #
+  # As the generation of the entitlement depends on the
+  if (use_ios_simulator) {
+    _toolchain_suffix = ""
+    if (_is_fat_build && !_is_fat_build_main_target) {
+      _toolchain_suffix = "($default_toolchain)"
+    }
+
+    _generate_entitlements_target = _target_name + "_gen_entitlements"
+    _generate_entitlements_target_with_toolchain_suffix =
+        "$_generate_entitlements_target$_toolchain_suffix"
+
+    # TODO: the correct way to generate _generate_entitlements_output would
+    # be the following, but get_label_info() ignores the toolchain specifier
+    # so use a workaround.
+    #
+    # _generate_entitlements_output =
+    #     get_label_info(
+    #         _generate_entitlements_target_with_toolchain_suffix,
+    #         "target_gen_dir") +
+    #     "/$_output_name.xcent"
+    _generate_entitlements_output = "$root_build_dir/gen" + get_label_info(
+                                        _generate_entitlements_target,
+                                        "dir") + "/" + "$_output_name.xcent"
+
+    _executable_extra_inputs += [ _generate_entitlements_output ]
+    _executable_extra_deps +=
+        [ ":$_generate_entitlements_target_with_toolchain_suffix" ]
+    _executable_extra_ldflags += [
+      "-Xlinker",
+      "-sectcreate",
+      "-Xlinker",
+      "__TEXT",
+      "-Xlinker",
+      "__entitlements",
+      "-Xlinker",
+      rebase_path(_generate_entitlements_output, root_build_dir),
+    ]
+  }
+
   if (_is_fat_build && !_is_fat_build_main_target) {
     # For the non-default toolchain of a fat-build, the template expands to a
     # single "executable" target that creates "$root_out_dir/$_output_name".
     executable(_target_name) {
       forward_variables_from(invoker,
                              "*",
                              [
                                "bundle_deps",
                                "bundle_extension",
                                "extra_system_frameworks",
                                "entitlements_path",
                                "extra_substitutions",
                                "info_plist",
                                "info_plist_target",
                                "output_name",
                                "product_type",
                              ])
 
       if (defined(visibility)) {
         visibility += [ ":*($default_toolchain)" ]
       }
 
+      if (!defined(deps)) {
+        deps = []
+      }
+      deps += _executable_extra_deps
+
+      if (!defined(ldflags)) {
+        ldflags = []
+      }
+      ldflags += _executable_extra_ldflags
+
+      if (!defined(inputs)) {
+        inputs = []
+      }
+      inputs += _executable_extra_inputs
+
       output_name = _output_name
       if (!defined(libs)) {
         libs = []
       }
       libs += [ "UIKit.framework" ]
     }
   } else {
     # This is either a thin build or the default toolchain of a fat-build.
     # The template will expand in many different target ($target_name is the
     # create_bundle target) used as input to the create_bundle target.
     _generate_info_plist = target_name + "_generate_info_plist"
     _bundle_data_info_plist = target_name + "_bundle_data_info_plist"
 
+    if (use_ios_simulator || ios_enable_code_signing) {
+      if (defined(invoker.entitlements_path)) {
+        _entitlements_path = invoker.entitlements_path
+      } else {
+        if (use_ios_simulator) {
+          _entitlements_path = "//build/config/ios/entitlements.plist"
+        } else {
+          _entitlements_path = "$ios_sdk_path/Entitlements.plist"
+        }
+      }
+    }
+
     ios_info_plist(_generate_info_plist) {
       visibility = [ ":$_bundle_data_info_plist" ]
+      if (use_ios_simulator) {
+        visibility += [ ":$_generate_entitlements_target" ]
+      }
       executable_name = _output_name
       forward_variables_from(invoker,
                              [
                                "extra_substitutions",
                                "info_plist",
                                "info_plist_target",
                              ])
     }
 
     bundle_data(_bundle_data_info_plist) {
       visibility = [ ":$_target_name" ]
       forward_variables_from(invoker, [ "testonly" ])
       sources = get_target_outputs(":$_generate_info_plist")
       outputs = [
         "{{bundle_root_dir}}/Info.plist",
       ]
       public_deps = [
         ":$_generate_info_plist",
       ]
     }
 
+    if (use_ios_simulator) {
+      action(_generate_entitlements_target) {
+        _gen_info_plist_target = ":$_generate_info_plist"
+        _gen_info_plist_outputs = get_target_outputs(_gen_info_plist_target)
+        _info_plist_path = _gen_info_plist_outputs[0]
+
+        script = "//build/config/ios/codesign.py"
+        deps = [
+          _gen_info_plist_target,
+        ]
+        sources = [
+          _entitlements_path,
+          _info_plist_path,
+        ]
+        outputs = [
+          _generate_entitlements_output,
+        ]
+        args = [
+                 "-e=" + rebase_path(_entitlements_path, root_build_dir),
+                 "generate-entitlements",
+                 "-p=" + rebase_path(_info_plist_path, root_build_dir),
+               ] + rebase_path(outputs, root_build_dir)
+      }
+    }
+
     _link_executable = _target_name + "_executable"
 
     if (ios_enable_code_signing) {
       _link_executable_visibility = [ ":$_target_name" ]
     } else {
       _bundle_data_executable = target_name + "_bundle_data_executable"
       _link_executable_visibility = [ ":$_bundle_data_executable" ]
     }
 
     # For a fat-build, the different "executable" outputs will be used to
@@ skipping 29 matching lines @@
       visibility = _link_executable_visibility
 
       output_name = _output_name
       output_prefix_override = true
       if (_is_fat_build) {
         output_dir = "$target_out_dir/$current_cpu"
       } else {
         output_dir = target_out_dir
       }
 
+      if (!defined(deps)) {
+        deps = []
+      }
+      deps += _executable_extra_deps
+
+      if (!defined(ldflags)) {
+        ldflags = []
+      }
+      ldflags += _executable_extra_ldflags
+
+      if (!defined(inputs)) {
+        inputs = []
+      }
+      inputs += _executable_extra_inputs
+
       if (!defined(libs)) {
         libs = []
       }
       libs += [ "UIKit.framework" ]
     }
 
     if (_is_fat_build) {
       # Create the multi-architecture binary from all the single architecture
       # binaries using "lipo". This target exists for the default toolchain
       # of a fat-build only and depends on the expansion of "ios_app_bundle"
@@ skipping 145 matching lines @@
       } else {
         _bundle_extension = ".app"
       }
 
       bundle_root_dir = "$root_out_dir/$_output_name$_bundle_extension"
       bundle_resources_dir = bundle_root_dir
       bundle_executable_dir = bundle_root_dir
       bundle_plugins_dir = "$bundle_root_dir/PlugIns"
 
       if (ios_enable_code_signing) {
-        _entitlements_path = "$ios_sdk_path/Entitlements.plist"
-        if (defined(invoker.entitlements_path)) {
-          _entitlements_path = invoker.entitlements_path
-        }
-
         code_signing_script = "//build/config/ios/codesign.py"
         code_signing_sources = [
           _entitlements_path,
           "$target_out_dir/$_output_name",
         ]
         code_signing_outputs = [
           "$bundle_root_dir/$_output_name",
           "$bundle_root_dir/_CodeSignature/CodeResources",
           "$bundle_root_dir/embedded.mobileprovision",
         ]
         if (defined(invoker.extra_system_frameworks)) {
           foreach(_framework, invoker.extra_system_frameworks) {
             code_signing_outputs += [ "$bundle_root_dir/Frameworks/" +
                                       get_path_info(_framework, "name") ]
           }
         }
         code_signing_args = [
+          "-e=" + rebase_path(_entitlements_path, root_build_dir),
+          "code-sign-bundle",
           "-i=" + ios_code_signing_identity,
           "-b=" + rebase_path("$target_out_dir/$_output_name", root_build_dir),
-          "-e=" + rebase_path(_entitlements_path, root_build_dir),
           rebase_path(bundle_root_dir, root_build_dir),
         ]
         if (defined(invoker.extra_system_frameworks)) {
           # All framework in extra_system_frameworks are expected to be
           # system framework and the path to be already system absolute
           # so do not use rebase_path here.
           foreach(_framework, invoker.extra_system_frameworks) {
             code_signing_args += [ "-F=" + _framework ]
           }
         }
@@ skipping 678 matching lines @@
         code_signing_sources = [
           _entitlements_path,
           "$target_out_dir/$_xctest_output",
         ]
         code_signing_outputs = [
           "$bundle_root_dir/$_xctest_output",
           "$bundle_root_dir/_CodeSignature/CodeResources",
           "$bundle_root_dir/embedded.mobileprovision",
         ]
         code_signing_args = [
+          "-e=" + rebase_path(_entitlements_path, root_build_dir),
+          "code-sign-bundle",
           "-i=" + ios_code_signing_identity,
           "-b=" +
               rebase_path("$target_out_dir/$_xctest_output", root_build_dir),
-          "-e=" + rebase_path(_entitlements_path, root_build_dir),
           rebase_path(bundle_root_dir, root_build_dir),
         ]
       }
     }
 
     bundle_data(_xctest_bundle) {
       visibility = [ ":$_host_target" ]
       public_deps = [
         ":$_xctest_target",
       ]
@@ skipping 44 matching lines @@
       "-rpath",
       "-Xlinker",
       "@loader_path/Frameworks",
     ]
   }
 }
 
 set_defaults("ios_xctest_test") {
   configs = default_executable_configs
 }