OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_COMPONENT_UPDATER_COMPONENT_UNPACKER_H_ | |
6 #define CHROME_BROWSER_COMPONENT_UPDATER_COMPONENT_UNPACKER_H_ | |
7 | |
8 #include <string> | |
9 #include <vector> | |
10 | |
11 #include "base/basictypes.h" | |
12 #include "base/callback.h" | |
13 #include "base/files/file_path.h" | |
14 #include "base/json/json_file_value_serializer.h" | |
15 #include "base/memory/ref_counted.h" | |
16 #include "base/memory/scoped_ptr.h" | |
17 #include "base/sequenced_task_runner.h" | |
18 | |
19 namespace component_updater { | |
20 | |
21 class ComponentInstaller; | |
22 class ComponentPatcher; | |
23 class OutOfProcessPatcher; | |
24 | |
25 // Deserializes the CRX manifest. The top level must be a dictionary. | |
26 scoped_ptr<base::DictionaryValue> ReadManifest( | |
27 const base::FilePath& unpack_path); | |
28 | |
29 // In charge of unpacking the component CRX package and verifying that it is | |
30 // well formed and the cryptographic signature is correct. If there is no | |
31 // error the component specific installer will be invoked to proceed with | |
32 // the component installation or update. | |
33 // | |
34 // This class should be used only by the component updater. It is inspired by | |
35 // and overlaps with code in the extension's SandboxedUnpacker. | |
36 // The main differences are: | |
37 // - The public key hash is full SHA256. | |
38 // - Does not use a sandboxed unpacker. A valid component is fully trusted. | |
39 // - The manifest can have different attributes and resources are not | |
40 // transcoded. | |
41 // | |
42 // If the CRX is a delta CRX, the flow is: | |
43 // [ComponentUpdater] [ComponentPatcher] | |
44 // Unpack | |
45 // \_ Verify | |
46 // \_ Unzip | |
47 // \_ BeginPatching ---> DifferentialUpdatePatch | |
48 // ... | |
49 // EndPatching <------------ ... | |
50 // \_ Install | |
51 // \_ Finish | |
52 // | |
53 // For a full CRX, the flow is: | |
54 // [ComponentUpdater] | |
55 // Unpack | |
56 // \_ Verify | |
57 // \_ Unzip | |
58 // \_ BeginPatching | |
59 // | | |
60 // V | |
61 // EndPatching | |
62 // \_ Install | |
63 // \_ Finish | |
64 // | |
65 // In both cases, if there is an error at any point, the remaining steps will | |
66 // be skipped and Finish will be called. | |
67 class ComponentUnpacker : public base::RefCountedThreadSafe<ComponentUnpacker> { | |
68 public: | |
69 // Possible error conditions. | |
70 // Add only to the bottom of this enum; the order must be kept stable. | |
71 enum Error { | |
72 kNone, | |
73 kInvalidParams, | |
74 kInvalidFile, | |
75 kUnzipPathError, | |
76 kUnzipFailed, | |
77 kNoManifest, | |
78 kBadManifest, | |
79 kBadExtension, | |
80 kInvalidId, | |
81 kInstallerError, | |
82 kIoError, | |
83 kDeltaVerificationFailure, | |
84 kDeltaBadCommands, | |
85 kDeltaUnsupportedCommand, | |
86 kDeltaOperationFailure, | |
87 kDeltaPatchProcessFailure, | |
88 kDeltaMissingExistingFile, | |
89 kFingerprintWriteFailed, | |
90 }; | |
91 | |
92 typedef base::Callback<void(Error, int)> Callback; | |
93 | |
94 // Constructs an unpacker for a specific component unpacking operation. | |
95 // |pk_hash| is the expected/ public key SHA256 hash. |path| is the current | |
96 // location of the CRX. | |
97 ComponentUnpacker(const std::vector<uint8>& pk_hash, | |
98 const base::FilePath& path, | |
99 const std::string& fingerprint, | |
100 ComponentInstaller* installer, | |
101 scoped_refptr<OutOfProcessPatcher> out_of_process_patcher, | |
102 scoped_refptr<base::SequencedTaskRunner> task_runner); | |
103 | |
104 // Begins the actual unpacking of the files. May invoke a patcher if the | |
105 // package is a differential update. Calls |callback| with the result. | |
106 void Unpack(const Callback& callback); | |
107 | |
108 private: | |
109 friend class base::RefCountedThreadSafe<ComponentUnpacker>; | |
110 | |
111 virtual ~ComponentUnpacker(); | |
112 | |
113 bool UnpackInternal(); | |
114 | |
115 // The first step of unpacking is to verify the file. Returns false if an | |
116 // error is encountered, the file is malformed, or the file is incorrectly | |
117 // signed. | |
118 bool Verify(); | |
119 | |
120 // The second step of unpacking is to unzip. Returns false if an error | |
121 // occurs as part of unzipping. | |
122 bool Unzip(); | |
123 | |
124 // The third step is to optionally patch files - this is a no-op for full | |
125 // (non-differential) updates. This step is asynchronous. Returns false if an | |
126 // error is encountered. | |
127 bool BeginPatching(); | |
128 | |
129 // When patching is complete, EndPatching is called before moving on to step | |
130 // four. | |
131 void EndPatching(Error error, int extended_error); | |
132 | |
133 // The fourth step is to install the unpacked component. | |
134 void Install(); | |
135 | |
136 // The final step is to do clean-up for things that can't be tidied as we go. | |
137 // If there is an error at any step, the remaining steps are skipped and | |
138 // and Finish is called. | |
139 // Finish is responsible for calling the callback provided in Start(). | |
140 void Finish(); | |
141 | |
142 std::vector<uint8> pk_hash_; | |
143 base::FilePath path_; | |
144 base::FilePath unpack_path_; | |
145 base::FilePath unpack_diff_path_; | |
146 bool is_delta_; | |
147 std::string fingerprint_; | |
148 scoped_refptr<ComponentPatcher> patcher_; | |
149 ComponentInstaller* installer_; | |
150 Callback callback_; | |
151 scoped_refptr<OutOfProcessPatcher> out_of_process_patcher_; | |
152 Error error_; | |
153 int extended_error_; | |
154 scoped_refptr<base::SequencedTaskRunner> task_runner_; | |
155 | |
156 DISALLOW_COPY_AND_ASSIGN(ComponentUnpacker); | |
157 }; | |
158 | |
159 } // namespace component_updater | |
160 | |
161 #endif // CHROME_BROWSER_COMPONENT_UPDATER_COMPONENT_UNPACKER_H_ | |
OLD | NEW |