source: trunk/PrefsPane/proxyApp/proxy.c @ 1046

/* Copyright (C) 2009 Peter Speck
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <CoreFoundation/CoreFoundation.h>
#include <JavaVM/jni.h>
#include <mach-o/arch.h>
#include <spawn.h>
#include <sys/resource.h>
#include <sys/stat.h>
#include <sys/sysctl.h>
#include <unistd.h>

static int debugFlag = 0;
static int hasUsrLibexecJavaHome = 0;

static int hasVM(const char *jvmVersion)
{
    if (debugFlag)
        fprintf(stderr, "hasVM(%s) runs.\n", jvmVersion);
    // Look for the JavaVM bundle using its identifier
    CFBundleRef vmBundleR = CFBundleGetBundleWithIdentifier(CFSTR("com.apple.JavaVM"));
    if (!vmBundleR) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Missing com.apple.JavaVM bundle.\n", jvmVersion);
        return 0;
    }
    CFURLRef frameworkUrl = CFBundleCopyBundleURL(vmBundleR);
     // ->  /System/Library/Frameworks/JavaVM.framework
    if (!frameworkUrl) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Can't create frameworkUrl.\n", jvmVersion);
        return 0;
    }
    CFURLRef versionDirUrl = CFURLCreateCopyAppendingPathComponent(kCFAllocatorDefault, frameworkUrl, CFSTR("Versions"), true);
    // ->  /System/Library/Frameworks/JavaVM.framework/Versions
    CFRelease(frameworkUrl);
    if (!versionDirUrl) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Can't create versionDirUrl.\n", jvmVersion);
        return 0;
    }
    CFStringRef vers = CFStringCreateWithCString(kCFAllocatorDefault, jvmVersion, kCFStringEncodingUTF8);
    CFURLRef targetUrl = vers ? CFURLCreateCopyAppendingPathComponent(kCFAllocatorDefault, versionDirUrl, vers, true) : NULL;
    // ->  /System/Library/Frameworks/JavaVM.framework/Versions/1.6
    if (vers)
        CFRelease(vers);
    CFRelease(versionDirUrl);
    if (!targetUrl) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Can't create targetUrl.\n", jvmVersion);
        return 0;
    }
    char path[PATH_MAX] = "\0";
    if (!CFURLGetFileSystemRepresentation(targetUrl, true, (UInt8*)path, sizeof(path))) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Can't convert targetUrl to file system representation.\n", jvmVersion);
        CFRelease(targetUrl);
        return 0;
    }
    CFRelease(targetUrl);
    struct stat statbuf;
    if (stat(path, &statbuf)) {
        if (debugFlag)
            fprintf(stderr, "hasVM(%s): Missing JavaVM directory: '%s'\n", jvmVersion, path);
        return 0;
    }
    if (debugFlag)
        fprintf(stderr, "hasVM(%s): Success.\n", jvmVersion);
    return 1;
}

#define JARDIR "/Library/PreferencePanes/GlimmerBlocker.prefPane/Contents/GlimmerBlockerProxy.app/Contents/Resources/Java"
#define CLASSPATH JARDIR "/glimmerblocker-server.jar" \
/**/                     ":" JARDIR "/annotations.jar" \
/**/                     ":" JARDIR "/dnsjava.jar" \
/**/                     ":" JARDIR "/smalljs.jar"

static JavaVMOption javaOptions[25];

static void addJavaOption(const char* s)
{
    JavaVMOption* jvo = javaOptions;
    while (jvo->optionString)
        jvo++;
    jvo->optionString = (char*)s;
    jvo->extraInfo = NULL;
    jvo++;
    jvo->optionString = NULL;
    jvo->extraInfo = NULL;
}

static int startVM(const char *jvmVersion, int tryLibExecTool)
{
    if (!hasUsrLibexecJavaHome && strcmp(jvmVersion, "*") && !hasVM(jvmVersion))
        return 0;
    if (debugFlag)
        fprintf(stderr, "Tries starting java version %s\n", jvmVersion);
    javaOptions[0].optionString = NULL;
    addJavaOption("-Xms25m");
    addJavaOption("-Xmx50m");
    if (strcmp(jvmVersion, "1.5"))
        addJavaOption("-XX:+UseCompressedOops"); // seems to make java 1.5 to fail launch on PPC 10.5
    addJavaOption("-Djava.awt.headless=true");
    addJavaOption("-Dfile.encoding=UTF-8");
    struct stat statbuf;
    if (getenv("GB_JAVA_DEBUGGER") || !stat("/Library/GlimmerBlocker/enable-java-debugging.txt", &statbuf)) {
        fprintf(stderr, "Enables java debugging.  Pid = %d\n", getpid());
        addJavaOption("-Xint");
        addJavaOption("-Xdebug");
        addJavaOption("-Xshare:off");
        addJavaOption("-Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005");
    }
    if (!stat("/Library/GlimmerBlocker/enable-jmxremote.txt", &statbuf)) {
        fprintf(stderr, "Enables jmxremote for e.g. jvisualvm.  Pid = %d\n", getpid());
        fprintf(stderr, " use 'Add JMXConnection' to 127.0.0.1:9494\n");
        addJavaOption("-Dcom.sun.management.jmxremote.port=9494");
        addJavaOption("-Dcom.sun.management.jmxremote.ssl=false");
        addJavaOption("-Dcom.sun.management.jmxremote.authenticate=false");
    }
    addJavaOption("-Djava.class.path=" CLASSPATH);
    if (!stat("/Library/GlimmerBlocker/preferIPv4Stack.txt", &statbuf)) {
        addJavaOption("-Djava.net.preferIPv4Stack=1");
        fprintf(stderr, "Launches GB using java.net.preferIPv4Stack\n");
    }
    if (debugFlag) {
        fprintf(stderr, "Java VM options:\n");
        JavaVMOption* jvo = javaOptions;
        while (jvo->optionString) {
            fprintf(stderr, "   %s\n", jvo->optionString);
            jvo++;
        }
    }
    if (hasUsrLibexecJavaHome && tryLibExecTool) {
        // The bad thing about using /usr/libexec/java_home -exec java
        // is that the process is called "java" in Activity Monitor
        // and by the firewall.
        long len = 500;
        for (JavaVMOption* jvo = javaOptions; jvo->optionString; jvo++)
            len += strlen(jvo->optionString) + 1;
        char* buf = malloc(len);
        if (!buf) {
            fprintf(stderr, "Couldn't malloc %ld bytes.\n", len);
            return 0;
        }
        char* p = buf + sprintf(buf, "/usr/libexec/java_home");
        if (strcmp(jvmVersion, "*"))
            p += sprintf(p, " -F -v'%s+'", jvmVersion);
        p += sprintf(p, " -exec java");
        for (JavaVMOption* jvo = javaOptions; jvo->optionString; jvo++)
            p += sprintf(p, " '%s'", jvo->optionString);
        p += sprintf(p, " org.glimmerblocker.proxy.GlimmerBlocker");
        if (debugFlag) {
            p += sprintf(p, " -stderr");
            fprintf(stderr, "cmdline (%ld/%ld): %s\n", (long)(p - buf) + 1, len, buf);
        }
        if (system(buf)) {
            fprintf(stderr, "GB proxy java failed to launch.\n");
            return 0;
        } else {
            fprintf(stderr, "GB proxy java launched ok.\n");
            exit(0);
        }
    }
    setenv("JAVA_JVM_VERSION", jvmVersion, true);
    JavaVMInitArgs vm_args;
    vm_args.version = JNI_VERSION_1_4;
    vm_args.options = javaOptions;
    vm_args.nOptions = 0;
    for (JavaVMOption* opt = vm_args.options; opt->optionString; opt++, vm_args.nOptions++)
        ;
    vm_args.ignoreUnrecognized  = JNI_TRUE;
    //
#define CHECK_EXCEPTION(MSG) \
    if ((*env)->ExceptionOccurred(env)) { \
        fprintf(stderr, "Java %s: Got exception from " MSG ".\n", jvmVersion); \
        (*env)->ExceptionDescribe(env); \
        goto done; \
    }
    JNIEnv *env;
    JavaVM *vm;
    int r = JNI_CreateJavaVM(&vm, (void**)&env, &vm_args);
    if (r) {
        if (debugFlag)
            fprintf(stderr, "Java %s: JNI_CreateJavaVM failed with error code %d\n", jvmVersion, r);
        return 0;
    }
    if (debugFlag)
        fprintf(stderr, "Java %s: Did create JVM using JNI_CreateJavaVM\n", jvmVersion);
    jclass mainClass = (*env)->FindClass(env, "org/glimmerblocker/proxy/GlimmerBlocker");
    if (!mainClass) {
        fprintf(stderr, "Java %s: Can't load main class.\n", jvmVersion);
        CHECK_EXCEPTION("Loading main class");
        goto done;
    }
    jmethodID mainID = (*env)->GetStaticMethodID(env, mainClass, "main", "([Ljava/lang/String;)V");
    if (!mainID) {
        fprintf(stderr, "Java %s: Can't find 'public void main(...)' in main class.\n", jvmVersion);
        CHECK_EXCEPTION("Finding main() method");
        goto done;
    }
    jobjectArray mainArgs = (*env)->NewObjectArray(env, debugFlag ? 1 : 0, (*env)->FindClass(env, "java/lang/String"), NULL);
    if (mainArgs == nil) {
        fprintf(stderr, "Java %s: Can't create String[] array.\n", jvmVersion);
        CHECK_EXCEPTION("Creating String[] array");
        goto done;
    }
    if (debugFlag) {
        jstring s = (*env)->NewStringUTF(env, "-stderr");
        if (!s) {
            fprintf(stderr, "Java %s: Can't create String constant.\n", jvmVersion);
            CHECK_EXCEPTION("Creating String constant");
            goto done;
        }
        (*env)->SetObjectArrayElement(env, mainArgs, 0, s);
        CHECK_EXCEPTION("Setting -stderr argument");
    }
    if (debugFlag)
        fprintf(stderr, "Java %s: Calls main()\n", jvmVersion);
    (*env)->CallStaticVoidMethod(env, mainClass, mainID, mainArgs);
    CHECK_EXCEPTION("Executing main method");
    if (debugFlag)
        fprintf(stderr, "Java %s: main() returned.\n", jvmVersion);
    return 1; // don't destroy successful vm.
done:
    if (debugFlag)
        fprintf(stderr, "Java %s: DestroyJavaVM.\n", jvmVersion);
    (*vm)->DestroyJavaVM(vm);
    if (debugFlag)
        fprintf(stderr, "Java %s: DestroyJavaVM done.\n", jvmVersion);
    return 0;
}

static void check(const char* cmd, int rc)
{
    if (!rc)
        return;
    fprintf(stderr, "GlimmerBlocker PROXY LAUNCHER FAILED (%d = %s): %s\n", rc, strerror(rc), cmd);
    exit(rc);
}

static void spawn(cpu_type_t cpu)
{
    posix_spawnattr_t attr;
    check("posix_spawnattr_init", posix_spawnattr_init(&attr));
    /* do the equivalent of exec, rather than creating a separate process */
    check("posix_spawnattr_setflags", posix_spawnattr_setflags(&attr, POSIX_SPAWN_SETEXEC));
    size_t copied;
    check("posix_spawnattr_setbinpref_np", posix_spawnattr_setbinpref_np(&attr, 1, &cpu, &copied));
    if (copied != 1)
        check("posix_spawnattr_setbinpref_np didn't set cpu type.", -1);
    const char* cmd = "/Library/PreferencePanes/GlimmerBlocker.prefPane/Contents/GlimmerBlockerProxy.app/Contents/MacOS/GlimmerBlocker";
    const char* argv[] = { cmd, NULL };
    pid_t pid;
    extern char **environ;
    check("posix_spawn", posix_spawn(&pid, cmd, NULL, &attr, (char**)argv, environ));
    fprintf(stderr, "posix_spawn returned!!!\n");
}

static void* startBestVM()
{
    if (startVM("1.6", 0))
        return NULL;
    if (startVM("1.5", 0))
        return NULL;
    if (startVM("1.6", 1))
        return NULL;
    if (startVM("1.5", 1))
        return NULL;
    if (startVM("*", 1))
        return NULL;
    //
    // Did not find any java which works on this architecture.
    // This happends for PPC on 10.5 in 64-bit mode as it has no java 1.6 and java 1.5 is 32-bit only (on PPC).
    // Only x64 can do 32 and 64 bit java 1.5 in 10.5
    int mib[CTL_MAXNAME];
    size_t len = CTL_MAXNAME;
    check("sysctlnametomib", sysctlnametomib("sysctl.proc_cputype", mib, &len));
    mib[len++] = getpid();
    cpu_type_t cputype;
    size_t cpusz = sizeof(cputype);
    if (sysctl(mib, (u_int)len, &cputype, &cpusz, NULL, 0)) {
        // prefer sysctlbyname_with_pid because NXGetLocalArchInfo is buggy:
        // Mac OS X 10.5.6, Core 2 Duo, in 64-bit mode, arch->cputype returns 7 == CPU_TYPE_X86 and not CPU_TYPE_X86_64 as expected!
        cputype = NXGetLocalArchInfo()->cputype; // failback if sysctl fails.
    }
    if (debugFlag)
        fprintf(stderr, "startBestVM: 0x%lX, sz = %d\n", (long)cputype, (int)sizeof(void*));
    if (cputype == CPU_TYPE_POWERPC64) {
        if (debugFlag)
            fprintf(stderr, "Running on ppc64, has no java, tries to relaunch in 32-bit mode.\n");
        spawn(CPU_TYPE_POWERPC);
    }
    if (cputype == CPU_TYPE_X86_64) {
        if (debugFlag)
            fprintf(stderr, "Running on x86_64, has no java, tries to relaunch in 32-bit mode.\n");
        spawn(CPU_TYPE_I386);
    }
    fprintf(stderr, "Can't find any usable java version. Tries to exec java as cmd line.\n");
    //fprintf(stderr, "CLASSPATH: %s\n\n", CLASSPATH);
    // argv[0] needs to be repeated in execlp
    int rc = execlp("java", "java", "-cp", CLASSPATH, "-Xmx100m", "-Djava.awt.headless=true", "-Dfile.encoding=UTF-8", "org.glimmerblocker.proxy.GlimmerBlocker", NULL);
    fprintf(stderr, "exec java returned with error = %d\n", rc);
    exit(rc ? rc : -1);
}

static void sourceCallBack(void *info) // dummy for CFRunLoop so it doesn't exit.
{
}

static int sys(const char *x)
{
    fprintf(stderr, "Executes: %s\n", x);
    int r = system(x);
    if (r)
        fprintf(stderr, "Got returncode = %d from %s\n", r, x);
    fprintf(stderr, "\n");
    return r;
}

int checkCodesign(const char *x)
{
    fprintf(stderr, "Executes: %s\n", x);
    int r = system(x);
    if (r) {
        fprintf(stderr, "\n");
        fprintf(stderr, "\n");
        fprintf(stderr, "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\n");
        fprintf(stderr, "@@@@  Codesign verification failed with returncode = %3d @@@@\n", r);
        fprintf(stderr, "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\n");
        fprintf(stderr, "\n");
        fprintf(stderr, "\n");
    }
    fprintf(stderr, "\n");
    return r;
}

int main(int argc, const char **argv)
{
    unsetenv("IFS");
    setenv("SHELL", "/bin/sh", 1);
    setenv("PATH", "/bin:/usr/bin:/usr/sbin", 1);
    unsetenv("CDPATH");
    int r = chdir("/tmp");
    if (r)
        fprintf(stderr, "GlimmerBlockerProxy: failed chdir('/tmp'): %d\n", r);
    int displayedInTextEdit = 0;
    int makeDebugReport = 0;
    for (int i = 1; i < argc; i++) {
        if (!strcmp(argv[i], "--make-report"))
            makeDebugReport = debugFlag = 1;
        else if (!strcmp(argv[i], "--textedit"))
            displayedInTextEdit = 1;
        else if (!strcmp(argv[i], "-d"))
            debugFlag = 1;
    }
    struct rlimit rlp;
    struct rlimit rlpOld;
    getrlimit(RLIMIT_NOFILE, &rlpOld);
    getrlimit(RLIMIT_NOFILE, &rlp);
    if (rlp.rlim_cur < rlp.rlim_max) {
        rlp.rlim_cur = MAX(rlp.rlim_max, 10240);
        setrlimit(RLIMIT_NOFILE, &rlp);
    }
    struct stat statbuf;
    // java_home in 10.6.0 doesn't support the -exec parameter.
    hasUsrLibexecJavaHome = !stat("/usr/libexec/java_home", &statbuf) && (statbuf.st_mode & 0111)
        && !stat("/System/Library/Java/JavaVirtualMachines", &statbuf);
    if (makeDebugReport) {
        if (displayedInTextEdit) {
            fprintf(stderr, "#\n");
            fprintf(stderr, "#\n");
            fprintf(stderr, "# Please copy/paste the content of this window into a mail to\n");
            fprintf(stderr, "#     feedback@glimmerblocker.org\n");
            fprintf(stderr, "#\n");
            fprintf(stderr, "#\n");
        } else {
            fprintf(stderr, "GlimmerBlockerProxy: debug log enabled.\n");
        }
        fprintf(stderr, "rlimit.files: %lld -> %lld, hard = %lld\n", 
                (long long)rlpOld.rlim_cur, (long long)rlp.rlim_cur, (long long)rlp.rlim_max);
        fprintf(stderr, "hasUsrLibexecJavaHome = %s\n", hasUsrLibexecJavaHome ? "yes" : "no");
        sys("printenv");
        sys("id");
        sys("ls -l /Library/Logs/GlimmerBlocker");
        sys("ls -l /Library/GlimmerBlocker");
        sys("codesign --verify  --verbose /Library/PreferencePanes/GlimmerBlocker.prefPane/Contents/GlimmerBlockerProxy.app");
        sys("dscl . -read /Users/_glimmerblocker");
        sys("java -version");
        if (hasUsrLibexecJavaHome) {
            r = sys("/usr/libexec/java_home -v'1.6*' java -version");
            if (r)
                sys("/usr/libexec/java_home -v'1.5*' java -version");
        }
        sys("perl -MIO -e 'print \"perl is ok\\n\";'"); // http://www.theregister.co.uk/2009/02/16/apple_update_perl_breakage/
        sys("system_profiler SPSoftwareDataType | egrep -i 'version|kernel'");
        sys("system_profiler SPHardwareDataType | perl -ne 'print unless /Serial Number|Hardware UUID/i;' # omits serial + hardwareid.");
#define PPANE "/Library/PreferencePanes/GlimmerBlocker.prefPane"
#define UPDATER PPANE "/Contents/GlimmerBlockerUpdater.app"
#define SPARKLE PPANE "/Contents/GlimmerBlockerUpdater.app/Contents/Frameworks/Sparkle.framework/Versions/A"
#define SIGNATURE "c9d85c0c3b7a8d1cb8060aa34df69713cfff637c"
        int a = checkCodesign("codesign -vv '-R=identifier org.glimmerblocker.prefsPane and certificate leaf = H\"" SIGNATURE "\"' " PPANE);
        int b = checkCodesign("codesign -vv '-R=identifier org.glimmerblocker.upgradeApp and certificate leaf = H\"" SIGNATURE "\"' " UPDATER);
        int c = checkCodesign("codesign -vv '-R=identifier org.andymatuschak.Sparkle and certificate leaf = H\"" SIGNATURE "\"' " SPARKLE);
        if (a || b || c) {
            sys("codesign -vddd -r- " PPANE);
            sys("codesign -vddd -r- " UPDATER);
            sys("codesign -vddd -r- " SPARKLE);
        }
        if (c)
            sys("file " SPARKLE "/Resources/relaunch");
        sys("ulimit -a");
    }
    // posix_spawn doesn't work on thread, so launch JVM in main thread before run loop.
    // TN2147 says it's ok for non-AWT apps.
    startBestVM();
    if (makeDebugReport) {
        sleep(2);
        fprintf(stderr, "#\n");
        fprintf(stderr, "# Debug-mode launch of GlimmerBlocker proxy now done.\n");
        fprintf(stderr, "#\n");
        fprintf(stderr, "# Please copy/paste the content of this window into a mail to\n");
        fprintf(stderr, "#     feedback@glimmerblocker.org\n");
        if (!displayedInTextEdit)
            fprintf(stderr, "# and then close this window and quit Terminal.\n");
        fprintf(stderr, "#\n");
        exit(0);
    }
    //
    // Create a a sourceContext to be used by our source that makes
    // sure the CFRunLoop doesn't exit right away
    CFRunLoopSourceContext sourceContext;
    sourceContext.version = 0;
    sourceContext.info = NULL;
    sourceContext.retain = NULL;
    sourceContext.release = NULL;
    sourceContext.copyDescription = NULL;
    sourceContext.equal = NULL;
    sourceContext.hash = NULL;
    sourceContext.schedule = NULL;
    sourceContext.cancel = NULL;
    sourceContext.perform = &sourceCallBack;
    //
    CFRunLoopSourceRef sourceRef = CFRunLoopSourceCreate(NULL, 0, &sourceContext);
    CFRunLoopAddSource(CFRunLoopGetCurrent(), sourceRef, kCFRunLoopCommonModes); 
    CFRunLoopRun();
    CFRelease(sourceRef);
    return 0;
}