forked from mia/Aegisub
132 lines
4.2 KiB
C++
132 lines
4.2 KiB
C++
// Copyright (c) 2010, Amar Takhar <verm@aegisub.org>
|
|
//
|
|
// Permission to use, copy, modify, and distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
// WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
// MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
// ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
// WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
// ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
// OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
//
|
|
// $Id$
|
|
|
|
/// @file access.cpp
|
|
/// @brief Windows access methods.
|
|
/// @ingroup libaegisub windows
|
|
|
|
#ifndef LAGI_PRE
|
|
#include <windows.h>
|
|
|
|
#include <iostream>
|
|
#include <fstream>
|
|
#endif
|
|
|
|
#include <libaegisub/access.h>
|
|
|
|
#include <libaegisub/charset_conv_win.h>
|
|
#include <libaegisub/log.h>
|
|
#include <libaegisub/util.h>
|
|
#include <libaegisub/util_win.h>
|
|
|
|
namespace {
|
|
bool check_permission(bool is_read, SECURITY_DESCRIPTOR *sd, HANDLE client_token) {
|
|
DWORD access_check = is_read ? FILE_READ_DATA : FILE_APPEND_DATA | FILE_WRITE_DATA;
|
|
|
|
GENERIC_MAPPING generic_mapping;
|
|
MapGenericMask(&access_check, &generic_mapping);
|
|
|
|
PRIVILEGE_SET priv_set;
|
|
DWORD priv_set_size = sizeof(PRIVILEGE_SET);
|
|
DWORD access;
|
|
BOOL access_ok;
|
|
if(!AccessCheck(sd, client_token, access_check, &generic_mapping, &priv_set, &priv_set_size, &access, &access_ok))
|
|
LOG_W("acs/check") << "AccessCheck failed: " << agi::util::ErrorString(GetLastError());
|
|
return !!access;
|
|
}
|
|
}
|
|
|
|
namespace agi {
|
|
namespace acs {
|
|
|
|
void CheckFileRead(const std::string &file) {
|
|
Check(file, acs::FileRead);
|
|
}
|
|
|
|
void CheckFileWrite(const std::string &file) {
|
|
Check(file, acs::FileWrite);
|
|
}
|
|
|
|
void CheckDirRead(const std::string &dir) {
|
|
Check(dir, acs::DirRead);
|
|
}
|
|
|
|
void CheckDirWrite(const std::string &dir) {
|
|
Check(dir, acs::DirWrite);
|
|
}
|
|
|
|
/*
|
|
This function is still a proof of concept, it's probably rife with bugs, below
|
|
is a short (and incomplete) todo
|
|
* "Basic" checks (Read/Write/File/Dir) checks for FAT32 filesystems which
|
|
requires detecting the filesystem being used.
|
|
*/
|
|
void Check(const std::string &file, acs::Type type) {
|
|
std::wstring wfile = agi::charset::ConvertW(file);
|
|
|
|
DWORD file_attr = GetFileAttributes(wfile.c_str());
|
|
if ((file_attr & INVALID_FILE_ATTRIBUTES) == INVALID_FILE_ATTRIBUTES) {
|
|
switch (GetLastError()) {
|
|
case ERROR_FILE_NOT_FOUND:
|
|
case ERROR_PATH_NOT_FOUND:
|
|
throw FileNotFoundError(file);
|
|
|
|
case ERROR_ACCESS_DENIED:
|
|
throw Read("Access denied to file or path component");
|
|
|
|
default:
|
|
throw Fatal("Fatal I/O error occurred.");
|
|
}
|
|
}
|
|
|
|
switch (type) {
|
|
case FileRead:
|
|
case FileWrite:
|
|
if ((file_attr & FILE_ATTRIBUTE_DIRECTORY) == FILE_ATTRIBUTE_DIRECTORY)
|
|
throw NotAFile(file + " is not a file");
|
|
break;
|
|
case DirRead:
|
|
case DirWrite:
|
|
if ((file_attr & FILE_ATTRIBUTE_DIRECTORY) != FILE_ATTRIBUTE_DIRECTORY)
|
|
throw NotADirectory(file + " is not a directory");
|
|
break;
|
|
}
|
|
|
|
SECURITY_INFORMATION info = OWNER_SECURITY_INFORMATION | GROUP_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION;
|
|
DWORD len = 0;
|
|
GetFileSecurity(wfile.c_str(), info, NULL, 0, &len);
|
|
if (GetLastError() != ERROR_INSUFFICIENT_BUFFER)
|
|
LOG_W("acs/check") << "GetFileSecurity: fatal: " << util::ErrorString(GetLastError());
|
|
|
|
std::vector<uint8_t> sd_buff(len);
|
|
SECURITY_DESCRIPTOR *sd = (SECURITY_DESCRIPTOR *)&sd_buff[0];
|
|
|
|
if (!GetFileSecurity(wfile.c_str(), info, sd, len, &len))
|
|
LOG_W("acs/check") << "GetFileSecurity failed: " << util::ErrorString(GetLastError());
|
|
|
|
ImpersonateSelf(SecurityImpersonation);
|
|
HANDLE client_token;
|
|
if (!OpenThreadToken(GetCurrentThread(), TOKEN_ALL_ACCESS, TRUE, &client_token))
|
|
LOG_W("acs/check") << "OpenThreadToken failed: " << util::ErrorString(GetLastError());
|
|
|
|
if (!check_permission(true, sd, client_token))
|
|
throw Read("File or directory is not readable");
|
|
if ((type == DirWrite || type == FileWrite) && !check_permission(false, sd, client_token))
|
|
throw Write("File or directory is not writable");
|
|
}
|
|
|
|
} // namespace Access
|
|
} // namespace agi
|