• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (C) 2008 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #define LOG_TAG "ResourceType"
18 //#define LOG_NDEBUG 0
19 
20 #include <utils/Atomic.h>
21 #include <utils/ByteOrder.h>
22 #include <utils/Debug.h>
23 #include <utils/ResourceTypes.h>
24 #include <utils/String16.h>
25 #include <utils/String8.h>
26 #include <utils/TextOutput.h>
27 #include <utils/Log.h>
28 
29 #include <stdlib.h>
30 #include <string.h>
31 #include <memory.h>
32 #include <ctype.h>
33 #include <stdint.h>
34 
35 #ifndef INT32_MAX
36 #define INT32_MAX ((int32_t)(2147483647))
37 #endif
38 
39 #define POOL_NOISY(x) //x
40 #define XML_NOISY(x) //x
41 #define TABLE_NOISY(x) //x
42 #define TABLE_GETENTRY(x) //x
43 #define TABLE_SUPER_NOISY(x) //x
44 #define LOAD_TABLE_NOISY(x) //x
45 #define TABLE_THEME(x) //x
46 
47 namespace android {
48 
49 #ifdef HAVE_WINSOCK
50 #undef  nhtol
51 #undef  htonl
52 
53 #ifdef HAVE_LITTLE_ENDIAN
54 #define ntohl(x)    ( ((x) << 24) | (((x) >> 24) & 255) | (((x) << 8) & 0xff0000) | (((x) >> 8) & 0xff00) )
55 #define htonl(x)    ntohl(x)
56 #define ntohs(x)    ( (((x) << 8) & 0xff00) | (((x) >> 8) & 255) )
57 #define htons(x)    ntohs(x)
58 #else
59 #define ntohl(x)    (x)
60 #define htonl(x)    (x)
61 #define ntohs(x)    (x)
62 #define htons(x)    (x)
63 #endif
64 #endif
65 
66 #define IDMAP_MAGIC         0x706d6469
67 // size measured in sizeof(uint32_t)
68 #define IDMAP_HEADER_SIZE (ResTable::IDMAP_HEADER_SIZE_BYTES / sizeof(uint32_t))
69 
printToLogFunc(void * cookie,const char * txt)70 static void printToLogFunc(void* cookie, const char* txt)
71 {
72     LOGV("%s", txt);
73 }
74 
75 // Standard C isspace() is only required to look at the low byte of its input, so
76 // produces incorrect results for UTF-16 characters.  For safety's sake, assume that
77 // any high-byte UTF-16 code point is not whitespace.
isspace16(char16_t c)78 inline int isspace16(char16_t c) {
79     return (c < 0x0080 && isspace(c));
80 }
81 
82 // range checked; guaranteed to NUL-terminate within the stated number of available slots
83 // NOTE: if this truncates the dst string due to running out of space, no attempt is
84 // made to avoid splitting surrogate pairs.
strcpy16_dtoh(uint16_t * dst,const uint16_t * src,size_t avail)85 static void strcpy16_dtoh(uint16_t* dst, const uint16_t* src, size_t avail)
86 {
87     uint16_t* last = dst + avail - 1;
88     while (*src && (dst < last)) {
89         char16_t s = dtohs(*src);
90         *dst++ = s;
91         src++;
92     }
93     *dst = 0;
94 }
95 
validate_chunk(const ResChunk_header * chunk,size_t minSize,const uint8_t * dataEnd,const char * name)96 static status_t validate_chunk(const ResChunk_header* chunk,
97                                size_t minSize,
98                                const uint8_t* dataEnd,
99                                const char* name)
100 {
101     const uint16_t headerSize = dtohs(chunk->headerSize);
102     const uint32_t size = dtohl(chunk->size);
103 
104     if (headerSize >= minSize) {
105         if (headerSize <= size) {
106             if (((headerSize|size)&0x3) == 0) {
107                 if ((ssize_t)size <= (dataEnd-((const uint8_t*)chunk))) {
108                     return NO_ERROR;
109                 }
110                 LOGW("%s data size %p extends beyond resource end %p.",
111                      name, (void*)size,
112                      (void*)(dataEnd-((const uint8_t*)chunk)));
113                 return BAD_TYPE;
114             }
115             LOGW("%s size 0x%x or headerSize 0x%x is not on an integer boundary.",
116                  name, (int)size, (int)headerSize);
117             return BAD_TYPE;
118         }
119         LOGW("%s size %p is smaller than header size %p.",
120              name, (void*)size, (void*)(int)headerSize);
121         return BAD_TYPE;
122     }
123     LOGW("%s header size %p is too small.",
124          name, (void*)(int)headerSize);
125     return BAD_TYPE;
126 }
127 
copyFrom_dtoh(const Res_value & src)128 inline void Res_value::copyFrom_dtoh(const Res_value& src)
129 {
130     size = dtohs(src.size);
131     res0 = src.res0;
132     dataType = src.dataType;
133     data = dtohl(src.data);
134 }
135 
deviceToFile()136 void Res_png_9patch::deviceToFile()
137 {
138     for (int i = 0; i < numXDivs; i++) {
139         xDivs[i] = htonl(xDivs[i]);
140     }
141     for (int i = 0; i < numYDivs; i++) {
142         yDivs[i] = htonl(yDivs[i]);
143     }
144     paddingLeft = htonl(paddingLeft);
145     paddingRight = htonl(paddingRight);
146     paddingTop = htonl(paddingTop);
147     paddingBottom = htonl(paddingBottom);
148     for (int i=0; i<numColors; i++) {
149         colors[i] = htonl(colors[i]);
150     }
151 }
152 
fileToDevice()153 void Res_png_9patch::fileToDevice()
154 {
155     for (int i = 0; i < numXDivs; i++) {
156         xDivs[i] = ntohl(xDivs[i]);
157     }
158     for (int i = 0; i < numYDivs; i++) {
159         yDivs[i] = ntohl(yDivs[i]);
160     }
161     paddingLeft = ntohl(paddingLeft);
162     paddingRight = ntohl(paddingRight);
163     paddingTop = ntohl(paddingTop);
164     paddingBottom = ntohl(paddingBottom);
165     for (int i=0; i<numColors; i++) {
166         colors[i] = ntohl(colors[i]);
167     }
168 }
169 
serializedSize()170 size_t Res_png_9patch::serializedSize()
171 {
172     // The size of this struct is 32 bytes on the 32-bit target system
173     // 4 * int8_t
174     // 4 * int32_t
175     // 3 * pointer
176     return 32
177             + numXDivs * sizeof(int32_t)
178             + numYDivs * sizeof(int32_t)
179             + numColors * sizeof(uint32_t);
180 }
181 
serialize()182 void* Res_png_9patch::serialize()
183 {
184     // Use calloc since we're going to leave a few holes in the data
185     // and want this to run cleanly under valgrind
186     void* newData = calloc(1, serializedSize());
187     serialize(newData);
188     return newData;
189 }
190 
serialize(void * outData)191 void Res_png_9patch::serialize(void * outData)
192 {
193     char* data = (char*) outData;
194     memmove(data, &wasDeserialized, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
195     memmove(data + 12, &paddingLeft, 16);   // copy paddingXXXX
196     data += 32;
197 
198     memmove(data, this->xDivs, numXDivs * sizeof(int32_t));
199     data +=  numXDivs * sizeof(int32_t);
200     memmove(data, this->yDivs, numYDivs * sizeof(int32_t));
201     data +=  numYDivs * sizeof(int32_t);
202     memmove(data, this->colors, numColors * sizeof(uint32_t));
203 }
204 
deserializeInternal(const void * inData,Res_png_9patch * outData)205 static void deserializeInternal(const void* inData, Res_png_9patch* outData) {
206     char* patch = (char*) inData;
207     if (inData != outData) {
208         memmove(&outData->wasDeserialized, patch, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
209         memmove(&outData->paddingLeft, patch + 12, 4);     // copy  wasDeserialized, numXDivs, numYDivs, numColors
210     }
211     outData->wasDeserialized = true;
212     char* data = (char*)outData;
213     data +=  sizeof(Res_png_9patch);
214     outData->xDivs = (int32_t*) data;
215     data +=  outData->numXDivs * sizeof(int32_t);
216     outData->yDivs = (int32_t*) data;
217     data +=  outData->numYDivs * sizeof(int32_t);
218     outData->colors = (uint32_t*) data;
219 }
220 
assertIdmapHeader(const uint32_t * map,size_t sizeBytes)221 static bool assertIdmapHeader(const uint32_t* map, size_t sizeBytes)
222 {
223     if (sizeBytes < ResTable::IDMAP_HEADER_SIZE_BYTES) {
224         LOGW("idmap assertion failed: size=%d bytes\n", sizeBytes);
225         return false;
226     }
227     if (*map != htodl(IDMAP_MAGIC)) { // htodl: map data expected to be in correct endianess
228         LOGW("idmap assertion failed: invalid magic found (is 0x%08x, expected 0x%08x)\n",
229              *map, htodl(IDMAP_MAGIC));
230         return false;
231     }
232     return true;
233 }
234 
idmapLookup(const uint32_t * map,size_t sizeBytes,uint32_t key,uint32_t * outValue)235 static status_t idmapLookup(const uint32_t* map, size_t sizeBytes, uint32_t key, uint32_t* outValue)
236 {
237     // see README for details on the format of map
238     if (!assertIdmapHeader(map, sizeBytes)) {
239         return UNKNOWN_ERROR;
240     }
241     map = map + IDMAP_HEADER_SIZE; // skip ahead to data segment
242     // size of data block, in uint32_t
243     const size_t size = (sizeBytes - ResTable::IDMAP_HEADER_SIZE_BYTES) / sizeof(uint32_t);
244     const uint32_t type = Res_GETTYPE(key) + 1; // add one, idmap stores "public" type id
245     const uint32_t entry = Res_GETENTRY(key);
246     const uint32_t typeCount = *map;
247 
248     if (type > typeCount) {
249         LOGW("Resource ID map: type=%d exceeds number of types=%d\n", type, typeCount);
250         return UNKNOWN_ERROR;
251     }
252     if (typeCount > size) {
253         LOGW("Resource ID map: number of types=%d exceeds size of map=%d\n", typeCount, size);
254         return UNKNOWN_ERROR;
255     }
256     const uint32_t typeOffset = map[type];
257     if (typeOffset == 0) {
258         *outValue = 0;
259         return NO_ERROR;
260     }
261     if (typeOffset + 1 > size) {
262         LOGW("Resource ID map: type offset=%d exceeds reasonable value, size of map=%d\n",
263              typeOffset, size);
264         return UNKNOWN_ERROR;
265     }
266     const uint32_t entryCount = map[typeOffset];
267     const uint32_t entryOffset = map[typeOffset + 1];
268     if (entryCount == 0 || entry < entryOffset || entry - entryOffset > entryCount - 1) {
269         *outValue = 0;
270         return NO_ERROR;
271     }
272     const uint32_t index = typeOffset + 2 + entry - entryOffset;
273     if (index > size) {
274         LOGW("Resource ID map: entry index=%d exceeds size of map=%d\n", index, size);
275         *outValue = 0;
276         return NO_ERROR;
277     }
278     *outValue = map[index];
279 
280     return NO_ERROR;
281 }
282 
getIdmapPackageId(const uint32_t * map,size_t mapSize,uint32_t * outId)283 static status_t getIdmapPackageId(const uint32_t* map, size_t mapSize, uint32_t *outId)
284 {
285     if (!assertIdmapHeader(map, mapSize)) {
286         return UNKNOWN_ERROR;
287     }
288     const uint32_t* p = map + IDMAP_HEADER_SIZE + 1;
289     while (*p == 0) {
290         ++p;
291     }
292     *outId = (map[*p + IDMAP_HEADER_SIZE + 2] >> 24) & 0x000000ff;
293     return NO_ERROR;
294 }
295 
deserialize(const void * inData)296 Res_png_9patch* Res_png_9patch::deserialize(const void* inData)
297 {
298     if (sizeof(void*) != sizeof(int32_t)) {
299         LOGE("Cannot deserialize on non 32-bit system\n");
300         return NULL;
301     }
302     deserializeInternal(inData, (Res_png_9patch*) inData);
303     return (Res_png_9patch*) inData;
304 }
305 
306 // --------------------------------------------------------------------
307 // --------------------------------------------------------------------
308 // --------------------------------------------------------------------
309 
ResStringPool()310 ResStringPool::ResStringPool()
311     : mError(NO_INIT), mOwnedData(NULL), mHeader(NULL), mCache(NULL)
312 {
313 }
314 
ResStringPool(const void * data,size_t size,bool copyData)315 ResStringPool::ResStringPool(const void* data, size_t size, bool copyData)
316     : mError(NO_INIT), mOwnedData(NULL), mHeader(NULL), mCache(NULL)
317 {
318     setTo(data, size, copyData);
319 }
320 
~ResStringPool()321 ResStringPool::~ResStringPool()
322 {
323     uninit();
324 }
325 
setTo(const void * data,size_t size,bool copyData)326 status_t ResStringPool::setTo(const void* data, size_t size, bool copyData)
327 {
328     if (!data || !size) {
329         return (mError=BAD_TYPE);
330     }
331 
332     uninit();
333 
334     const bool notDeviceEndian = htods(0xf0) != 0xf0;
335 
336     if (copyData || notDeviceEndian) {
337         mOwnedData = malloc(size);
338         if (mOwnedData == NULL) {
339             return (mError=NO_MEMORY);
340         }
341         memcpy(mOwnedData, data, size);
342         data = mOwnedData;
343     }
344 
345     mHeader = (const ResStringPool_header*)data;
346 
347     if (notDeviceEndian) {
348         ResStringPool_header* h = const_cast<ResStringPool_header*>(mHeader);
349         h->header.headerSize = dtohs(mHeader->header.headerSize);
350         h->header.type = dtohs(mHeader->header.type);
351         h->header.size = dtohl(mHeader->header.size);
352         h->stringCount = dtohl(mHeader->stringCount);
353         h->styleCount = dtohl(mHeader->styleCount);
354         h->flags = dtohl(mHeader->flags);
355         h->stringsStart = dtohl(mHeader->stringsStart);
356         h->stylesStart = dtohl(mHeader->stylesStart);
357     }
358 
359     if (mHeader->header.headerSize > mHeader->header.size
360             || mHeader->header.size > size) {
361         LOGW("Bad string block: header size %d or total size %d is larger than data size %d\n",
362                 (int)mHeader->header.headerSize, (int)mHeader->header.size, (int)size);
363         return (mError=BAD_TYPE);
364     }
365     mSize = mHeader->header.size;
366     mEntries = (const uint32_t*)
367         (((const uint8_t*)data)+mHeader->header.headerSize);
368 
369     if (mHeader->stringCount > 0) {
370         if ((mHeader->stringCount*sizeof(uint32_t) < mHeader->stringCount)  // uint32 overflow?
371             || (mHeader->header.headerSize+(mHeader->stringCount*sizeof(uint32_t)))
372                 > size) {
373             LOGW("Bad string block: entry of %d items extends past data size %d\n",
374                     (int)(mHeader->header.headerSize+(mHeader->stringCount*sizeof(uint32_t))),
375                     (int)size);
376             return (mError=BAD_TYPE);
377         }
378 
379         size_t charSize;
380         if (mHeader->flags&ResStringPool_header::UTF8_FLAG) {
381             charSize = sizeof(uint8_t);
382             mCache = (char16_t**)malloc(sizeof(char16_t**)*mHeader->stringCount);
383             memset(mCache, 0, sizeof(char16_t**)*mHeader->stringCount);
384         } else {
385             charSize = sizeof(char16_t);
386         }
387 
388         mStrings = (const void*)
389             (((const uint8_t*)data)+mHeader->stringsStart);
390         if (mHeader->stringsStart >= (mHeader->header.size-sizeof(uint16_t))) {
391             LOGW("Bad string block: string pool starts at %d, after total size %d\n",
392                     (int)mHeader->stringsStart, (int)mHeader->header.size);
393             return (mError=BAD_TYPE);
394         }
395         if (mHeader->styleCount == 0) {
396             mStringPoolSize =
397                 (mHeader->header.size-mHeader->stringsStart)/charSize;
398         } else {
399             // check invariant: styles starts before end of data
400             if (mHeader->stylesStart >= (mHeader->header.size-sizeof(uint16_t))) {
401                 LOGW("Bad style block: style block starts at %d past data size of %d\n",
402                     (int)mHeader->stylesStart, (int)mHeader->header.size);
403                 return (mError=BAD_TYPE);
404             }
405             // check invariant: styles follow the strings
406             if (mHeader->stylesStart <= mHeader->stringsStart) {
407                 LOGW("Bad style block: style block starts at %d, before strings at %d\n",
408                     (int)mHeader->stylesStart, (int)mHeader->stringsStart);
409                 return (mError=BAD_TYPE);
410             }
411             mStringPoolSize =
412                 (mHeader->stylesStart-mHeader->stringsStart)/charSize;
413         }
414 
415         // check invariant: stringCount > 0 requires a string pool to exist
416         if (mStringPoolSize == 0) {
417             LOGW("Bad string block: stringCount is %d but pool size is 0\n", (int)mHeader->stringCount);
418             return (mError=BAD_TYPE);
419         }
420 
421         if (notDeviceEndian) {
422             size_t i;
423             uint32_t* e = const_cast<uint32_t*>(mEntries);
424             for (i=0; i<mHeader->stringCount; i++) {
425                 e[i] = dtohl(mEntries[i]);
426             }
427             if (!(mHeader->flags&ResStringPool_header::UTF8_FLAG)) {
428                 const char16_t* strings = (const char16_t*)mStrings;
429                 char16_t* s = const_cast<char16_t*>(strings);
430                 for (i=0; i<mStringPoolSize; i++) {
431                     s[i] = dtohs(strings[i]);
432                 }
433             }
434         }
435 
436         if ((mHeader->flags&ResStringPool_header::UTF8_FLAG &&
437                 ((uint8_t*)mStrings)[mStringPoolSize-1] != 0) ||
438                 (!mHeader->flags&ResStringPool_header::UTF8_FLAG &&
439                 ((char16_t*)mStrings)[mStringPoolSize-1] != 0)) {
440             LOGW("Bad string block: last string is not 0-terminated\n");
441             return (mError=BAD_TYPE);
442         }
443     } else {
444         mStrings = NULL;
445         mStringPoolSize = 0;
446     }
447 
448     if (mHeader->styleCount > 0) {
449         mEntryStyles = mEntries + mHeader->stringCount;
450         // invariant: integer overflow in calculating mEntryStyles
451         if (mEntryStyles < mEntries) {
452             LOGW("Bad string block: integer overflow finding styles\n");
453             return (mError=BAD_TYPE);
454         }
455 
456         if (((const uint8_t*)mEntryStyles-(const uint8_t*)mHeader) > (int)size) {
457             LOGW("Bad string block: entry of %d styles extends past data size %d\n",
458                     (int)((const uint8_t*)mEntryStyles-(const uint8_t*)mHeader),
459                     (int)size);
460             return (mError=BAD_TYPE);
461         }
462         mStyles = (const uint32_t*)
463             (((const uint8_t*)data)+mHeader->stylesStart);
464         if (mHeader->stylesStart >= mHeader->header.size) {
465             LOGW("Bad string block: style pool starts %d, after total size %d\n",
466                     (int)mHeader->stylesStart, (int)mHeader->header.size);
467             return (mError=BAD_TYPE);
468         }
469         mStylePoolSize =
470             (mHeader->header.size-mHeader->stylesStart)/sizeof(uint32_t);
471 
472         if (notDeviceEndian) {
473             size_t i;
474             uint32_t* e = const_cast<uint32_t*>(mEntryStyles);
475             for (i=0; i<mHeader->styleCount; i++) {
476                 e[i] = dtohl(mEntryStyles[i]);
477             }
478             uint32_t* s = const_cast<uint32_t*>(mStyles);
479             for (i=0; i<mStylePoolSize; i++) {
480                 s[i] = dtohl(mStyles[i]);
481             }
482         }
483 
484         const ResStringPool_span endSpan = {
485             { htodl(ResStringPool_span::END) },
486             htodl(ResStringPool_span::END), htodl(ResStringPool_span::END)
487         };
488         if (memcmp(&mStyles[mStylePoolSize-(sizeof(endSpan)/sizeof(uint32_t))],
489                    &endSpan, sizeof(endSpan)) != 0) {
490             LOGW("Bad string block: last style is not 0xFFFFFFFF-terminated\n");
491             return (mError=BAD_TYPE);
492         }
493     } else {
494         mEntryStyles = NULL;
495         mStyles = NULL;
496         mStylePoolSize = 0;
497     }
498 
499     return (mError=NO_ERROR);
500 }
501 
getError() const502 status_t ResStringPool::getError() const
503 {
504     return mError;
505 }
506 
uninit()507 void ResStringPool::uninit()
508 {
509     mError = NO_INIT;
510     if (mOwnedData) {
511         free(mOwnedData);
512         mOwnedData = NULL;
513     }
514     if (mHeader != NULL && mCache != NULL) {
515         for (size_t x = 0; x < mHeader->stringCount; x++) {
516             if (mCache[x] != NULL) {
517                 free(mCache[x]);
518                 mCache[x] = NULL;
519             }
520         }
521         free(mCache);
522         mCache = NULL;
523     }
524 }
525 
526 /**
527  * Strings in UTF-16 format have length indicated by a length encoded in the
528  * stored data. It is either 1 or 2 characters of length data. This allows a
529  * maximum length of 0x7FFFFFF (2147483647 bytes), but if you're storing that
530  * much data in a string, you're abusing them.
531  *
532  * If the high bit is set, then there are two characters or 4 bytes of length
533  * data encoded. In that case, drop the high bit of the first character and
534  * add it together with the next character.
535  */
536 static inline size_t
decodeLength(const char16_t ** str)537 decodeLength(const char16_t** str)
538 {
539     size_t len = **str;
540     if ((len & 0x8000) != 0) {
541         (*str)++;
542         len = ((len & 0x7FFF) << 16) | **str;
543     }
544     (*str)++;
545     return len;
546 }
547 
548 /**
549  * Strings in UTF-8 format have length indicated by a length encoded in the
550  * stored data. It is either 1 or 2 characters of length data. This allows a
551  * maximum length of 0x7FFF (32767 bytes), but you should consider storing
552  * text in another way if you're using that much data in a single string.
553  *
554  * If the high bit is set, then there are two characters or 2 bytes of length
555  * data encoded. In that case, drop the high bit of the first character and
556  * add it together with the next character.
557  */
558 static inline size_t
decodeLength(const uint8_t ** str)559 decodeLength(const uint8_t** str)
560 {
561     size_t len = **str;
562     if ((len & 0x80) != 0) {
563         (*str)++;
564         len = ((len & 0x7F) << 8) | **str;
565     }
566     (*str)++;
567     return len;
568 }
569 
stringAt(size_t idx,size_t * u16len) const570 const uint16_t* ResStringPool::stringAt(size_t idx, size_t* u16len) const
571 {
572     if (mError == NO_ERROR && idx < mHeader->stringCount) {
573         const bool isUTF8 = (mHeader->flags&ResStringPool_header::UTF8_FLAG) != 0;
574         const uint32_t off = mEntries[idx]/(isUTF8?sizeof(char):sizeof(char16_t));
575         if (off < (mStringPoolSize-1)) {
576             if (!isUTF8) {
577                 const char16_t* strings = (char16_t*)mStrings;
578                 const char16_t* str = strings+off;
579 
580                 *u16len = decodeLength(&str);
581                 if ((uint32_t)(str+*u16len-strings) < mStringPoolSize) {
582                     return str;
583                 } else {
584                     LOGW("Bad string block: string #%d extends to %d, past end at %d\n",
585                             (int)idx, (int)(str+*u16len-strings), (int)mStringPoolSize);
586                 }
587             } else {
588                 const uint8_t* strings = (uint8_t*)mStrings;
589                 const uint8_t* u8str = strings+off;
590 
591                 *u16len = decodeLength(&u8str);
592                 size_t u8len = decodeLength(&u8str);
593 
594                 // encLen must be less than 0x7FFF due to encoding.
595                 if ((uint32_t)(u8str+u8len-strings) < mStringPoolSize) {
596                     AutoMutex lock(mDecodeLock);
597 
598                     if (mCache[idx] != NULL) {
599                         return mCache[idx];
600                     }
601 
602                     ssize_t actualLen = utf8_to_utf16_length(u8str, u8len);
603                     if (actualLen < 0 || (size_t)actualLen != *u16len) {
604                         LOGW("Bad string block: string #%lld decoded length is not correct "
605                                 "%lld vs %llu\n",
606                                 (long long)idx, (long long)actualLen, (long long)*u16len);
607                         return NULL;
608                     }
609 
610                     char16_t *u16str = (char16_t *)calloc(*u16len+1, sizeof(char16_t));
611                     if (!u16str) {
612                         LOGW("No memory when trying to allocate decode cache for string #%d\n",
613                                 (int)idx);
614                         return NULL;
615                     }
616 
617                     utf8_to_utf16(u8str, u8len, u16str);
618                     mCache[idx] = u16str;
619                     return u16str;
620                 } else {
621                     LOGW("Bad string block: string #%lld extends to %lld, past end at %lld\n",
622                             (long long)idx, (long long)(u8str+u8len-strings),
623                             (long long)mStringPoolSize);
624                 }
625             }
626         } else {
627             LOGW("Bad string block: string #%d entry is at %d, past end at %d\n",
628                     (int)idx, (int)(off*sizeof(uint16_t)),
629                     (int)(mStringPoolSize*sizeof(uint16_t)));
630         }
631     }
632     return NULL;
633 }
634 
string8At(size_t idx,size_t * outLen) const635 const char* ResStringPool::string8At(size_t idx, size_t* outLen) const
636 {
637     if (mError == NO_ERROR && idx < mHeader->stringCount) {
638         const bool isUTF8 = (mHeader->flags&ResStringPool_header::UTF8_FLAG) != 0;
639         const uint32_t off = mEntries[idx]/(isUTF8?sizeof(char):sizeof(char16_t));
640         if (off < (mStringPoolSize-1)) {
641             if (isUTF8) {
642                 const uint8_t* strings = (uint8_t*)mStrings;
643                 const uint8_t* str = strings+off;
644                 *outLen = decodeLength(&str);
645                 size_t encLen = decodeLength(&str);
646                 if ((uint32_t)(str+encLen-strings) < mStringPoolSize) {
647                     return (const char*)str;
648                 } else {
649                     LOGW("Bad string block: string #%d extends to %d, past end at %d\n",
650                             (int)idx, (int)(str+encLen-strings), (int)mStringPoolSize);
651                 }
652             }
653         } else {
654             LOGW("Bad string block: string #%d entry is at %d, past end at %d\n",
655                     (int)idx, (int)(off*sizeof(uint16_t)),
656                     (int)(mStringPoolSize*sizeof(uint16_t)));
657         }
658     }
659     return NULL;
660 }
661 
styleAt(const ResStringPool_ref & ref) const662 const ResStringPool_span* ResStringPool::styleAt(const ResStringPool_ref& ref) const
663 {
664     return styleAt(ref.index);
665 }
666 
styleAt(size_t idx) const667 const ResStringPool_span* ResStringPool::styleAt(size_t idx) const
668 {
669     if (mError == NO_ERROR && idx < mHeader->styleCount) {
670         const uint32_t off = (mEntryStyles[idx]/sizeof(uint32_t));
671         if (off < mStylePoolSize) {
672             return (const ResStringPool_span*)(mStyles+off);
673         } else {
674             LOGW("Bad string block: style #%d entry is at %d, past end at %d\n",
675                     (int)idx, (int)(off*sizeof(uint32_t)),
676                     (int)(mStylePoolSize*sizeof(uint32_t)));
677         }
678     }
679     return NULL;
680 }
681 
indexOfString(const char16_t * str,size_t strLen) const682 ssize_t ResStringPool::indexOfString(const char16_t* str, size_t strLen) const
683 {
684     if (mError != NO_ERROR) {
685         return mError;
686     }
687 
688     size_t len;
689 
690     // TODO optimize searching for UTF-8 strings taking into account
691     // the cache fill to determine when to convert the searched-for
692     // string key to UTF-8.
693 
694     if (mHeader->flags&ResStringPool_header::SORTED_FLAG) {
695         // Do a binary search for the string...
696         ssize_t l = 0;
697         ssize_t h = mHeader->stringCount-1;
698 
699         ssize_t mid;
700         while (l <= h) {
701             mid = l + (h - l)/2;
702             const char16_t* s = stringAt(mid, &len);
703             int c = s ? strzcmp16(s, len, str, strLen) : -1;
704             POOL_NOISY(printf("Looking for %s, at %s, cmp=%d, l/mid/h=%d/%d/%d\n",
705                          String8(str).string(),
706                          String8(s).string(),
707                          c, (int)l, (int)mid, (int)h));
708             if (c == 0) {
709                 return mid;
710             } else if (c < 0) {
711                 l = mid + 1;
712             } else {
713                 h = mid - 1;
714             }
715         }
716     } else {
717         // It is unusual to get the ID from an unsorted string block...
718         // most often this happens because we want to get IDs for style
719         // span tags; since those always appear at the end of the string
720         // block, start searching at the back.
721         for (int i=mHeader->stringCount-1; i>=0; i--) {
722             const char16_t* s = stringAt(i, &len);
723             POOL_NOISY(printf("Looking for %s, at %s, i=%d\n",
724                          String8(str, strLen).string(),
725                          String8(s).string(),
726                          i));
727             if (s && strzcmp16(s, len, str, strLen) == 0) {
728                 return i;
729             }
730         }
731     }
732 
733     return NAME_NOT_FOUND;
734 }
735 
size() const736 size_t ResStringPool::size() const
737 {
738     return (mError == NO_ERROR) ? mHeader->stringCount : 0;
739 }
740 
741 #ifndef HAVE_ANDROID_OS
isUTF8() const742 bool ResStringPool::isUTF8() const
743 {
744     return (mHeader->flags&ResStringPool_header::UTF8_FLAG)!=0;
745 }
746 #endif
747 
748 // --------------------------------------------------------------------
749 // --------------------------------------------------------------------
750 // --------------------------------------------------------------------
751 
ResXMLParser(const ResXMLTree & tree)752 ResXMLParser::ResXMLParser(const ResXMLTree& tree)
753     : mTree(tree), mEventCode(BAD_DOCUMENT)
754 {
755 }
756 
restart()757 void ResXMLParser::restart()
758 {
759     mCurNode = NULL;
760     mEventCode = mTree.mError == NO_ERROR ? START_DOCUMENT : BAD_DOCUMENT;
761 }
getStrings() const762 const ResStringPool& ResXMLParser::getStrings() const
763 {
764     return mTree.mStrings;
765 }
766 
getEventType() const767 ResXMLParser::event_code_t ResXMLParser::getEventType() const
768 {
769     return mEventCode;
770 }
771 
next()772 ResXMLParser::event_code_t ResXMLParser::next()
773 {
774     if (mEventCode == START_DOCUMENT) {
775         mCurNode = mTree.mRootNode;
776         mCurExt = mTree.mRootExt;
777         return (mEventCode=mTree.mRootCode);
778     } else if (mEventCode >= FIRST_CHUNK_CODE) {
779         return nextNode();
780     }
781     return mEventCode;
782 }
783 
getCommentID() const784 int32_t ResXMLParser::getCommentID() const
785 {
786     return mCurNode != NULL ? dtohl(mCurNode->comment.index) : -1;
787 }
788 
getComment(size_t * outLen) const789 const uint16_t* ResXMLParser::getComment(size_t* outLen) const
790 {
791     int32_t id = getCommentID();
792     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
793 }
794 
getLineNumber() const795 uint32_t ResXMLParser::getLineNumber() const
796 {
797     return mCurNode != NULL ? dtohl(mCurNode->lineNumber) : -1;
798 }
799 
getTextID() const800 int32_t ResXMLParser::getTextID() const
801 {
802     if (mEventCode == TEXT) {
803         return dtohl(((const ResXMLTree_cdataExt*)mCurExt)->data.index);
804     }
805     return -1;
806 }
807 
getText(size_t * outLen) const808 const uint16_t* ResXMLParser::getText(size_t* outLen) const
809 {
810     int32_t id = getTextID();
811     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
812 }
813 
getTextValue(Res_value * outValue) const814 ssize_t ResXMLParser::getTextValue(Res_value* outValue) const
815 {
816     if (mEventCode == TEXT) {
817         outValue->copyFrom_dtoh(((const ResXMLTree_cdataExt*)mCurExt)->typedData);
818         return sizeof(Res_value);
819     }
820     return BAD_TYPE;
821 }
822 
getNamespacePrefixID() const823 int32_t ResXMLParser::getNamespacePrefixID() const
824 {
825     if (mEventCode == START_NAMESPACE || mEventCode == END_NAMESPACE) {
826         return dtohl(((const ResXMLTree_namespaceExt*)mCurExt)->prefix.index);
827     }
828     return -1;
829 }
830 
getNamespacePrefix(size_t * outLen) const831 const uint16_t* ResXMLParser::getNamespacePrefix(size_t* outLen) const
832 {
833     int32_t id = getNamespacePrefixID();
834     //printf("prefix=%d  event=%p\n", id, mEventCode);
835     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
836 }
837 
getNamespaceUriID() const838 int32_t ResXMLParser::getNamespaceUriID() const
839 {
840     if (mEventCode == START_NAMESPACE || mEventCode == END_NAMESPACE) {
841         return dtohl(((const ResXMLTree_namespaceExt*)mCurExt)->uri.index);
842     }
843     return -1;
844 }
845 
getNamespaceUri(size_t * outLen) const846 const uint16_t* ResXMLParser::getNamespaceUri(size_t* outLen) const
847 {
848     int32_t id = getNamespaceUriID();
849     //printf("uri=%d  event=%p\n", id, mEventCode);
850     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
851 }
852 
getElementNamespaceID() const853 int32_t ResXMLParser::getElementNamespaceID() const
854 {
855     if (mEventCode == START_TAG) {
856         return dtohl(((const ResXMLTree_attrExt*)mCurExt)->ns.index);
857     }
858     if (mEventCode == END_TAG) {
859         return dtohl(((const ResXMLTree_endElementExt*)mCurExt)->ns.index);
860     }
861     return -1;
862 }
863 
getElementNamespace(size_t * outLen) const864 const uint16_t* ResXMLParser::getElementNamespace(size_t* outLen) const
865 {
866     int32_t id = getElementNamespaceID();
867     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
868 }
869 
getElementNameID() const870 int32_t ResXMLParser::getElementNameID() const
871 {
872     if (mEventCode == START_TAG) {
873         return dtohl(((const ResXMLTree_attrExt*)mCurExt)->name.index);
874     }
875     if (mEventCode == END_TAG) {
876         return dtohl(((const ResXMLTree_endElementExt*)mCurExt)->name.index);
877     }
878     return -1;
879 }
880 
getElementName(size_t * outLen) const881 const uint16_t* ResXMLParser::getElementName(size_t* outLen) const
882 {
883     int32_t id = getElementNameID();
884     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
885 }
886 
getAttributeCount() const887 size_t ResXMLParser::getAttributeCount() const
888 {
889     if (mEventCode == START_TAG) {
890         return dtohs(((const ResXMLTree_attrExt*)mCurExt)->attributeCount);
891     }
892     return 0;
893 }
894 
getAttributeNamespaceID(size_t idx) const895 int32_t ResXMLParser::getAttributeNamespaceID(size_t idx) const
896 {
897     if (mEventCode == START_TAG) {
898         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
899         if (idx < dtohs(tag->attributeCount)) {
900             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
901                 (((const uint8_t*)tag)
902                  + dtohs(tag->attributeStart)
903                  + (dtohs(tag->attributeSize)*idx));
904             return dtohl(attr->ns.index);
905         }
906     }
907     return -2;
908 }
909 
getAttributeNamespace(size_t idx,size_t * outLen) const910 const uint16_t* ResXMLParser::getAttributeNamespace(size_t idx, size_t* outLen) const
911 {
912     int32_t id = getAttributeNamespaceID(idx);
913     //printf("attribute namespace=%d  idx=%d  event=%p\n", id, idx, mEventCode);
914     //XML_NOISY(printf("getAttributeNamespace 0x%x=0x%x\n", idx, id));
915     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
916 }
917 
getAttributeNameID(size_t idx) const918 int32_t ResXMLParser::getAttributeNameID(size_t idx) const
919 {
920     if (mEventCode == START_TAG) {
921         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
922         if (idx < dtohs(tag->attributeCount)) {
923             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
924                 (((const uint8_t*)tag)
925                  + dtohs(tag->attributeStart)
926                  + (dtohs(tag->attributeSize)*idx));
927             return dtohl(attr->name.index);
928         }
929     }
930     return -1;
931 }
932 
getAttributeName(size_t idx,size_t * outLen) const933 const uint16_t* ResXMLParser::getAttributeName(size_t idx, size_t* outLen) const
934 {
935     int32_t id = getAttributeNameID(idx);
936     //printf("attribute name=%d  idx=%d  event=%p\n", id, idx, mEventCode);
937     //XML_NOISY(printf("getAttributeName 0x%x=0x%x\n", idx, id));
938     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
939 }
940 
getAttributeNameResID(size_t idx) const941 uint32_t ResXMLParser::getAttributeNameResID(size_t idx) const
942 {
943     int32_t id = getAttributeNameID(idx);
944     if (id >= 0 && (size_t)id < mTree.mNumResIds) {
945         return dtohl(mTree.mResIds[id]);
946     }
947     return 0;
948 }
949 
getAttributeValueStringID(size_t idx) const950 int32_t ResXMLParser::getAttributeValueStringID(size_t idx) const
951 {
952     if (mEventCode == START_TAG) {
953         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
954         if (idx < dtohs(tag->attributeCount)) {
955             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
956                 (((const uint8_t*)tag)
957                  + dtohs(tag->attributeStart)
958                  + (dtohs(tag->attributeSize)*idx));
959             return dtohl(attr->rawValue.index);
960         }
961     }
962     return -1;
963 }
964 
getAttributeStringValue(size_t idx,size_t * outLen) const965 const uint16_t* ResXMLParser::getAttributeStringValue(size_t idx, size_t* outLen) const
966 {
967     int32_t id = getAttributeValueStringID(idx);
968     //XML_NOISY(printf("getAttributeValue 0x%x=0x%x\n", idx, id));
969     return id >= 0 ? mTree.mStrings.stringAt(id, outLen) : NULL;
970 }
971 
getAttributeDataType(size_t idx) const972 int32_t ResXMLParser::getAttributeDataType(size_t idx) const
973 {
974     if (mEventCode == START_TAG) {
975         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
976         if (idx < dtohs(tag->attributeCount)) {
977             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
978                 (((const uint8_t*)tag)
979                  + dtohs(tag->attributeStart)
980                  + (dtohs(tag->attributeSize)*idx));
981             return attr->typedValue.dataType;
982         }
983     }
984     return Res_value::TYPE_NULL;
985 }
986 
getAttributeData(size_t idx) const987 int32_t ResXMLParser::getAttributeData(size_t idx) const
988 {
989     if (mEventCode == START_TAG) {
990         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
991         if (idx < dtohs(tag->attributeCount)) {
992             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
993                 (((const uint8_t*)tag)
994                  + dtohs(tag->attributeStart)
995                  + (dtohs(tag->attributeSize)*idx));
996             return dtohl(attr->typedValue.data);
997         }
998     }
999     return 0;
1000 }
1001 
getAttributeValue(size_t idx,Res_value * outValue) const1002 ssize_t ResXMLParser::getAttributeValue(size_t idx, Res_value* outValue) const
1003 {
1004     if (mEventCode == START_TAG) {
1005         const ResXMLTree_attrExt* tag = (const ResXMLTree_attrExt*)mCurExt;
1006         if (idx < dtohs(tag->attributeCount)) {
1007             const ResXMLTree_attribute* attr = (const ResXMLTree_attribute*)
1008                 (((const uint8_t*)tag)
1009                  + dtohs(tag->attributeStart)
1010                  + (dtohs(tag->attributeSize)*idx));
1011             outValue->copyFrom_dtoh(attr->typedValue);
1012             return sizeof(Res_value);
1013         }
1014     }
1015     return BAD_TYPE;
1016 }
1017 
indexOfAttribute(const char * ns,const char * attr) const1018 ssize_t ResXMLParser::indexOfAttribute(const char* ns, const char* attr) const
1019 {
1020     String16 nsStr(ns != NULL ? ns : "");
1021     String16 attrStr(attr);
1022     return indexOfAttribute(ns ? nsStr.string() : NULL, ns ? nsStr.size() : 0,
1023                             attrStr.string(), attrStr.size());
1024 }
1025 
indexOfAttribute(const char16_t * ns,size_t nsLen,const char16_t * attr,size_t attrLen) const1026 ssize_t ResXMLParser::indexOfAttribute(const char16_t* ns, size_t nsLen,
1027                                        const char16_t* attr, size_t attrLen) const
1028 {
1029     if (mEventCode == START_TAG) {
1030         const size_t N = getAttributeCount();
1031         for (size_t i=0; i<N; i++) {
1032             size_t curNsLen, curAttrLen;
1033             const char16_t* curNs = getAttributeNamespace(i, &curNsLen);
1034             const char16_t* curAttr = getAttributeName(i, &curAttrLen);
1035             //printf("%d: ns=%p attr=%p curNs=%p curAttr=%p\n",
1036             //       i, ns, attr, curNs, curAttr);
1037             //printf(" --> attr=%s, curAttr=%s\n",
1038             //       String8(attr).string(), String8(curAttr).string());
1039             if (attr && curAttr && (strzcmp16(attr, attrLen, curAttr, curAttrLen) == 0)) {
1040                 if (ns == NULL) {
1041                     if (curNs == NULL) return i;
1042                 } else if (curNs != NULL) {
1043                     //printf(" --> ns=%s, curNs=%s\n",
1044                     //       String8(ns).string(), String8(curNs).string());
1045                     if (strzcmp16(ns, nsLen, curNs, curNsLen) == 0) return i;
1046                 }
1047             }
1048         }
1049     }
1050 
1051     return NAME_NOT_FOUND;
1052 }
1053 
indexOfID() const1054 ssize_t ResXMLParser::indexOfID() const
1055 {
1056     if (mEventCode == START_TAG) {
1057         const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->idIndex);
1058         if (idx > 0) return (idx-1);
1059     }
1060     return NAME_NOT_FOUND;
1061 }
1062 
indexOfClass() const1063 ssize_t ResXMLParser::indexOfClass() const
1064 {
1065     if (mEventCode == START_TAG) {
1066         const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->classIndex);
1067         if (idx > 0) return (idx-1);
1068     }
1069     return NAME_NOT_FOUND;
1070 }
1071 
indexOfStyle() const1072 ssize_t ResXMLParser::indexOfStyle() const
1073 {
1074     if (mEventCode == START_TAG) {
1075         const ssize_t idx = dtohs(((const ResXMLTree_attrExt*)mCurExt)->styleIndex);
1076         if (idx > 0) return (idx-1);
1077     }
1078     return NAME_NOT_FOUND;
1079 }
1080 
nextNode()1081 ResXMLParser::event_code_t ResXMLParser::nextNode()
1082 {
1083     if (mEventCode < 0) {
1084         return mEventCode;
1085     }
1086 
1087     do {
1088         const ResXMLTree_node* next = (const ResXMLTree_node*)
1089             (((const uint8_t*)mCurNode) + dtohl(mCurNode->header.size));
1090         //LOGW("Next node: prev=%p, next=%p\n", mCurNode, next);
1091 
1092         if (((const uint8_t*)next) >= mTree.mDataEnd) {
1093             mCurNode = NULL;
1094             return (mEventCode=END_DOCUMENT);
1095         }
1096 
1097         if (mTree.validateNode(next) != NO_ERROR) {
1098             mCurNode = NULL;
1099             return (mEventCode=BAD_DOCUMENT);
1100         }
1101 
1102         mCurNode = next;
1103         const uint16_t headerSize = dtohs(next->header.headerSize);
1104         const uint32_t totalSize = dtohl(next->header.size);
1105         mCurExt = ((const uint8_t*)next) + headerSize;
1106         size_t minExtSize = 0;
1107         event_code_t eventCode = (event_code_t)dtohs(next->header.type);
1108         switch ((mEventCode=eventCode)) {
1109             case RES_XML_START_NAMESPACE_TYPE:
1110             case RES_XML_END_NAMESPACE_TYPE:
1111                 minExtSize = sizeof(ResXMLTree_namespaceExt);
1112                 break;
1113             case RES_XML_START_ELEMENT_TYPE:
1114                 minExtSize = sizeof(ResXMLTree_attrExt);
1115                 break;
1116             case RES_XML_END_ELEMENT_TYPE:
1117                 minExtSize = sizeof(ResXMLTree_endElementExt);
1118                 break;
1119             case RES_XML_CDATA_TYPE:
1120                 minExtSize = sizeof(ResXMLTree_cdataExt);
1121                 break;
1122             default:
1123                 LOGW("Unknown XML block: header type %d in node at %d\n",
1124                      (int)dtohs(next->header.type),
1125                      (int)(((const uint8_t*)next)-((const uint8_t*)mTree.mHeader)));
1126                 continue;
1127         }
1128 
1129         if ((totalSize-headerSize) < minExtSize) {
1130             LOGW("Bad XML block: header type 0x%x in node at 0x%x has size %d, need %d\n",
1131                  (int)dtohs(next->header.type),
1132                  (int)(((const uint8_t*)next)-((const uint8_t*)mTree.mHeader)),
1133                  (int)(totalSize-headerSize), (int)minExtSize);
1134             return (mEventCode=BAD_DOCUMENT);
1135         }
1136 
1137         //printf("CurNode=%p, CurExt=%p, headerSize=%d, minExtSize=%d\n",
1138         //       mCurNode, mCurExt, headerSize, minExtSize);
1139 
1140         return eventCode;
1141     } while (true);
1142 }
1143 
getPosition(ResXMLParser::ResXMLPosition * pos) const1144 void ResXMLParser::getPosition(ResXMLParser::ResXMLPosition* pos) const
1145 {
1146     pos->eventCode = mEventCode;
1147     pos->curNode = mCurNode;
1148     pos->curExt = mCurExt;
1149 }
1150 
setPosition(const ResXMLParser::ResXMLPosition & pos)1151 void ResXMLParser::setPosition(const ResXMLParser::ResXMLPosition& pos)
1152 {
1153     mEventCode = pos.eventCode;
1154     mCurNode = pos.curNode;
1155     mCurExt = pos.curExt;
1156 }
1157 
1158 
1159 // --------------------------------------------------------------------
1160 
1161 static volatile int32_t gCount = 0;
1162 
ResXMLTree()1163 ResXMLTree::ResXMLTree()
1164     : ResXMLParser(*this)
1165     , mError(NO_INIT), mOwnedData(NULL)
1166 {
1167     //LOGI("Creating ResXMLTree %p #%d\n", this, android_atomic_inc(&gCount)+1);
1168     restart();
1169 }
1170 
ResXMLTree(const void * data,size_t size,bool copyData)1171 ResXMLTree::ResXMLTree(const void* data, size_t size, bool copyData)
1172     : ResXMLParser(*this)
1173     , mError(NO_INIT), mOwnedData(NULL)
1174 {
1175     //LOGI("Creating ResXMLTree %p #%d\n", this, android_atomic_inc(&gCount)+1);
1176     setTo(data, size, copyData);
1177 }
1178 
~ResXMLTree()1179 ResXMLTree::~ResXMLTree()
1180 {
1181     //LOGI("Destroying ResXMLTree in %p #%d\n", this, android_atomic_dec(&gCount)-1);
1182     uninit();
1183 }
1184 
setTo(const void * data,size_t size,bool copyData)1185 status_t ResXMLTree::setTo(const void* data, size_t size, bool copyData)
1186 {
1187     uninit();
1188     mEventCode = START_DOCUMENT;
1189 
1190     if (copyData) {
1191         mOwnedData = malloc(size);
1192         if (mOwnedData == NULL) {
1193             return (mError=NO_MEMORY);
1194         }
1195         memcpy(mOwnedData, data, size);
1196         data = mOwnedData;
1197     }
1198 
1199     mHeader = (const ResXMLTree_header*)data;
1200     mSize = dtohl(mHeader->header.size);
1201     if (dtohs(mHeader->header.headerSize) > mSize || mSize > size) {
1202         LOGW("Bad XML block: header size %d or total size %d is larger than data size %d\n",
1203              (int)dtohs(mHeader->header.headerSize),
1204              (int)dtohl(mHeader->header.size), (int)size);
1205         mError = BAD_TYPE;
1206         restart();
1207         return mError;
1208     }
1209     mDataEnd = ((const uint8_t*)mHeader) + mSize;
1210 
1211     mStrings.uninit();
1212     mRootNode = NULL;
1213     mResIds = NULL;
1214     mNumResIds = 0;
1215 
1216     // First look for a couple interesting chunks: the string block
1217     // and first XML node.
1218     const ResChunk_header* chunk =
1219         (const ResChunk_header*)(((const uint8_t*)mHeader) + dtohs(mHeader->header.headerSize));
1220     const ResChunk_header* lastChunk = chunk;
1221     while (((const uint8_t*)chunk) < (mDataEnd-sizeof(ResChunk_header)) &&
1222            ((const uint8_t*)chunk) < (mDataEnd-dtohl(chunk->size))) {
1223         status_t err = validate_chunk(chunk, sizeof(ResChunk_header), mDataEnd, "XML");
1224         if (err != NO_ERROR) {
1225             mError = err;
1226             goto done;
1227         }
1228         const uint16_t type = dtohs(chunk->type);
1229         const size_t size = dtohl(chunk->size);
1230         XML_NOISY(printf("Scanning @ %p: type=0x%x, size=0x%x\n",
1231                      (void*)(((uint32_t)chunk)-((uint32_t)mHeader)), type, size));
1232         if (type == RES_STRING_POOL_TYPE) {
1233             mStrings.setTo(chunk, size);
1234         } else if (type == RES_XML_RESOURCE_MAP_TYPE) {
1235             mResIds = (const uint32_t*)
1236                 (((const uint8_t*)chunk)+dtohs(chunk->headerSize));
1237             mNumResIds = (dtohl(chunk->size)-dtohs(chunk->headerSize))/sizeof(uint32_t);
1238         } else if (type >= RES_XML_FIRST_CHUNK_TYPE
1239                    && type <= RES_XML_LAST_CHUNK_TYPE) {
1240             if (validateNode((const ResXMLTree_node*)chunk) != NO_ERROR) {
1241                 mError = BAD_TYPE;
1242                 goto done;
1243             }
1244             mCurNode = (const ResXMLTree_node*)lastChunk;
1245             if (nextNode() == BAD_DOCUMENT) {
1246                 mError = BAD_TYPE;
1247                 goto done;
1248             }
1249             mRootNode = mCurNode;
1250             mRootExt = mCurExt;
1251             mRootCode = mEventCode;
1252             break;
1253         } else {
1254             XML_NOISY(printf("Skipping unknown chunk!\n"));
1255         }
1256         lastChunk = chunk;
1257         chunk = (const ResChunk_header*)
1258             (((const uint8_t*)chunk) + size);
1259     }
1260 
1261     if (mRootNode == NULL) {
1262         LOGW("Bad XML block: no root element node found\n");
1263         mError = BAD_TYPE;
1264         goto done;
1265     }
1266 
1267     mError = mStrings.getError();
1268 
1269 done:
1270     restart();
1271     return mError;
1272 }
1273 
getError() const1274 status_t ResXMLTree::getError() const
1275 {
1276     return mError;
1277 }
1278 
uninit()1279 void ResXMLTree::uninit()
1280 {
1281     mError = NO_INIT;
1282     mStrings.uninit();
1283     if (mOwnedData) {
1284         free(mOwnedData);
1285         mOwnedData = NULL;
1286     }
1287     restart();
1288 }
1289 
validateNode(const ResXMLTree_node * node) const1290 status_t ResXMLTree::validateNode(const ResXMLTree_node* node) const
1291 {
1292     const uint16_t eventCode = dtohs(node->header.type);
1293 
1294     status_t err = validate_chunk(
1295         &node->header, sizeof(ResXMLTree_node),
1296         mDataEnd, "ResXMLTree_node");
1297 
1298     if (err >= NO_ERROR) {
1299         // Only perform additional validation on START nodes
1300         if (eventCode != RES_XML_START_ELEMENT_TYPE) {
1301             return NO_ERROR;
1302         }
1303 
1304         const uint16_t headerSize = dtohs(node->header.headerSize);
1305         const uint32_t size = dtohl(node->header.size);
1306         const ResXMLTree_attrExt* attrExt = (const ResXMLTree_attrExt*)
1307             (((const uint8_t*)node) + headerSize);
1308         // check for sensical values pulled out of the stream so far...
1309         if ((size >= headerSize + sizeof(ResXMLTree_attrExt))
1310                 && ((void*)attrExt > (void*)node)) {
1311             const size_t attrSize = ((size_t)dtohs(attrExt->attributeSize))
1312                 * dtohs(attrExt->attributeCount);
1313             if ((dtohs(attrExt->attributeStart)+attrSize) <= (size-headerSize)) {
1314                 return NO_ERROR;
1315             }
1316             LOGW("Bad XML block: node attributes use 0x%x bytes, only have 0x%x bytes\n",
1317                     (unsigned int)(dtohs(attrExt->attributeStart)+attrSize),
1318                     (unsigned int)(size-headerSize));
1319         }
1320         else {
1321             LOGW("Bad XML start block: node header size 0x%x, size 0x%x\n",
1322                 (unsigned int)headerSize, (unsigned int)size);
1323         }
1324         return BAD_TYPE;
1325     }
1326 
1327     return err;
1328 
1329 #if 0
1330     const bool isStart = dtohs(node->header.type) == RES_XML_START_ELEMENT_TYPE;
1331 
1332     const uint16_t headerSize = dtohs(node->header.headerSize);
1333     const uint32_t size = dtohl(node->header.size);
1334 
1335     if (headerSize >= (isStart ? sizeof(ResXMLTree_attrNode) : sizeof(ResXMLTree_node))) {
1336         if (size >= headerSize) {
1337             if (((const uint8_t*)node) <= (mDataEnd-size)) {
1338                 if (!isStart) {
1339                     return NO_ERROR;
1340                 }
1341                 if ((((size_t)dtohs(node->attributeSize))*dtohs(node->attributeCount))
1342                         <= (size-headerSize)) {
1343                     return NO_ERROR;
1344                 }
1345                 LOGW("Bad XML block: node attributes use 0x%x bytes, only have 0x%x bytes\n",
1346                         ((int)dtohs(node->attributeSize))*dtohs(node->attributeCount),
1347                         (int)(size-headerSize));
1348                 return BAD_TYPE;
1349             }
1350             LOGW("Bad XML block: node at 0x%x extends beyond data end 0x%x\n",
1351                     (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)), (int)mSize);
1352             return BAD_TYPE;
1353         }
1354         LOGW("Bad XML block: node at 0x%x header size 0x%x smaller than total size 0x%x\n",
1355                 (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)),
1356                 (int)headerSize, (int)size);
1357         return BAD_TYPE;
1358     }
1359     LOGW("Bad XML block: node at 0x%x header size 0x%x too small\n",
1360             (int)(((const uint8_t*)node)-((const uint8_t*)mHeader)),
1361             (int)headerSize);
1362     return BAD_TYPE;
1363 #endif
1364 }
1365 
1366 // --------------------------------------------------------------------
1367 // --------------------------------------------------------------------
1368 // --------------------------------------------------------------------
1369 
1370 struct ResTable::Header
1371 {
Headerandroid::ResTable::Header1372     Header(ResTable* _owner) : owner(_owner), ownedData(NULL), header(NULL),
1373         resourceIDMap(NULL), resourceIDMapSize(0) { }
1374 
~Headerandroid::ResTable::Header1375     ~Header()
1376     {
1377         free(resourceIDMap);
1378     }
1379 
1380     ResTable* const                 owner;
1381     void*                           ownedData;
1382     const ResTable_header*          header;
1383     size_t                          size;
1384     const uint8_t*                  dataEnd;
1385     size_t                          index;
1386     void*                           cookie;
1387 
1388     ResStringPool                   values;
1389     uint32_t*                       resourceIDMap;
1390     size_t                          resourceIDMapSize;
1391 };
1392 
1393 struct ResTable::Type
1394 {
Typeandroid::ResTable::Type1395     Type(const Header* _header, const Package* _package, size_t count)
1396         : header(_header), package(_package), entryCount(count),
1397           typeSpec(NULL), typeSpecFlags(NULL) { }
1398     const Header* const             header;
1399     const Package* const            package;
1400     const size_t                    entryCount;
1401     const ResTable_typeSpec*        typeSpec;
1402     const uint32_t*                 typeSpecFlags;
1403     Vector<const ResTable_type*>    configs;
1404 };
1405 
1406 struct ResTable::Package
1407 {
Packageandroid::ResTable::Package1408     Package(ResTable* _owner, const Header* _header, const ResTable_package* _package)
1409         : owner(_owner), header(_header), package(_package) { }
~Packageandroid::ResTable::Package1410     ~Package()
1411     {
1412         size_t i = types.size();
1413         while (i > 0) {
1414             i--;
1415             delete types[i];
1416         }
1417     }
1418 
1419     ResTable* const                 owner;
1420     const Header* const             header;
1421     const ResTable_package* const   package;
1422     Vector<Type*>                   types;
1423 
1424     ResStringPool                   typeStrings;
1425     ResStringPool                   keyStrings;
1426 
getTypeandroid::ResTable::Package1427     const Type* getType(size_t idx) const {
1428         return idx < types.size() ? types[idx] : NULL;
1429     }
1430 };
1431 
1432 // A group of objects describing a particular resource package.
1433 // The first in 'package' is always the root object (from the resource
1434 // table that defined the package); the ones after are skins on top of it.
1435 struct ResTable::PackageGroup
1436 {
PackageGroupandroid::ResTable::PackageGroup1437     PackageGroup(ResTable* _owner, const String16& _name, uint32_t _id)
1438         : owner(_owner), name(_name), id(_id), typeCount(0), bags(NULL) { }
~PackageGroupandroid::ResTable::PackageGroup1439     ~PackageGroup() {
1440         clearBagCache();
1441         const size_t N = packages.size();
1442         for (size_t i=0; i<N; i++) {
1443             Package* pkg = packages[i];
1444             if (pkg->owner == owner) {
1445                 delete pkg;
1446             }
1447         }
1448     }
1449 
clearBagCacheandroid::ResTable::PackageGroup1450     void clearBagCache() {
1451         if (bags) {
1452             TABLE_NOISY(printf("bags=%p\n", bags));
1453             Package* pkg = packages[0];
1454             TABLE_NOISY(printf("typeCount=%x\n", typeCount));
1455             for (size_t i=0; i<typeCount; i++) {
1456                 TABLE_NOISY(printf("type=%d\n", i));
1457                 const Type* type = pkg->getType(i);
1458                 if (type != NULL) {
1459                     bag_set** typeBags = bags[i];
1460                     TABLE_NOISY(printf("typeBags=%p\n", typeBags));
1461                     if (typeBags) {
1462                         TABLE_NOISY(printf("type->entryCount=%x\n", type->entryCount));
1463                         const size_t N = type->entryCount;
1464                         for (size_t j=0; j<N; j++) {
1465                             if (typeBags[j] && typeBags[j] != (bag_set*)0xFFFFFFFF)
1466                                 free(typeBags[j]);
1467                         }
1468                         free(typeBags);
1469                     }
1470                 }
1471             }
1472             free(bags);
1473             bags = NULL;
1474         }
1475     }
1476 
1477     ResTable* const                 owner;
1478     String16 const                  name;
1479     uint32_t const                  id;
1480     Vector<Package*>                packages;
1481 
1482     // This is for finding typeStrings and other common package stuff.
1483     Package*                        basePackage;
1484 
1485     // For quick access.
1486     size_t                          typeCount;
1487 
1488     // Computed attribute bags, first indexed by the type and second
1489     // by the entry in that type.
1490     bag_set***                      bags;
1491 };
1492 
1493 struct ResTable::bag_set
1494 {
1495     size_t numAttrs;    // number in array
1496     size_t availAttrs;  // total space in array
1497     uint32_t typeSpecFlags;
1498     // Followed by 'numAttr' bag_entry structures.
1499 };
1500 
Theme(const ResTable & table)1501 ResTable::Theme::Theme(const ResTable& table)
1502     : mTable(table)
1503 {
1504     memset(mPackages, 0, sizeof(mPackages));
1505 }
1506 
~Theme()1507 ResTable::Theme::~Theme()
1508 {
1509     for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1510         package_info* pi = mPackages[i];
1511         if (pi != NULL) {
1512             free_package(pi);
1513         }
1514     }
1515 }
1516 
free_package(package_info * pi)1517 void ResTable::Theme::free_package(package_info* pi)
1518 {
1519     for (size_t j=0; j<pi->numTypes; j++) {
1520         theme_entry* te = pi->types[j].entries;
1521         if (te != NULL) {
1522             free(te);
1523         }
1524     }
1525     free(pi);
1526 }
1527 
copy_package(package_info * pi)1528 ResTable::Theme::package_info* ResTable::Theme::copy_package(package_info* pi)
1529 {
1530     package_info* newpi = (package_info*)malloc(
1531         sizeof(package_info) + (pi->numTypes*sizeof(type_info)));
1532     newpi->numTypes = pi->numTypes;
1533     for (size_t j=0; j<newpi->numTypes; j++) {
1534         size_t cnt = pi->types[j].numEntries;
1535         newpi->types[j].numEntries = cnt;
1536         theme_entry* te = pi->types[j].entries;
1537         if (te != NULL) {
1538             theme_entry* newte = (theme_entry*)malloc(cnt*sizeof(theme_entry));
1539             newpi->types[j].entries = newte;
1540             memcpy(newte, te, cnt*sizeof(theme_entry));
1541         } else {
1542             newpi->types[j].entries = NULL;
1543         }
1544     }
1545     return newpi;
1546 }
1547 
applyStyle(uint32_t resID,bool force)1548 status_t ResTable::Theme::applyStyle(uint32_t resID, bool force)
1549 {
1550     const bag_entry* bag;
1551     uint32_t bagTypeSpecFlags = 0;
1552     mTable.lock();
1553     const ssize_t N = mTable.getBagLocked(resID, &bag, &bagTypeSpecFlags);
1554     TABLE_NOISY(LOGV("Applying style 0x%08x to theme %p, count=%d", resID, this, N));
1555     if (N < 0) {
1556         mTable.unlock();
1557         return N;
1558     }
1559 
1560     uint32_t curPackage = 0xffffffff;
1561     ssize_t curPackageIndex = 0;
1562     package_info* curPI = NULL;
1563     uint32_t curType = 0xffffffff;
1564     size_t numEntries = 0;
1565     theme_entry* curEntries = NULL;
1566 
1567     const bag_entry* end = bag + N;
1568     while (bag < end) {
1569         const uint32_t attrRes = bag->map.name.ident;
1570         const uint32_t p = Res_GETPACKAGE(attrRes);
1571         const uint32_t t = Res_GETTYPE(attrRes);
1572         const uint32_t e = Res_GETENTRY(attrRes);
1573 
1574         if (curPackage != p) {
1575             const ssize_t pidx = mTable.getResourcePackageIndex(attrRes);
1576             if (pidx < 0) {
1577                 LOGE("Style contains key with bad package: 0x%08x\n", attrRes);
1578                 bag++;
1579                 continue;
1580             }
1581             curPackage = p;
1582             curPackageIndex = pidx;
1583             curPI = mPackages[pidx];
1584             if (curPI == NULL) {
1585                 PackageGroup* const grp = mTable.mPackageGroups[pidx];
1586                 int cnt = grp->typeCount;
1587                 curPI = (package_info*)malloc(
1588                     sizeof(package_info) + (cnt*sizeof(type_info)));
1589                 curPI->numTypes = cnt;
1590                 memset(curPI->types, 0, cnt*sizeof(type_info));
1591                 mPackages[pidx] = curPI;
1592             }
1593             curType = 0xffffffff;
1594         }
1595         if (curType != t) {
1596             if (t >= curPI->numTypes) {
1597                 LOGE("Style contains key with bad type: 0x%08x\n", attrRes);
1598                 bag++;
1599                 continue;
1600             }
1601             curType = t;
1602             curEntries = curPI->types[t].entries;
1603             if (curEntries == NULL) {
1604                 PackageGroup* const grp = mTable.mPackageGroups[curPackageIndex];
1605                 const Type* type = grp->packages[0]->getType(t);
1606                 int cnt = type != NULL ? type->entryCount : 0;
1607                 curEntries = (theme_entry*)malloc(cnt*sizeof(theme_entry));
1608                 memset(curEntries, Res_value::TYPE_NULL, cnt*sizeof(theme_entry));
1609                 curPI->types[t].numEntries = cnt;
1610                 curPI->types[t].entries = curEntries;
1611             }
1612             numEntries = curPI->types[t].numEntries;
1613         }
1614         if (e >= numEntries) {
1615             LOGE("Style contains key with bad entry: 0x%08x\n", attrRes);
1616             bag++;
1617             continue;
1618         }
1619         theme_entry* curEntry = curEntries + e;
1620         TABLE_NOISY(LOGV("Attr 0x%08x: type=0x%x, data=0x%08x; curType=0x%x",
1621                    attrRes, bag->map.value.dataType, bag->map.value.data,
1622              curEntry->value.dataType));
1623         if (force || curEntry->value.dataType == Res_value::TYPE_NULL) {
1624             curEntry->stringBlock = bag->stringBlock;
1625             curEntry->typeSpecFlags |= bagTypeSpecFlags;
1626             curEntry->value = bag->map.value;
1627         }
1628 
1629         bag++;
1630     }
1631 
1632     mTable.unlock();
1633 
1634     //LOGI("Applying style 0x%08x (force=%d)  theme %p...\n", resID, force, this);
1635     //dumpToLog();
1636 
1637     return NO_ERROR;
1638 }
1639 
setTo(const Theme & other)1640 status_t ResTable::Theme::setTo(const Theme& other)
1641 {
1642     //LOGI("Setting theme %p from theme %p...\n", this, &other);
1643     //dumpToLog();
1644     //other.dumpToLog();
1645 
1646     if (&mTable == &other.mTable) {
1647         for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1648             if (mPackages[i] != NULL) {
1649                 free_package(mPackages[i]);
1650             }
1651             if (other.mPackages[i] != NULL) {
1652                 mPackages[i] = copy_package(other.mPackages[i]);
1653             } else {
1654                 mPackages[i] = NULL;
1655             }
1656         }
1657     } else {
1658         // @todo: need to really implement this, not just copy
1659         // the system package (which is still wrong because it isn't
1660         // fixing up resource references).
1661         for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1662             if (mPackages[i] != NULL) {
1663                 free_package(mPackages[i]);
1664             }
1665             if (i == 0 && other.mPackages[i] != NULL) {
1666                 mPackages[i] = copy_package(other.mPackages[i]);
1667             } else {
1668                 mPackages[i] = NULL;
1669             }
1670         }
1671     }
1672 
1673     //LOGI("Final theme:");
1674     //dumpToLog();
1675 
1676     return NO_ERROR;
1677 }
1678 
getAttribute(uint32_t resID,Res_value * outValue,uint32_t * outTypeSpecFlags) const1679 ssize_t ResTable::Theme::getAttribute(uint32_t resID, Res_value* outValue,
1680         uint32_t* outTypeSpecFlags) const
1681 {
1682     int cnt = 20;
1683 
1684     if (outTypeSpecFlags != NULL) *outTypeSpecFlags = 0;
1685 
1686     do {
1687         const ssize_t p = mTable.getResourcePackageIndex(resID);
1688         const uint32_t t = Res_GETTYPE(resID);
1689         const uint32_t e = Res_GETENTRY(resID);
1690 
1691         TABLE_THEME(LOGI("Looking up attr 0x%08x in theme %p", resID, this));
1692 
1693         if (p >= 0) {
1694             const package_info* const pi = mPackages[p];
1695             TABLE_THEME(LOGI("Found package: %p", pi));
1696             if (pi != NULL) {
1697                 TABLE_THEME(LOGI("Desired type index is %ld in avail %d", t, pi->numTypes));
1698                 if (t < pi->numTypes) {
1699                     const type_info& ti = pi->types[t];
1700                     TABLE_THEME(LOGI("Desired entry index is %ld in avail %d", e, ti.numEntries));
1701                     if (e < ti.numEntries) {
1702                         const theme_entry& te = ti.entries[e];
1703                         if (outTypeSpecFlags != NULL) {
1704                             *outTypeSpecFlags |= te.typeSpecFlags;
1705                         }
1706                         TABLE_THEME(LOGI("Theme value: type=0x%x, data=0x%08x",
1707                                 te.value.dataType, te.value.data));
1708                         const uint8_t type = te.value.dataType;
1709                         if (type == Res_value::TYPE_ATTRIBUTE) {
1710                             if (cnt > 0) {
1711                                 cnt--;
1712                                 resID = te.value.data;
1713                                 continue;
1714                             }
1715                             LOGW("Too many attribute references, stopped at: 0x%08x\n", resID);
1716                             return BAD_INDEX;
1717                         } else if (type != Res_value::TYPE_NULL) {
1718                             *outValue = te.value;
1719                             return te.stringBlock;
1720                         }
1721                         return BAD_INDEX;
1722                     }
1723                 }
1724             }
1725         }
1726         break;
1727 
1728     } while (true);
1729 
1730     return BAD_INDEX;
1731 }
1732 
resolveAttributeReference(Res_value * inOutValue,ssize_t blockIndex,uint32_t * outLastRef,uint32_t * inoutTypeSpecFlags,ResTable_config * inoutConfig) const1733 ssize_t ResTable::Theme::resolveAttributeReference(Res_value* inOutValue,
1734         ssize_t blockIndex, uint32_t* outLastRef,
1735         uint32_t* inoutTypeSpecFlags, ResTable_config* inoutConfig) const
1736 {
1737     //printf("Resolving type=0x%x\n", inOutValue->dataType);
1738     if (inOutValue->dataType == Res_value::TYPE_ATTRIBUTE) {
1739         uint32_t newTypeSpecFlags;
1740         blockIndex = getAttribute(inOutValue->data, inOutValue, &newTypeSpecFlags);
1741         TABLE_THEME(LOGI("Resolving attr reference: blockIndex=%d, type=0x%x, data=%p\n",
1742              (int)blockIndex, (int)inOutValue->dataType, (void*)inOutValue->data));
1743         if (inoutTypeSpecFlags != NULL) *inoutTypeSpecFlags |= newTypeSpecFlags;
1744         //printf("Retrieved attribute new type=0x%x\n", inOutValue->dataType);
1745         if (blockIndex < 0) {
1746             return blockIndex;
1747         }
1748     }
1749     return mTable.resolveReference(inOutValue, blockIndex, outLastRef,
1750             inoutTypeSpecFlags, inoutConfig);
1751 }
1752 
dumpToLog() const1753 void ResTable::Theme::dumpToLog() const
1754 {
1755     LOGI("Theme %p:\n", this);
1756     for (size_t i=0; i<Res_MAXPACKAGE; i++) {
1757         package_info* pi = mPackages[i];
1758         if (pi == NULL) continue;
1759 
1760         LOGI("  Package #0x%02x:\n", (int)(i+1));
1761         for (size_t j=0; j<pi->numTypes; j++) {
1762             type_info& ti = pi->types[j];
1763             if (ti.numEntries == 0) continue;
1764 
1765             LOGI("    Type #0x%02x:\n", (int)(j+1));
1766             for (size_t k=0; k<ti.numEntries; k++) {
1767                 theme_entry& te = ti.entries[k];
1768                 if (te.value.dataType == Res_value::TYPE_NULL) continue;
1769                 LOGI("      0x%08x: t=0x%x, d=0x%08x (block=%d)\n",
1770                      (int)Res_MAKEID(i, j, k),
1771                      te.value.dataType, (int)te.value.data, (int)te.stringBlock);
1772             }
1773         }
1774     }
1775 }
1776 
ResTable()1777 ResTable::ResTable()
1778     : mError(NO_INIT)
1779 {
1780     memset(&mParams, 0, sizeof(mParams));
1781     memset(mPackageMap, 0, sizeof(mPackageMap));
1782     //LOGI("Creating ResTable %p\n", this);
1783 }
1784 
ResTable(const void * data,size_t size,void * cookie,bool copyData)1785 ResTable::ResTable(const void* data, size_t size, void* cookie, bool copyData)
1786     : mError(NO_INIT)
1787 {
1788     memset(&mParams, 0, sizeof(mParams));
1789     memset(mPackageMap, 0, sizeof(mPackageMap));
1790     add(data, size, cookie, copyData);
1791     LOG_FATAL_IF(mError != NO_ERROR, "Error parsing resource table");
1792     //LOGI("Creating ResTable %p\n", this);
1793 }
1794 
~ResTable()1795 ResTable::~ResTable()
1796 {
1797     //LOGI("Destroying ResTable in %p\n", this);
1798     uninit();
1799 }
1800 
getResourcePackageIndex(uint32_t resID) const1801 inline ssize_t ResTable::getResourcePackageIndex(uint32_t resID) const
1802 {
1803     return ((ssize_t)mPackageMap[Res_GETPACKAGE(resID)+1])-1;
1804 }
1805 
add(const void * data,size_t size,void * cookie,bool copyData,const void * idmap)1806 status_t ResTable::add(const void* data, size_t size, void* cookie, bool copyData,
1807                        const void* idmap)
1808 {
1809     return add(data, size, cookie, NULL, copyData, reinterpret_cast<const Asset*>(idmap));
1810 }
1811 
add(Asset * asset,void * cookie,bool copyData,const void * idmap)1812 status_t ResTable::add(Asset* asset, void* cookie, bool copyData, const void* idmap)
1813 {
1814     const void* data = asset->getBuffer(true);
1815     if (data == NULL) {
1816         LOGW("Unable to get buffer of resource asset file");
1817         return UNKNOWN_ERROR;
1818     }
1819     size_t size = (size_t)asset->getLength();
1820     return add(data, size, cookie, asset, copyData, reinterpret_cast<const Asset*>(idmap));
1821 }
1822 
add(ResTable * src)1823 status_t ResTable::add(ResTable* src)
1824 {
1825     mError = src->mError;
1826 
1827     for (size_t i=0; i<src->mHeaders.size(); i++) {
1828         mHeaders.add(src->mHeaders[i]);
1829     }
1830 
1831     for (size_t i=0; i<src->mPackageGroups.size(); i++) {
1832         PackageGroup* srcPg = src->mPackageGroups[i];
1833         PackageGroup* pg = new PackageGroup(this, srcPg->name, srcPg->id);
1834         for (size_t j=0; j<srcPg->packages.size(); j++) {
1835             pg->packages.add(srcPg->packages[j]);
1836         }
1837         pg->basePackage = srcPg->basePackage;
1838         pg->typeCount = srcPg->typeCount;
1839         mPackageGroups.add(pg);
1840     }
1841 
1842     memcpy(mPackageMap, src->mPackageMap, sizeof(mPackageMap));
1843 
1844     return mError;
1845 }
1846 
add(const void * data,size_t size,void * cookie,Asset * asset,bool copyData,const Asset * idmap)1847 status_t ResTable::add(const void* data, size_t size, void* cookie,
1848                        Asset* asset, bool copyData, const Asset* idmap)
1849 {
1850     if (!data) return NO_ERROR;
1851     Header* header = new Header(this);
1852     header->index = mHeaders.size();
1853     header->cookie = cookie;
1854     if (idmap != NULL) {
1855         const size_t idmap_size = idmap->getLength();
1856         const void* idmap_data = const_cast<Asset*>(idmap)->getBuffer(true);
1857         header->resourceIDMap = (uint32_t*)malloc(idmap_size);
1858         if (header->resourceIDMap == NULL) {
1859             delete header;
1860             return (mError = NO_MEMORY);
1861         }
1862         memcpy((void*)header->resourceIDMap, idmap_data, idmap_size);
1863         header->resourceIDMapSize = idmap_size;
1864     }
1865     mHeaders.add(header);
1866 
1867     const bool notDeviceEndian = htods(0xf0) != 0xf0;
1868 
1869     LOAD_TABLE_NOISY(
1870         LOGV("Adding resources to ResTable: data=%p, size=0x%x, cookie=%p, asset=%p, copy=%d "
1871              "idmap=%p\n", data, size, cookie, asset, copyData, idmap));
1872 
1873     if (copyData || notDeviceEndian) {
1874         header->ownedData = malloc(size);
1875         if (header->ownedData == NULL) {
1876             return (mError=NO_MEMORY);
1877         }
1878         memcpy(header->ownedData, data, size);
1879         data = header->ownedData;
1880     }
1881 
1882     header->header = (const ResTable_header*)data;
1883     header->size = dtohl(header->header->header.size);
1884     //LOGI("Got size 0x%x, again size 0x%x, raw size 0x%x\n", header->size,
1885     //     dtohl(header->header->header.size), header->header->header.size);
1886     LOAD_TABLE_NOISY(LOGV("Loading ResTable @%p:\n", header->header));
1887     LOAD_TABLE_NOISY(printHexData(2, header->header, header->size < 256 ? header->size : 256,
1888                                   16, 16, 0, false, printToLogFunc));
1889     if (dtohs(header->header->header.headerSize) > header->size
1890             || header->size > size) {
1891         LOGW("Bad resource table: header size 0x%x or total size 0x%x is larger than data size 0x%x\n",
1892              (int)dtohs(header->header->header.headerSize),
1893              (int)header->size, (int)size);
1894         return (mError=BAD_TYPE);
1895     }
1896     if (((dtohs(header->header->header.headerSize)|header->size)&0x3) != 0) {
1897         LOGW("Bad resource table: header size 0x%x or total size 0x%x is not on an integer boundary\n",
1898              (int)dtohs(header->header->header.headerSize),
1899              (int)header->size);
1900         return (mError=BAD_TYPE);
1901     }
1902     header->dataEnd = ((const uint8_t*)header->header) + header->size;
1903 
1904     // Iterate through all chunks.
1905     size_t curPackage = 0;
1906 
1907     const ResChunk_header* chunk =
1908         (const ResChunk_header*)(((const uint8_t*)header->header)
1909                                  + dtohs(header->header->header.headerSize));
1910     while (((const uint8_t*)chunk) <= (header->dataEnd-sizeof(ResChunk_header)) &&
1911            ((const uint8_t*)chunk) <= (header->dataEnd-dtohl(chunk->size))) {
1912         status_t err = validate_chunk(chunk, sizeof(ResChunk_header), header->dataEnd, "ResTable");
1913         if (err != NO_ERROR) {
1914             return (mError=err);
1915         }
1916         TABLE_NOISY(LOGV("Chunk: type=0x%x, headerSize=0x%x, size=0x%x, pos=%p\n",
1917                      dtohs(chunk->type), dtohs(chunk->headerSize), dtohl(chunk->size),
1918                      (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header))));
1919         const size_t csize = dtohl(chunk->size);
1920         const uint16_t ctype = dtohs(chunk->type);
1921         if (ctype == RES_STRING_POOL_TYPE) {
1922             if (header->values.getError() != NO_ERROR) {
1923                 // Only use the first string chunk; ignore any others that
1924                 // may appear.
1925                 status_t err = header->values.setTo(chunk, csize);
1926                 if (err != NO_ERROR) {
1927                     return (mError=err);
1928                 }
1929             } else {
1930                 LOGW("Multiple string chunks found in resource table.");
1931             }
1932         } else if (ctype == RES_TABLE_PACKAGE_TYPE) {
1933             if (curPackage >= dtohl(header->header->packageCount)) {
1934                 LOGW("More package chunks were found than the %d declared in the header.",
1935                      dtohl(header->header->packageCount));
1936                 return (mError=BAD_TYPE);
1937             }
1938             uint32_t idmap_id = 0;
1939             if (idmap != NULL) {
1940                 uint32_t tmp;
1941                 if (getIdmapPackageId(header->resourceIDMap,
1942                                       header->resourceIDMapSize,
1943                                       &tmp) == NO_ERROR) {
1944                     idmap_id = tmp;
1945                 }
1946             }
1947             if (parsePackage((ResTable_package*)chunk, header, idmap_id) != NO_ERROR) {
1948                 return mError;
1949             }
1950             curPackage++;
1951         } else {
1952             LOGW("Unknown chunk type %p in table at %p.\n",
1953                  (void*)(int)(ctype),
1954                  (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header)));
1955         }
1956         chunk = (const ResChunk_header*)
1957             (((const uint8_t*)chunk) + csize);
1958     }
1959 
1960     if (curPackage < dtohl(header->header->packageCount)) {
1961         LOGW("Fewer package chunks (%d) were found than the %d declared in the header.",
1962              (int)curPackage, dtohl(header->header->packageCount));
1963         return (mError=BAD_TYPE);
1964     }
1965     mError = header->values.getError();
1966     if (mError != NO_ERROR) {
1967         LOGW("No string values found in resource table!");
1968     }
1969 
1970     TABLE_NOISY(LOGV("Returning from add with mError=%d\n", mError));
1971     return mError;
1972 }
1973 
getError() const1974 status_t ResTable::getError() const
1975 {
1976     return mError;
1977 }
1978 
uninit()1979 void ResTable::uninit()
1980 {
1981     mError = NO_INIT;
1982     size_t N = mPackageGroups.size();
1983     for (size_t i=0; i<N; i++) {
1984         PackageGroup* g = mPackageGroups[i];
1985         delete g;
1986     }
1987     N = mHeaders.size();
1988     for (size_t i=0; i<N; i++) {
1989         Header* header = mHeaders[i];
1990         if (header->owner == this) {
1991             if (header->ownedData) {
1992                 free(header->ownedData);
1993             }
1994             delete header;
1995         }
1996     }
1997 
1998     mPackageGroups.clear();
1999     mHeaders.clear();
2000 }
2001 
getResourceName(uint32_t resID,resource_name * outName) const2002 bool ResTable::getResourceName(uint32_t resID, resource_name* outName) const
2003 {
2004     if (mError != NO_ERROR) {
2005         return false;
2006     }
2007 
2008     const ssize_t p = getResourcePackageIndex(resID);
2009     const int t = Res_GETTYPE(resID);
2010     const int e = Res_GETENTRY(resID);
2011 
2012     if (p < 0) {
2013         if (Res_GETPACKAGE(resID)+1 == 0) {
2014             LOGW("No package identifier when getting name for resource number 0x%08x", resID);
2015         } else {
2016             LOGW("No known package when getting name for resource number 0x%08x", resID);
2017         }
2018         return false;
2019     }
2020     if (t < 0) {
2021         LOGW("No type identifier when getting name for resource number 0x%08x", resID);
2022         return false;
2023     }
2024 
2025     const PackageGroup* const grp = mPackageGroups[p];
2026     if (grp == NULL) {
2027         LOGW("Bad identifier when getting name for resource number 0x%08x", resID);
2028         return false;
2029     }
2030     if (grp->packages.size() > 0) {
2031         const Package* const package = grp->packages[0];
2032 
2033         const ResTable_type* type;
2034         const ResTable_entry* entry;
2035         ssize_t offset = getEntry(package, t, e, NULL, &type, &entry, NULL);
2036         if (offset <= 0) {
2037             return false;
2038         }
2039 
2040         outName->package = grp->name.string();
2041         outName->packageLen = grp->name.size();
2042         outName->type = grp->basePackage->typeStrings.stringAt(t, &outName->typeLen);
2043         outName->name = grp->basePackage->keyStrings.stringAt(
2044             dtohl(entry->key.index), &outName->nameLen);
2045 
2046         // If we have a bad index for some reason, we should abort.
2047         if (outName->type == NULL || outName->name == NULL) {
2048             return false;
2049         }
2050 
2051         return true;
2052     }
2053 
2054     return false;
2055 }
2056 
getResource(uint32_t resID,Res_value * outValue,bool mayBeBag,uint16_t density,uint32_t * outSpecFlags,ResTable_config * outConfig) const2057 ssize_t ResTable::getResource(uint32_t resID, Res_value* outValue, bool mayBeBag, uint16_t density,
2058         uint32_t* outSpecFlags, ResTable_config* outConfig) const
2059 {
2060     if (mError != NO_ERROR) {
2061         return mError;
2062     }
2063 
2064     const ssize_t p = getResourcePackageIndex(resID);
2065     const int t = Res_GETTYPE(resID);
2066     const int e = Res_GETENTRY(resID);
2067 
2068     if (p < 0) {
2069         if (Res_GETPACKAGE(resID)+1 == 0) {
2070             LOGW("No package identifier when getting value for resource number 0x%08x", resID);
2071         } else {
2072             LOGW("No known package when getting value for resource number 0x%08x", resID);
2073         }
2074         return BAD_INDEX;
2075     }
2076     if (t < 0) {
2077         LOGW("No type identifier when getting value for resource number 0x%08x", resID);
2078         return BAD_INDEX;
2079     }
2080 
2081     const Res_value* bestValue = NULL;
2082     const Package* bestPackage = NULL;
2083     ResTable_config bestItem;
2084     memset(&bestItem, 0, sizeof(bestItem)); // make the compiler shut up
2085 
2086     if (outSpecFlags != NULL) *outSpecFlags = 0;
2087 
2088     // Look through all resource packages, starting with the most
2089     // recently added.
2090     const PackageGroup* const grp = mPackageGroups[p];
2091     if (grp == NULL) {
2092         LOGW("Bad identifier when getting value for resource number 0x%08x", resID);
2093         return BAD_INDEX;
2094     }
2095 
2096     // Allow overriding density
2097     const ResTable_config* desiredConfig = &mParams;
2098     ResTable_config* overrideConfig = NULL;
2099     if (density > 0) {
2100         overrideConfig = (ResTable_config*) malloc(sizeof(ResTable_config));
2101         if (overrideConfig == NULL) {
2102             LOGE("Couldn't malloc ResTable_config for overrides: %s", strerror(errno));
2103             return BAD_INDEX;
2104         }
2105         memcpy(overrideConfig, &mParams, sizeof(ResTable_config));
2106         overrideConfig->density = density;
2107         desiredConfig = overrideConfig;
2108     }
2109 
2110     ssize_t rc = BAD_VALUE;
2111     size_t ip = grp->packages.size();
2112     while (ip > 0) {
2113         ip--;
2114         int T = t;
2115         int E = e;
2116 
2117         const Package* const package = grp->packages[ip];
2118         if (package->header->resourceIDMap) {
2119             uint32_t overlayResID = 0x0;
2120             status_t retval = idmapLookup(package->header->resourceIDMap,
2121                                           package->header->resourceIDMapSize,
2122                                           resID, &overlayResID);
2123             if (retval == NO_ERROR && overlayResID != 0x0) {
2124                 // for this loop iteration, this is the type and entry we really want
2125                 LOGV("resource map 0x%08x -> 0x%08x\n", resID, overlayResID);
2126                 T = Res_GETTYPE(overlayResID);
2127                 E = Res_GETENTRY(overlayResID);
2128             } else {
2129                 // resource not present in overlay package, continue with the next package
2130                 continue;
2131             }
2132         }
2133 
2134         const ResTable_type* type;
2135         const ResTable_entry* entry;
2136         const Type* typeClass;
2137         ssize_t offset = getEntry(package, T, E, desiredConfig, &type, &entry, &typeClass);
2138         if (offset <= 0) {
2139             // No {entry, appropriate config} pair found in package. If this
2140             // package is an overlay package (ip != 0), this simply means the
2141             // overlay package did not specify a default.
2142             // Non-overlay packages are still required to provide a default.
2143             if (offset < 0 && ip == 0) {
2144                 LOGW("Failure getting entry for 0x%08x (t=%d e=%d) in package %zd (error %d)\n",
2145                         resID, T, E, ip, (int)offset);
2146                 rc = offset;
2147                 goto out;
2148             }
2149             continue;
2150         }
2151 
2152         if ((dtohs(entry->flags)&entry->FLAG_COMPLEX) != 0) {
2153             if (!mayBeBag) {
2154                 LOGW("Requesting resource %p failed because it is complex\n",
2155                      (void*)resID);
2156             }
2157             continue;
2158         }
2159 
2160         TABLE_NOISY(aout << "Resource type data: "
2161               << HexDump(type, dtohl(type->header.size)) << endl);
2162 
2163         if ((size_t)offset > (dtohl(type->header.size)-sizeof(Res_value))) {
2164             LOGW("ResTable_item at %d is beyond type chunk data %d",
2165                  (int)offset, dtohl(type->header.size));
2166             rc = BAD_TYPE;
2167             goto out;
2168         }
2169 
2170         const Res_value* item =
2171             (const Res_value*)(((const uint8_t*)type) + offset);
2172         ResTable_config thisConfig;
2173         thisConfig.copyFromDtoH(type->config);
2174 
2175         if (outSpecFlags != NULL) {
2176             if (typeClass->typeSpecFlags != NULL) {
2177                 *outSpecFlags |= dtohl(typeClass->typeSpecFlags[E]);
2178             } else {
2179                 *outSpecFlags = -1;
2180             }
2181         }
2182 
2183         if (bestPackage != NULL &&
2184             (bestItem.isMoreSpecificThan(thisConfig) || bestItem.diff(thisConfig) == 0)) {
2185             // Discard thisConfig not only if bestItem is more specific, but also if the two configs
2186             // are identical (diff == 0), or overlay packages will not take effect.
2187             continue;
2188         }
2189 
2190         bestItem = thisConfig;
2191         bestValue = item;
2192         bestPackage = package;
2193     }
2194 
2195     TABLE_NOISY(printf("Found result: package %p\n", bestPackage));
2196 
2197     if (bestValue) {
2198         outValue->size = dtohs(bestValue->size);
2199         outValue->res0 = bestValue->res0;
2200         outValue->dataType = bestValue->dataType;
2201         outValue->data = dtohl(bestValue->data);
2202         if (outConfig != NULL) {
2203             *outConfig = bestItem;
2204         }
2205         TABLE_NOISY(size_t len;
2206               printf("Found value: pkg=%d, type=%d, str=%s, int=%d\n",
2207                      bestPackage->header->index,
2208                      outValue->dataType,
2209                      outValue->dataType == bestValue->TYPE_STRING
2210                      ? String8(bestPackage->header->values.stringAt(
2211                          outValue->data, &len)).string()
2212                      : "",
2213                      outValue->data));
2214         rc = bestPackage->header->index;
2215         goto out;
2216     }
2217 
2218 out:
2219     if (overrideConfig != NULL) {
2220         free(overrideConfig);
2221     }
2222 
2223     return rc;
2224 }
2225 
resolveReference(Res_value * value,ssize_t blockIndex,uint32_t * outLastRef,uint32_t * inoutTypeSpecFlags,ResTable_config * outConfig) const2226 ssize_t ResTable::resolveReference(Res_value* value, ssize_t blockIndex,
2227         uint32_t* outLastRef, uint32_t* inoutTypeSpecFlags,
2228         ResTable_config* outConfig) const
2229 {
2230     int count=0;
2231     while (blockIndex >= 0 && value->dataType == value->TYPE_REFERENCE
2232            && value->data != 0 && count < 20) {
2233         if (outLastRef) *outLastRef = value->data;
2234         uint32_t lastRef = value->data;
2235         uint32_t newFlags = 0;
2236         const ssize_t newIndex = getResource(value->data, value, true, 0, &newFlags,
2237                 outConfig);
2238         if (newIndex == BAD_INDEX) {
2239             return BAD_INDEX;
2240         }
2241         TABLE_THEME(LOGI("Resolving reference %p: newIndex=%d, type=0x%x, data=%p\n",
2242              (void*)lastRef, (int)newIndex, (int)value->dataType, (void*)value->data));
2243         //printf("Getting reference 0x%08x: newIndex=%d\n", value->data, newIndex);
2244         if (inoutTypeSpecFlags != NULL) *inoutTypeSpecFlags |= newFlags;
2245         if (newIndex < 0) {
2246             // This can fail if the resource being referenced is a style...
2247             // in this case, just return the reference, and expect the
2248             // caller to deal with.
2249             return blockIndex;
2250         }
2251         blockIndex = newIndex;
2252         count++;
2253     }
2254     return blockIndex;
2255 }
2256 
valueToString(const Res_value * value,size_t stringBlock,char16_t tmpBuffer[TMP_BUFFER_SIZE],size_t * outLen)2257 const char16_t* ResTable::valueToString(
2258     const Res_value* value, size_t stringBlock,
2259     char16_t tmpBuffer[TMP_BUFFER_SIZE], size_t* outLen)
2260 {
2261     if (!value) {
2262         return NULL;
2263     }
2264     if (value->dataType == value->TYPE_STRING) {
2265         return getTableStringBlock(stringBlock)->stringAt(value->data, outLen);
2266     }
2267     // XXX do int to string conversions.
2268     return NULL;
2269 }
2270 
lockBag(uint32_t resID,const bag_entry ** outBag) const2271 ssize_t ResTable::lockBag(uint32_t resID, const bag_entry** outBag) const
2272 {
2273     mLock.lock();
2274     ssize_t err = getBagLocked(resID, outBag);
2275     if (err < NO_ERROR) {
2276         //printf("*** get failed!  unlocking\n");
2277         mLock.unlock();
2278     }
2279     return err;
2280 }
2281 
unlockBag(const bag_entry * bag) const2282 void ResTable::unlockBag(const bag_entry* bag) const
2283 {
2284     //printf("<<< unlockBag %p\n", this);
2285     mLock.unlock();
2286 }
2287 
lock() const2288 void ResTable::lock() const
2289 {
2290     mLock.lock();
2291 }
2292 
unlock() const2293 void ResTable::unlock() const
2294 {
2295     mLock.unlock();
2296 }
2297 
getBagLocked(uint32_t resID,const bag_entry ** outBag,uint32_t * outTypeSpecFlags) const2298 ssize_t ResTable::getBagLocked(uint32_t resID, const bag_entry** outBag,
2299         uint32_t* outTypeSpecFlags) const
2300 {
2301     if (mError != NO_ERROR) {
2302         return mError;
2303     }
2304 
2305     const ssize_t p = getResourcePackageIndex(resID);
2306     const int t = Res_GETTYPE(resID);
2307     const int e = Res_GETENTRY(resID);
2308 
2309     if (p < 0) {
2310         LOGW("Invalid package identifier when getting bag for resource number 0x%08x", resID);
2311         return BAD_INDEX;
2312     }
2313     if (t < 0) {
2314         LOGW("No type identifier when getting bag for resource number 0x%08x", resID);
2315         return BAD_INDEX;
2316     }
2317 
2318     //printf("Get bag: id=0x%08x, p=%d, t=%d\n", resID, p, t);
2319     PackageGroup* const grp = mPackageGroups[p];
2320     if (grp == NULL) {
2321         LOGW("Bad identifier when getting bag for resource number 0x%08x", resID);
2322         return false;
2323     }
2324 
2325     if (t >= (int)grp->typeCount) {
2326         LOGW("Type identifier 0x%x is larger than type count 0x%x",
2327              t+1, (int)grp->typeCount);
2328         return BAD_INDEX;
2329     }
2330 
2331     const Package* const basePackage = grp->packages[0];
2332 
2333     const Type* const typeConfigs = basePackage->getType(t);
2334 
2335     const size_t NENTRY = typeConfigs->entryCount;
2336     if (e >= (int)NENTRY) {
2337         LOGW("Entry identifier 0x%x is larger than entry count 0x%x",
2338              e, (int)typeConfigs->entryCount);
2339         return BAD_INDEX;
2340     }
2341 
2342     // First see if we've already computed this bag...
2343     if (grp->bags) {
2344         bag_set** typeSet = grp->bags[t];
2345         if (typeSet) {
2346             bag_set* set = typeSet[e];
2347             if (set) {
2348                 if (set != (bag_set*)0xFFFFFFFF) {
2349                     if (outTypeSpecFlags != NULL) {
2350                         *outTypeSpecFlags = set->typeSpecFlags;
2351                     }
2352                     *outBag = (bag_entry*)(set+1);
2353                     //LOGI("Found existing bag for: %p\n", (void*)resID);
2354                     return set->numAttrs;
2355                 }
2356                 LOGW("Attempt to retrieve bag 0x%08x which is invalid or in a cycle.",
2357                      resID);
2358                 return BAD_INDEX;
2359             }
2360         }
2361     }
2362 
2363     // Bag not found, we need to compute it!
2364     if (!grp->bags) {
2365         grp->bags = (bag_set***)malloc(sizeof(bag_set*)*grp->typeCount);
2366         if (!grp->bags) return NO_MEMORY;
2367         memset(grp->bags, 0, sizeof(bag_set*)*grp->typeCount);
2368     }
2369 
2370     bag_set** typeSet = grp->bags[t];
2371     if (!typeSet) {
2372         typeSet = (bag_set**)malloc(sizeof(bag_set*)*NENTRY);
2373         if (!typeSet) return NO_MEMORY;
2374         memset(typeSet, 0, sizeof(bag_set*)*NENTRY);
2375         grp->bags[t] = typeSet;
2376     }
2377 
2378     // Mark that we are currently working on this one.
2379     typeSet[e] = (bag_set*)0xFFFFFFFF;
2380 
2381     // This is what we are building.
2382     bag_set* set = NULL;
2383 
2384     TABLE_NOISY(LOGI("Building bag: %p\n", (void*)resID));
2385 
2386     ResTable_config bestConfig;
2387     memset(&bestConfig, 0, sizeof(bestConfig));
2388 
2389     // Now collect all bag attributes from all packages.
2390     size_t ip = grp->packages.size();
2391     while (ip > 0) {
2392         ip--;
2393         int T = t;
2394         int E = e;
2395 
2396         const Package* const package = grp->packages[ip];
2397         if (package->header->resourceIDMap) {
2398             uint32_t overlayResID = 0x0;
2399             status_t retval = idmapLookup(package->header->resourceIDMap,
2400                                           package->header->resourceIDMapSize,
2401                                           resID, &overlayResID);
2402             if (retval == NO_ERROR && overlayResID != 0x0) {
2403                 // for this loop iteration, this is the type and entry we really want
2404                 LOGV("resource map 0x%08x -> 0x%08x\n", resID, overlayResID);
2405                 T = Res_GETTYPE(overlayResID);
2406                 E = Res_GETENTRY(overlayResID);
2407             } else {
2408                 // resource not present in overlay package, continue with the next package
2409                 continue;
2410             }
2411         }
2412 
2413         const ResTable_type* type;
2414         const ResTable_entry* entry;
2415         const Type* typeClass;
2416         LOGV("Getting entry pkg=%p, t=%d, e=%d\n", package, T, E);
2417         ssize_t offset = getEntry(package, T, E, &mParams, &type, &entry, &typeClass);
2418         LOGV("Resulting offset=%d\n", offset);
2419         if (offset <= 0) {
2420             // No {entry, appropriate config} pair found in package. If this
2421             // package is an overlay package (ip != 0), this simply means the
2422             // overlay package did not specify a default.
2423             // Non-overlay packages are still required to provide a default.
2424             if (offset < 0 && ip == 0) {
2425                 if (set) free(set);
2426                 return offset;
2427             }
2428             continue;
2429         }
2430 
2431         if ((dtohs(entry->flags)&entry->FLAG_COMPLEX) == 0) {
2432             LOGW("Skipping entry %p in package table %d because it is not complex!\n",
2433                  (void*)resID, (int)ip);
2434             continue;
2435         }
2436 
2437         if (set != NULL && !type->config.isBetterThan(bestConfig, NULL)) {
2438             continue;
2439         }
2440         bestConfig = type->config;
2441         if (set) {
2442             free(set);
2443             set = NULL;
2444         }
2445 
2446         const uint16_t entrySize = dtohs(entry->size);
2447         const uint32_t parent = entrySize >= sizeof(ResTable_map_entry)
2448             ? dtohl(((const ResTable_map_entry*)entry)->parent.ident) : 0;
2449         const uint32_t count = entrySize >= sizeof(ResTable_map_entry)
2450             ? dtohl(((const ResTable_map_entry*)entry)->count) : 0;
2451 
2452         size_t N = count;
2453 
2454         TABLE_NOISY(LOGI("Found map: size=%p parent=%p count=%d\n",
2455                          entrySize, parent, count));
2456 
2457         // If this map inherits from another, we need to start
2458         // with its parent's values.  Otherwise start out empty.
2459         TABLE_NOISY(printf("Creating new bag, entrySize=0x%08x, parent=0x%08x\n",
2460                            entrySize, parent));
2461         if (parent) {
2462             const bag_entry* parentBag;
2463             uint32_t parentTypeSpecFlags = 0;
2464             const ssize_t NP = getBagLocked(parent, &parentBag, &parentTypeSpecFlags);
2465             const size_t NT = ((NP >= 0) ? NP : 0) + N;
2466             set = (bag_set*)malloc(sizeof(bag_set)+sizeof(bag_entry)*NT);
2467             if (set == NULL) {
2468                 return NO_MEMORY;
2469             }
2470             if (NP > 0) {
2471                 memcpy(set+1, parentBag, NP*sizeof(bag_entry));
2472                 set->numAttrs = NP;
2473                 TABLE_NOISY(LOGI("Initialized new bag with %d inherited attributes.\n", NP));
2474             } else {
2475                 TABLE_NOISY(LOGI("Initialized new bag with no inherited attributes.\n"));
2476                 set->numAttrs = 0;
2477             }
2478             set->availAttrs = NT;
2479             set->typeSpecFlags = parentTypeSpecFlags;
2480         } else {
2481             set = (bag_set*)malloc(sizeof(bag_set)+sizeof(bag_entry)*N);
2482             if (set == NULL) {
2483                 return NO_MEMORY;
2484             }
2485             set->numAttrs = 0;
2486             set->availAttrs = N;
2487             set->typeSpecFlags = 0;
2488         }
2489 
2490         if (typeClass->typeSpecFlags != NULL) {
2491             set->typeSpecFlags |= dtohl(typeClass->typeSpecFlags[E]);
2492         } else {
2493             set->typeSpecFlags = -1;
2494         }
2495 
2496         // Now merge in the new attributes...
2497         ssize_t curOff = offset;
2498         const ResTable_map* map;
2499         bag_entry* entries = (bag_entry*)(set+1);
2500         size_t curEntry = 0;
2501         uint32_t pos = 0;
2502         TABLE_NOISY(LOGI("Starting with set %p, entries=%p, avail=%d\n",
2503                      set, entries, set->availAttrs));
2504         while (pos < count) {
2505             TABLE_NOISY(printf("Now at %p\n", (void*)curOff));
2506 
2507             if ((size_t)curOff > (dtohl(type->header.size)-sizeof(ResTable_map))) {
2508                 LOGW("ResTable_map at %d is beyond type chunk data %d",
2509                      (int)curOff, dtohl(type->header.size));
2510                 return BAD_TYPE;
2511             }
2512             map = (const ResTable_map*)(((const uint8_t*)type) + curOff);
2513             N++;
2514 
2515             const uint32_t newName = htodl(map->name.ident);
2516             bool isInside;
2517             uint32_t oldName = 0;
2518             while ((isInside=(curEntry < set->numAttrs))
2519                     && (oldName=entries[curEntry].map.name.ident) < newName) {
2520                 TABLE_NOISY(printf("#%d: Keeping existing attribute: 0x%08x\n",
2521                              curEntry, entries[curEntry].map.name.ident));
2522                 curEntry++;
2523             }
2524 
2525             if ((!isInside) || oldName != newName) {
2526                 // This is a new attribute...  figure out what to do with it.
2527                 if (set->numAttrs >= set->availAttrs) {
2528                     // Need to alloc more memory...
2529                     const size_t newAvail = set->availAttrs+N;
2530                     set = (bag_set*)realloc(set,
2531                                             sizeof(bag_set)
2532                                             + sizeof(bag_entry)*newAvail);
2533                     if (set == NULL) {
2534                         return NO_MEMORY;
2535                     }
2536                     set->availAttrs = newAvail;
2537                     entries = (bag_entry*)(set+1);
2538                     TABLE_NOISY(printf("Reallocated set %p, entries=%p, avail=%d\n",
2539                                  set, entries, set->availAttrs));
2540                 }
2541                 if (isInside) {
2542                     // Going in the middle, need to make space.
2543                     memmove(entries+curEntry+1, entries+curEntry,
2544                             sizeof(bag_entry)*(set->numAttrs-curEntry));
2545                     set->numAttrs++;
2546                 }
2547                 TABLE_NOISY(printf("#%d: Inserting new attribute: 0x%08x\n",
2548                              curEntry, newName));
2549             } else {
2550                 TABLE_NOISY(printf("#%d: Replacing existing attribute: 0x%08x\n",
2551                              curEntry, oldName));
2552             }
2553 
2554             bag_entry* cur = entries+curEntry;
2555 
2556             cur->stringBlock = package->header->index;
2557             cur->map.name.ident = newName;
2558             cur->map.value.copyFrom_dtoh(map->value);
2559             TABLE_NOISY(printf("Setting entry #%d %p: block=%d, name=0x%08x, type=%d, data=0x%08x\n",
2560                          curEntry, cur, cur->stringBlock, cur->map.name.ident,
2561                          cur->map.value.dataType, cur->map.value.data));
2562 
2563             // On to the next!
2564             curEntry++;
2565             pos++;
2566             const size_t size = dtohs(map->value.size);
2567             curOff += size + sizeof(*map)-sizeof(map->value);
2568         };
2569         if (curEntry > set->numAttrs) {
2570             set->numAttrs = curEntry;
2571         }
2572     }
2573 
2574     // And this is it...
2575     typeSet[e] = set;
2576     if (set) {
2577         if (outTypeSpecFlags != NULL) {
2578             *outTypeSpecFlags = set->typeSpecFlags;
2579         }
2580         *outBag = (bag_entry*)(set+1);
2581         TABLE_NOISY(LOGI("Returning %d attrs\n", set->numAttrs));
2582         return set->numAttrs;
2583     }
2584     return BAD_INDEX;
2585 }
2586 
setParameters(const ResTable_config * params)2587 void ResTable::setParameters(const ResTable_config* params)
2588 {
2589     mLock.lock();
2590     TABLE_GETENTRY(LOGI("Setting parameters: imsi:%d/%d lang:%c%c cnt:%c%c "
2591                         "orien:%d touch:%d density:%d key:%d inp:%d nav:%d sz:%dx%d sw%ddp w%ddp h%ddp\n",
2592                        params->mcc, params->mnc,
2593                        params->language[0] ? params->language[0] : '-',
2594                        params->language[1] ? params->language[1] : '-',
2595                        params->country[0] ? params->country[0] : '-',
2596                        params->country[1] ? params->country[1] : '-',
2597                        params->orientation,
2598                        params->touchscreen,
2599                        params->density,
2600                        params->keyboard,
2601                        params->inputFlags,
2602                        params->navigation,
2603                        params->screenWidth,
2604                        params->screenHeight,
2605                        params->smallestScreenWidthDp,
2606                        params->screenWidthDp,
2607                        params->screenHeightDp));
2608     mParams = *params;
2609     for (size_t i=0; i<mPackageGroups.size(); i++) {
2610         TABLE_NOISY(LOGI("CLEARING BAGS FOR GROUP %d!", i));
2611         mPackageGroups[i]->clearBagCache();
2612     }
2613     mLock.unlock();
2614 }
2615 
getParameters(ResTable_config * params) const2616 void ResTable::getParameters(ResTable_config* params) const
2617 {
2618     mLock.lock();
2619     *params = mParams;
2620     mLock.unlock();
2621 }
2622 
2623 struct id_name_map {
2624     uint32_t id;
2625     size_t len;
2626     char16_t name[6];
2627 };
2628 
2629 const static id_name_map ID_NAMES[] = {
2630     { ResTable_map::ATTR_TYPE,  5, { '^', 't', 'y', 'p', 'e' } },
2631     { ResTable_map::ATTR_L10N,  5, { '^', 'l', '1', '0', 'n' } },
2632     { ResTable_map::ATTR_MIN,   4, { '^', 'm', 'i', 'n' } },
2633     { ResTable_map::ATTR_MAX,   4, { '^', 'm', 'a', 'x' } },
2634     { ResTable_map::ATTR_OTHER, 6, { '^', 'o', 't', 'h', 'e', 'r' } },
2635     { ResTable_map::ATTR_ZERO,  5, { '^', 'z', 'e', 'r', 'o' } },
2636     { ResTable_map::ATTR_ONE,   4, { '^', 'o', 'n', 'e' } },
2637     { ResTable_map::ATTR_TWO,   4, { '^', 't', 'w', 'o' } },
2638     { ResTable_map::ATTR_FEW,   4, { '^', 'f', 'e', 'w' } },
2639     { ResTable_map::ATTR_MANY,  5, { '^', 'm', 'a', 'n', 'y' } },
2640 };
2641 
identifierForName(const char16_t * name,size_t nameLen,const char16_t * type,size_t typeLen,const char16_t * package,size_t packageLen,uint32_t * outTypeSpecFlags) const2642 uint32_t ResTable::identifierForName(const char16_t* name, size_t nameLen,
2643                                      const char16_t* type, size_t typeLen,
2644                                      const char16_t* package,
2645                                      size_t packageLen,
2646                                      uint32_t* outTypeSpecFlags) const
2647 {
2648     TABLE_SUPER_NOISY(printf("Identifier for name: error=%d\n", mError));
2649 
2650     // Check for internal resource identifier as the very first thing, so
2651     // that we will always find them even when there are no resources.
2652     if (name[0] == '^') {
2653         const int N = (sizeof(ID_NAMES)/sizeof(ID_NAMES[0]));
2654         size_t len;
2655         for (int i=0; i<N; i++) {
2656             const id_name_map* m = ID_NAMES + i;
2657             len = m->len;
2658             if (len != nameLen) {
2659                 continue;
2660             }
2661             for (size_t j=1; j<len; j++) {
2662                 if (m->name[j] != name[j]) {
2663                     goto nope;
2664                 }
2665             }
2666             if (outTypeSpecFlags) {
2667                 *outTypeSpecFlags = ResTable_typeSpec::SPEC_PUBLIC;
2668             }
2669             return m->id;
2670 nope:
2671             ;
2672         }
2673         if (nameLen > 7) {
2674             if (name[1] == 'i' && name[2] == 'n'
2675                 && name[3] == 'd' && name[4] == 'e' && name[5] == 'x'
2676                 && name[6] == '_') {
2677                 int index = atoi(String8(name + 7, nameLen - 7).string());
2678                 if (Res_CHECKID(index)) {
2679                     LOGW("Array resource index: %d is too large.",
2680                          index);
2681                     return 0;
2682                 }
2683                 if (outTypeSpecFlags) {
2684                     *outTypeSpecFlags = ResTable_typeSpec::SPEC_PUBLIC;
2685                 }
2686                 return  Res_MAKEARRAY(index);
2687             }
2688         }
2689         return 0;
2690     }
2691 
2692     if (mError != NO_ERROR) {
2693         return 0;
2694     }
2695 
2696     bool fakePublic = false;
2697 
2698     // Figure out the package and type we are looking in...
2699 
2700     const char16_t* packageEnd = NULL;
2701     const char16_t* typeEnd = NULL;
2702     const char16_t* const nameEnd = name+nameLen;
2703     const char16_t* p = name;
2704     while (p < nameEnd) {
2705         if (*p == ':') packageEnd = p;
2706         else if (*p == '/') typeEnd = p;
2707         p++;
2708     }
2709     if (*name == '@') {
2710         name++;
2711         if (*name == '*') {
2712             fakePublic = true;
2713             name++;
2714         }
2715     }
2716     if (name >= nameEnd) {
2717         return 0;
2718     }
2719 
2720     if (packageEnd) {
2721         package = name;
2722         packageLen = packageEnd-name;
2723         name = packageEnd+1;
2724     } else if (!package) {
2725         return 0;
2726     }
2727 
2728     if (typeEnd) {
2729         type = name;
2730         typeLen = typeEnd-name;
2731         name = typeEnd+1;
2732     } else if (!type) {
2733         return 0;
2734     }
2735 
2736     if (name >= nameEnd) {
2737         return 0;
2738     }
2739     nameLen = nameEnd-name;
2740 
2741     TABLE_NOISY(printf("Looking for identifier: type=%s, name=%s, package=%s\n",
2742                  String8(type, typeLen).string(),
2743                  String8(name, nameLen).string(),
2744                  String8(package, packageLen).string()));
2745 
2746     const size_t NG = mPackageGroups.size();
2747     for (size_t ig=0; ig<NG; ig++) {
2748         const PackageGroup* group = mPackageGroups[ig];
2749 
2750         if (strzcmp16(package, packageLen,
2751                       group->name.string(), group->name.size())) {
2752             TABLE_NOISY(printf("Skipping package group: %s\n", String8(group->name).string()));
2753             continue;
2754         }
2755 
2756         const ssize_t ti = group->basePackage->typeStrings.indexOfString(type, typeLen);
2757         if (ti < 0) {
2758             TABLE_NOISY(printf("Type not found in package %s\n", String8(group->name).string()));
2759             continue;
2760         }
2761 
2762         const ssize_t ei = group->basePackage->keyStrings.indexOfString(name, nameLen);
2763         if (ei < 0) {
2764             TABLE_NOISY(printf("Name not found in package %s\n", String8(group->name).string()));
2765             continue;
2766         }
2767 
2768         TABLE_NOISY(printf("Search indices: type=%d, name=%d\n", ti, ei));
2769 
2770         const Type* const typeConfigs = group->packages[0]->getType(ti);
2771         if (typeConfigs == NULL || typeConfigs->configs.size() <= 0) {
2772             TABLE_NOISY(printf("Expected type structure not found in package %s for idnex %d\n",
2773                                String8(group->name).string(), ti));
2774         }
2775 
2776         size_t NTC = typeConfigs->configs.size();
2777         for (size_t tci=0; tci<NTC; tci++) {
2778             const ResTable_type* const ty = typeConfigs->configs[tci];
2779             const uint32_t typeOffset = dtohl(ty->entriesStart);
2780 
2781             const uint8_t* const end = ((const uint8_t*)ty) + dtohl(ty->header.size);
2782             const uint32_t* const eindex = (const uint32_t*)
2783                 (((const uint8_t*)ty) + dtohs(ty->header.headerSize));
2784 
2785             const size_t NE = dtohl(ty->entryCount);
2786             for (size_t i=0; i<NE; i++) {
2787                 uint32_t offset = dtohl(eindex[i]);
2788                 if (offset == ResTable_type::NO_ENTRY) {
2789                     continue;
2790                 }
2791 
2792                 offset += typeOffset;
2793 
2794                 if (offset > (dtohl(ty->header.size)-sizeof(ResTable_entry))) {
2795                     LOGW("ResTable_entry at %d is beyond type chunk data %d",
2796                          offset, dtohl(ty->header.size));
2797                     return 0;
2798                 }
2799                 if ((offset&0x3) != 0) {
2800                     LOGW("ResTable_entry at %d (pkg=%d type=%d ent=%d) is not on an integer boundary when looking for %s:%s/%s",
2801                          (int)offset, (int)group->id, (int)ti+1, (int)i,
2802                          String8(package, packageLen).string(),
2803                          String8(type, typeLen).string(),
2804                          String8(name, nameLen).string());
2805                     return 0;
2806                 }
2807 
2808                 const ResTable_entry* const entry = (const ResTable_entry*)
2809                     (((const uint8_t*)ty) + offset);
2810                 if (dtohs(entry->size) < sizeof(*entry)) {
2811                     LOGW("ResTable_entry size %d is too small", dtohs(entry->size));
2812                     return BAD_TYPE;
2813                 }
2814 
2815                 TABLE_SUPER_NOISY(printf("Looking at entry #%d: want str %d, have %d\n",
2816                                          i, ei, dtohl(entry->key.index)));
2817                 if (dtohl(entry->key.index) == (size_t)ei) {
2818                     if (outTypeSpecFlags) {
2819                         *outTypeSpecFlags = typeConfigs->typeSpecFlags[i];
2820                         if (fakePublic) {
2821                             *outTypeSpecFlags |= ResTable_typeSpec::SPEC_PUBLIC;
2822                         }
2823                     }
2824                     return Res_MAKEID(group->id-1, ti, i);
2825                 }
2826             }
2827         }
2828     }
2829 
2830     return 0;
2831 }
2832 
expandResourceRef(const uint16_t * refStr,size_t refLen,String16 * outPackage,String16 * outType,String16 * outName,const String16 * defType,const String16 * defPackage,const char ** outErrorMsg,bool * outPublicOnly)2833 bool ResTable::expandResourceRef(const uint16_t* refStr, size_t refLen,
2834                                  String16* outPackage,
2835                                  String16* outType,
2836                                  String16* outName,
2837                                  const String16* defType,
2838                                  const String16* defPackage,
2839                                  const char** outErrorMsg,
2840                                  bool* outPublicOnly)
2841 {
2842     const char16_t* packageEnd = NULL;
2843     const char16_t* typeEnd = NULL;
2844     const char16_t* p = refStr;
2845     const char16_t* const end = p + refLen;
2846     while (p < end) {
2847         if (*p == ':') packageEnd = p;
2848         else if (*p == '/') {
2849             typeEnd = p;
2850             break;
2851         }
2852         p++;
2853     }
2854     p = refStr;
2855     if (*p == '@') p++;
2856 
2857     if (outPublicOnly != NULL) {
2858         *outPublicOnly = true;
2859     }
2860     if (*p == '*') {
2861         p++;
2862         if (outPublicOnly != NULL) {
2863             *outPublicOnly = false;
2864         }
2865     }
2866 
2867     if (packageEnd) {
2868         *outPackage = String16(p, packageEnd-p);
2869         p = packageEnd+1;
2870     } else {
2871         if (!defPackage) {
2872             if (outErrorMsg) {
2873                 *outErrorMsg = "No resource package specified";
2874             }
2875             return false;
2876         }
2877         *outPackage = *defPackage;
2878     }
2879     if (typeEnd) {
2880         *outType = String16(p, typeEnd-p);
2881         p = typeEnd+1;
2882     } else {
2883         if (!defType) {
2884             if (outErrorMsg) {
2885                 *outErrorMsg = "No resource type specified";
2886             }
2887             return false;
2888         }
2889         *outType = *defType;
2890     }
2891     *outName = String16(p, end-p);
2892     if(**outPackage == 0) {
2893         if(outErrorMsg) {
2894             *outErrorMsg = "Resource package cannot be an empty string";
2895         }
2896         return false;
2897     }
2898     if(**outType == 0) {
2899         if(outErrorMsg) {
2900             *outErrorMsg = "Resource type cannot be an empty string";
2901         }
2902         return false;
2903     }
2904     if(**outName == 0) {
2905         if(outErrorMsg) {
2906             *outErrorMsg = "Resource id cannot be an empty string";
2907         }
2908         return false;
2909     }
2910     return true;
2911 }
2912 
get_hex(char c,bool * outError)2913 static uint32_t get_hex(char c, bool* outError)
2914 {
2915     if (c >= '0' && c <= '9') {
2916         return c - '0';
2917     } else if (c >= 'a' && c <= 'f') {
2918         return c - 'a' + 0xa;
2919     } else if (c >= 'A' && c <= 'F') {
2920         return c - 'A' + 0xa;
2921     }
2922     *outError = true;
2923     return 0;
2924 }
2925 
2926 struct unit_entry
2927 {
2928     const char* name;
2929     size_t len;
2930     uint8_t type;
2931     uint32_t unit;
2932     float scale;
2933 };
2934 
2935 static const unit_entry unitNames[] = {
2936     { "px", strlen("px"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_PX, 1.0f },
2937     { "dip", strlen("dip"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_DIP, 1.0f },
2938     { "dp", strlen("dp"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_DIP, 1.0f },
2939     { "sp", strlen("sp"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_SP, 1.0f },
2940     { "pt", strlen("pt"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_PT, 1.0f },
2941     { "in", strlen("in"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_IN, 1.0f },
2942     { "mm", strlen("mm"), Res_value::TYPE_DIMENSION, Res_value::COMPLEX_UNIT_MM, 1.0f },
2943     { "%", strlen("%"), Res_value::TYPE_FRACTION, Res_value::COMPLEX_UNIT_FRACTION, 1.0f/100 },
2944     { "%p", strlen("%p"), Res_value::TYPE_FRACTION, Res_value::COMPLEX_UNIT_FRACTION_PARENT, 1.0f/100 },
2945     { NULL, 0, 0, 0, 0 }
2946 };
2947 
parse_unit(const char * str,Res_value * outValue,float * outScale,const char ** outEnd)2948 static bool parse_unit(const char* str, Res_value* outValue,
2949                        float* outScale, const char** outEnd)
2950 {
2951     const char* end = str;
2952     while (*end != 0 && !isspace((unsigned char)*end)) {
2953         end++;
2954     }
2955     const size_t len = end-str;
2956 
2957     const char* realEnd = end;
2958     while (*realEnd != 0 && isspace((unsigned char)*realEnd)) {
2959         realEnd++;
2960     }
2961     if (*realEnd != 0) {
2962         return false;
2963     }
2964 
2965     const unit_entry* cur = unitNames;
2966     while (cur->name) {
2967         if (len == cur->len && strncmp(cur->name, str, len) == 0) {
2968             outValue->dataType = cur->type;
2969             outValue->data = cur->unit << Res_value::COMPLEX_UNIT_SHIFT;
2970             *outScale = cur->scale;
2971             *outEnd = end;
2972             //printf("Found unit %s for %s\n", cur->name, str);
2973             return true;
2974         }
2975         cur++;
2976     }
2977 
2978     return false;
2979 }
2980 
2981 
stringToInt(const char16_t * s,size_t len,Res_value * outValue)2982 bool ResTable::stringToInt(const char16_t* s, size_t len, Res_value* outValue)
2983 {
2984     while (len > 0 && isspace16(*s)) {
2985         s++;
2986         len--;
2987     }
2988 
2989     if (len <= 0) {
2990         return false;
2991     }
2992 
2993     size_t i = 0;
2994     int32_t val = 0;
2995     bool neg = false;
2996 
2997     if (*s == '-') {
2998         neg = true;
2999         i++;
3000     }
3001 
3002     if (s[i] < '0' || s[i] > '9') {
3003         return false;
3004     }
3005 
3006     // Decimal or hex?
3007     if (s[i] == '0' && s[i+1] == 'x') {
3008         if (outValue)
3009             outValue->dataType = outValue->TYPE_INT_HEX;
3010         i += 2;
3011         bool error = false;
3012         while (i < len && !error) {
3013             val = (val*16) + get_hex(s[i], &error);
3014             i++;
3015         }
3016         if (error) {
3017             return false;
3018         }
3019     } else {
3020         if (outValue)
3021             outValue->dataType = outValue->TYPE_INT_DEC;
3022         while (i < len) {
3023             if (s[i] < '0' || s[i] > '9') {
3024                 return false;
3025             }
3026             val = (val*10) + s[i]-'0';
3027             i++;
3028         }
3029     }
3030 
3031     if (neg) val = -val;
3032 
3033     while (i < len && isspace16(s[i])) {
3034         i++;
3035     }
3036 
3037     if (i == len) {
3038         if (outValue)
3039             outValue->data = val;
3040         return true;
3041     }
3042 
3043     return false;
3044 }
3045 
stringToFloat(const char16_t * s,size_t len,Res_value * outValue)3046 bool ResTable::stringToFloat(const char16_t* s, size_t len, Res_value* outValue)
3047 {
3048     while (len > 0 && isspace16(*s)) {
3049         s++;
3050         len--;
3051     }
3052 
3053     if (len <= 0) {
3054         return false;
3055     }
3056 
3057     char buf[128];
3058     int i=0;
3059     while (len > 0 && *s != 0 && i < 126) {
3060         if (*s > 255) {
3061             return false;
3062         }
3063         buf[i++] = *s++;
3064         len--;
3065     }
3066 
3067     if (len > 0) {
3068         return false;
3069     }
3070     if (buf[0] < '0' && buf[0] > '9' && buf[0] != '.') {
3071         return false;
3072     }
3073 
3074     buf[i] = 0;
3075     const char* end;
3076     float f = strtof(buf, (char**)&end);
3077 
3078     if (*end != 0 && !isspace((unsigned char)*end)) {
3079         // Might be a unit...
3080         float scale;
3081         if (parse_unit(end, outValue, &scale, &end)) {
3082             f *= scale;
3083             const bool neg = f < 0;
3084             if (neg) f = -f;
3085             uint64_t bits = (uint64_t)(f*(1<<23)+.5f);
3086             uint32_t radix;
3087             uint32_t shift;
3088             if ((bits&0x7fffff) == 0) {
3089                 // Always use 23p0 if there is no fraction, just to make
3090                 // things easier to read.
3091                 radix = Res_value::COMPLEX_RADIX_23p0;
3092                 shift = 23;
3093             } else if ((bits&0xffffffffff800000LL) == 0) {
3094                 // Magnitude is zero -- can fit in 0 bits of precision.
3095                 radix = Res_value::COMPLEX_RADIX_0p23;
3096                 shift = 0;
3097             } else if ((bits&0xffffffff80000000LL) == 0) {
3098                 // Magnitude can fit in 8 bits of precision.
3099                 radix = Res_value::COMPLEX_RADIX_8p15;
3100                 shift = 8;
3101             } else if ((bits&0xffffff8000000000LL) == 0) {
3102                 // Magnitude can fit in 16 bits of precision.
3103                 radix = Res_value::COMPLEX_RADIX_16p7;
3104                 shift = 16;
3105             } else {
3106                 // Magnitude needs entire range, so no fractional part.
3107                 radix = Res_value::COMPLEX_RADIX_23p0;
3108                 shift = 23;
3109             }
3110             int32_t mantissa = (int32_t)(
3111                 (bits>>shift) & Res_value::COMPLEX_MANTISSA_MASK);
3112             if (neg) {
3113                 mantissa = (-mantissa) & Res_value::COMPLEX_MANTISSA_MASK;
3114             }
3115             outValue->data |=
3116                 (radix<<Res_value::COMPLEX_RADIX_SHIFT)
3117                 | (mantissa<<Res_value::COMPLEX_MANTISSA_SHIFT);
3118             //printf("Input value: %f 0x%016Lx, mult: %f, radix: %d, shift: %d, final: 0x%08x\n",
3119             //       f * (neg ? -1 : 1), bits, f*(1<<23),
3120             //       radix, shift, outValue->data);
3121             return true;
3122         }
3123         return false;
3124     }
3125 
3126     while (*end != 0 && isspace((unsigned char)*end)) {
3127         end++;
3128     }
3129 
3130     if (*end == 0) {
3131         if (outValue) {
3132             outValue->dataType = outValue->TYPE_FLOAT;
3133             *(float*)(&outValue->data) = f;
3134             return true;
3135         }
3136     }
3137 
3138     return false;
3139 }
3140 
stringToValue(Res_value * outValue,String16 * outString,const char16_t * s,size_t len,bool preserveSpaces,bool coerceType,uint32_t attrID,const String16 * defType,const String16 * defPackage,Accessor * accessor,void * accessorCookie,uint32_t attrType,bool enforcePrivate) const3141 bool ResTable::stringToValue(Res_value* outValue, String16* outString,
3142                              const char16_t* s, size_t len,
3143                              bool preserveSpaces, bool coerceType,
3144                              uint32_t attrID,
3145                              const String16* defType,
3146                              const String16* defPackage,
3147                              Accessor* accessor,
3148                              void* accessorCookie,
3149                              uint32_t attrType,
3150                              bool enforcePrivate) const
3151 {
3152     bool localizationSetting = accessor != NULL && accessor->getLocalizationSetting();
3153     const char* errorMsg = NULL;
3154 
3155     outValue->size = sizeof(Res_value);
3156     outValue->res0 = 0;
3157 
3158     // First strip leading/trailing whitespace.  Do this before handling
3159     // escapes, so they can be used to force whitespace into the string.
3160     if (!preserveSpaces) {
3161         while (len > 0 && isspace16(*s)) {
3162             s++;
3163             len--;
3164         }
3165         while (len > 0 && isspace16(s[len-1])) {
3166             len--;
3167         }
3168         // If the string ends with '\', then we keep the space after it.
3169         if (len > 0 && s[len-1] == '\\' && s[len] != 0) {
3170             len++;
3171         }
3172     }
3173 
3174     //printf("Value for: %s\n", String8(s, len).string());
3175 
3176     uint32_t l10nReq = ResTable_map::L10N_NOT_REQUIRED;
3177     uint32_t attrMin = 0x80000000, attrMax = 0x7fffffff;
3178     bool fromAccessor = false;
3179     if (attrID != 0 && !Res_INTERNALID(attrID)) {
3180         const ssize_t p = getResourcePackageIndex(attrID);
3181         const bag_entry* bag;
3182         ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
3183         //printf("For attr 0x%08x got bag of %d\n", attrID, cnt);
3184         if (cnt >= 0) {
3185             while (cnt > 0) {
3186                 //printf("Entry 0x%08x = 0x%08x\n", bag->map.name.ident, bag->map.value.data);
3187                 switch (bag->map.name.ident) {
3188                 case ResTable_map::ATTR_TYPE:
3189                     attrType = bag->map.value.data;
3190                     break;
3191                 case ResTable_map::ATTR_MIN:
3192                     attrMin = bag->map.value.data;
3193                     break;
3194                 case ResTable_map::ATTR_MAX:
3195                     attrMax = bag->map.value.data;
3196                     break;
3197                 case ResTable_map::ATTR_L10N:
3198                     l10nReq = bag->map.value.data;
3199                     break;
3200                 }
3201                 bag++;
3202                 cnt--;
3203             }
3204             unlockBag(bag);
3205         } else if (accessor && accessor->getAttributeType(attrID, &attrType)) {
3206             fromAccessor = true;
3207             if (attrType == ResTable_map::TYPE_ENUM
3208                     || attrType == ResTable_map::TYPE_FLAGS
3209                     || attrType == ResTable_map::TYPE_INTEGER) {
3210                 accessor->getAttributeMin(attrID, &attrMin);
3211                 accessor->getAttributeMax(attrID, &attrMax);
3212             }
3213             if (localizationSetting) {
3214                 l10nReq = accessor->getAttributeL10N(attrID);
3215             }
3216         }
3217     }
3218 
3219     const bool canStringCoerce =
3220         coerceType && (attrType&ResTable_map::TYPE_STRING) != 0;
3221 
3222     if (*s == '@') {
3223         outValue->dataType = outValue->TYPE_REFERENCE;
3224 
3225         // Note: we don't check attrType here because the reference can
3226         // be to any other type; we just need to count on the client making
3227         // sure the referenced type is correct.
3228 
3229         //printf("Looking up ref: %s\n", String8(s, len).string());
3230 
3231         // It's a reference!
3232         if (len == 5 && s[1]=='n' && s[2]=='u' && s[3]=='l' && s[4]=='l') {
3233             outValue->data = 0;
3234             return true;
3235         } else {
3236             bool createIfNotFound = false;
3237             const char16_t* resourceRefName;
3238             int resourceNameLen;
3239             if (len > 2 && s[1] == '+') {
3240                 createIfNotFound = true;
3241                 resourceRefName = s + 2;
3242                 resourceNameLen = len - 2;
3243             } else if (len > 2 && s[1] == '*') {
3244                 enforcePrivate = false;
3245                 resourceRefName = s + 2;
3246                 resourceNameLen = len - 2;
3247             } else {
3248                 createIfNotFound = false;
3249                 resourceRefName = s + 1;
3250                 resourceNameLen = len - 1;
3251             }
3252             String16 package, type, name;
3253             if (!expandResourceRef(resourceRefName,resourceNameLen, &package, &type, &name,
3254                                    defType, defPackage, &errorMsg)) {
3255                 if (accessor != NULL) {
3256                     accessor->reportError(accessorCookie, errorMsg);
3257                 }
3258                 return false;
3259             }
3260 
3261             uint32_t specFlags = 0;
3262             uint32_t rid = identifierForName(name.string(), name.size(), type.string(),
3263                     type.size(), package.string(), package.size(), &specFlags);
3264             if (rid != 0) {
3265                 if (enforcePrivate) {
3266                     if ((specFlags&ResTable_typeSpec::SPEC_PUBLIC) == 0) {
3267                         if (accessor != NULL) {
3268                             accessor->reportError(accessorCookie, "Resource is not public.");
3269                         }
3270                         return false;
3271                     }
3272                 }
3273                 if (!accessor) {
3274                     outValue->data = rid;
3275                     return true;
3276                 }
3277                 rid = Res_MAKEID(
3278                     accessor->getRemappedPackage(Res_GETPACKAGE(rid)),
3279                     Res_GETTYPE(rid), Res_GETENTRY(rid));
3280                 TABLE_NOISY(printf("Incl %s:%s/%s: 0x%08x\n",
3281                        String8(package).string(), String8(type).string(),
3282                        String8(name).string(), rid));
3283                 outValue->data = rid;
3284                 return true;
3285             }
3286 
3287             if (accessor) {
3288                 uint32_t rid = accessor->getCustomResourceWithCreation(package, type, name,
3289                                                                        createIfNotFound);
3290                 if (rid != 0) {
3291                     TABLE_NOISY(printf("Pckg %s:%s/%s: 0x%08x\n",
3292                            String8(package).string(), String8(type).string(),
3293                            String8(name).string(), rid));
3294                     outValue->data = rid;
3295                     return true;
3296                 }
3297             }
3298         }
3299 
3300         if (accessor != NULL) {
3301             accessor->reportError(accessorCookie, "No resource found that matches the given name");
3302         }
3303         return false;
3304     }
3305 
3306     // if we got to here, and localization is required and it's not a reference,
3307     // complain and bail.
3308     if (l10nReq == ResTable_map::L10N_SUGGESTED) {
3309         if (localizationSetting) {
3310             if (accessor != NULL) {
3311                 accessor->reportError(accessorCookie, "This attribute must be localized.");
3312             }
3313         }
3314     }
3315 
3316     if (*s == '#') {
3317         // It's a color!  Convert to an integer of the form 0xaarrggbb.
3318         uint32_t color = 0;
3319         bool error = false;
3320         if (len == 4) {
3321             outValue->dataType = outValue->TYPE_INT_COLOR_RGB4;
3322             color |= 0xFF000000;
3323             color |= get_hex(s[1], &error) << 20;
3324             color |= get_hex(s[1], &error) << 16;
3325             color |= get_hex(s[2], &error) << 12;
3326             color |= get_hex(s[2], &error) << 8;
3327             color |= get_hex(s[3], &error) << 4;
3328             color |= get_hex(s[3], &error);
3329         } else if (len == 5) {
3330             outValue->dataType = outValue->TYPE_INT_COLOR_ARGB4;
3331             color |= get_hex(s[1], &error) << 28;
3332             color |= get_hex(s[1], &error) << 24;
3333             color |= get_hex(s[2], &error) << 20;
3334             color |= get_hex(s[2], &error) << 16;
3335             color |= get_hex(s[3], &error) << 12;
3336             color |= get_hex(s[3], &error) << 8;
3337             color |= get_hex(s[4], &error) << 4;
3338             color |= get_hex(s[4], &error);
3339         } else if (len == 7) {
3340             outValue->dataType = outValue->TYPE_INT_COLOR_RGB8;
3341             color |= 0xFF000000;
3342             color |= get_hex(s[1], &error) << 20;
3343             color |= get_hex(s[2], &error) << 16;
3344             color |= get_hex(s[3], &error) << 12;
3345             color |= get_hex(s[4], &error) << 8;
3346             color |= get_hex(s[5], &error) << 4;
3347             color |= get_hex(s[6], &error);
3348         } else if (len == 9) {
3349             outValue->dataType = outValue->TYPE_INT_COLOR_ARGB8;
3350             color |= get_hex(s[1], &error) << 28;
3351             color |= get_hex(s[2], &error) << 24;
3352             color |= get_hex(s[3], &error) << 20;
3353             color |= get_hex(s[4], &error) << 16;
3354             color |= get_hex(s[5], &error) << 12;
3355             color |= get_hex(s[6], &error) << 8;
3356             color |= get_hex(s[7], &error) << 4;
3357             color |= get_hex(s[8], &error);
3358         } else {
3359             error = true;
3360         }
3361         if (!error) {
3362             if ((attrType&ResTable_map::TYPE_COLOR) == 0) {
3363                 if (!canStringCoerce) {
3364                     if (accessor != NULL) {
3365                         accessor->reportError(accessorCookie,
3366                                 "Color types not allowed");
3367                     }
3368                     return false;
3369                 }
3370             } else {
3371                 outValue->data = color;
3372                 //printf("Color input=%s, output=0x%x\n", String8(s, len).string(), color);
3373                 return true;
3374             }
3375         } else {
3376             if ((attrType&ResTable_map::TYPE_COLOR) != 0) {
3377                 if (accessor != NULL) {
3378                     accessor->reportError(accessorCookie, "Color value not valid --"
3379                             " must be #rgb, #argb, #rrggbb, or #aarrggbb");
3380                 }
3381                 #if 0
3382                 fprintf(stderr, "%s: Color ID %s value %s is not valid\n",
3383                         "Resource File", //(const char*)in->getPrintableSource(),
3384                         String8(*curTag).string(),
3385                         String8(s, len).string());
3386                 #endif
3387                 return false;
3388             }
3389         }
3390     }
3391 
3392     if (*s == '?') {
3393         outValue->dataType = outValue->TYPE_ATTRIBUTE;
3394 
3395         // Note: we don't check attrType here because the reference can
3396         // be to any other type; we just need to count on the client making
3397         // sure the referenced type is correct.
3398 
3399         //printf("Looking up attr: %s\n", String8(s, len).string());
3400 
3401         static const String16 attr16("attr");
3402         String16 package, type, name;
3403         if (!expandResourceRef(s+1, len-1, &package, &type, &name,
3404                                &attr16, defPackage, &errorMsg)) {
3405             if (accessor != NULL) {
3406                 accessor->reportError(accessorCookie, errorMsg);
3407             }
3408             return false;
3409         }
3410 
3411         //printf("Pkg: %s, Type: %s, Name: %s\n",
3412         //       String8(package).string(), String8(type).string(),
3413         //       String8(name).string());
3414         uint32_t specFlags = 0;
3415         uint32_t rid =
3416             identifierForName(name.string(), name.size(),
3417                               type.string(), type.size(),
3418                               package.string(), package.size(), &specFlags);
3419         if (rid != 0) {
3420             if (enforcePrivate) {
3421                 if ((specFlags&ResTable_typeSpec::SPEC_PUBLIC) == 0) {
3422                     if (accessor != NULL) {
3423                         accessor->reportError(accessorCookie, "Attribute is not public.");
3424                     }
3425                     return false;
3426                 }
3427             }
3428             if (!accessor) {
3429                 outValue->data = rid;
3430                 return true;
3431             }
3432             rid = Res_MAKEID(
3433                 accessor->getRemappedPackage(Res_GETPACKAGE(rid)),
3434                 Res_GETTYPE(rid), Res_GETENTRY(rid));
3435             //printf("Incl %s:%s/%s: 0x%08x\n",
3436             //       String8(package).string(), String8(type).string(),
3437             //       String8(name).string(), rid);
3438             outValue->data = rid;
3439             return true;
3440         }
3441 
3442         if (accessor) {
3443             uint32_t rid = accessor->getCustomResource(package, type, name);
3444             if (rid != 0) {
3445                 //printf("Mine %s:%s/%s: 0x%08x\n",
3446                 //       String8(package).string(), String8(type).string(),
3447                 //       String8(name).string(), rid);
3448                 outValue->data = rid;
3449                 return true;
3450             }
3451         }
3452 
3453         if (accessor != NULL) {
3454             accessor->reportError(accessorCookie, "No resource found that matches the given name");
3455         }
3456         return false;
3457     }
3458 
3459     if (stringToInt(s, len, outValue)) {
3460         if ((attrType&ResTable_map::TYPE_INTEGER) == 0) {
3461             // If this type does not allow integers, but does allow floats,
3462             // fall through on this error case because the float type should
3463             // be able to accept any integer value.
3464             if (!canStringCoerce && (attrType&ResTable_map::TYPE_FLOAT) == 0) {
3465                 if (accessor != NULL) {
3466                     accessor->reportError(accessorCookie, "Integer types not allowed");
3467                 }
3468                 return false;
3469             }
3470         } else {
3471             if (((int32_t)outValue->data) < ((int32_t)attrMin)
3472                     || ((int32_t)outValue->data) > ((int32_t)attrMax)) {
3473                 if (accessor != NULL) {
3474                     accessor->reportError(accessorCookie, "Integer value out of range");
3475                 }
3476                 return false;
3477             }
3478             return true;
3479         }
3480     }
3481 
3482     if (stringToFloat(s, len, outValue)) {
3483         if (outValue->dataType == Res_value::TYPE_DIMENSION) {
3484             if ((attrType&ResTable_map::TYPE_DIMENSION) != 0) {
3485                 return true;
3486             }
3487             if (!canStringCoerce) {
3488                 if (accessor != NULL) {
3489                     accessor->reportError(accessorCookie, "Dimension types not allowed");
3490                 }
3491                 return false;
3492             }
3493         } else if (outValue->dataType == Res_value::TYPE_FRACTION) {
3494             if ((attrType&ResTable_map::TYPE_FRACTION) != 0) {
3495                 return true;
3496             }
3497             if (!canStringCoerce) {
3498                 if (accessor != NULL) {
3499                     accessor->reportError(accessorCookie, "Fraction types not allowed");
3500                 }
3501                 return false;
3502             }
3503         } else if ((attrType&ResTable_map::TYPE_FLOAT) == 0) {
3504             if (!canStringCoerce) {
3505                 if (accessor != NULL) {
3506                     accessor->reportError(accessorCookie, "Float types not allowed");
3507                 }
3508                 return false;
3509             }
3510         } else {
3511             return true;
3512         }
3513     }
3514 
3515     if (len == 4) {
3516         if ((s[0] == 't' || s[0] == 'T') &&
3517             (s[1] == 'r' || s[1] == 'R') &&
3518             (s[2] == 'u' || s[2] == 'U') &&
3519             (s[3] == 'e' || s[3] == 'E')) {
3520             if ((attrType&ResTable_map::TYPE_BOOLEAN) == 0) {
3521                 if (!canStringCoerce) {
3522                     if (accessor != NULL) {
3523                         accessor->reportError(accessorCookie, "Boolean types not allowed");
3524                     }
3525                     return false;
3526                 }
3527             } else {
3528                 outValue->dataType = outValue->TYPE_INT_BOOLEAN;
3529                 outValue->data = (uint32_t)-1;
3530                 return true;
3531             }
3532         }
3533     }
3534 
3535     if (len == 5) {
3536         if ((s[0] == 'f' || s[0] == 'F') &&
3537             (s[1] == 'a' || s[1] == 'A') &&
3538             (s[2] == 'l' || s[2] == 'L') &&
3539             (s[3] == 's' || s[3] == 'S') &&
3540             (s[4] == 'e' || s[4] == 'E')) {
3541             if ((attrType&ResTable_map::TYPE_BOOLEAN) == 0) {
3542                 if (!canStringCoerce) {
3543                     if (accessor != NULL) {
3544                         accessor->reportError(accessorCookie, "Boolean types not allowed");
3545                     }
3546                     return false;
3547                 }
3548             } else {
3549                 outValue->dataType = outValue->TYPE_INT_BOOLEAN;
3550                 outValue->data = 0;
3551                 return true;
3552             }
3553         }
3554     }
3555 
3556     if ((attrType&ResTable_map::TYPE_ENUM) != 0) {
3557         const ssize_t p = getResourcePackageIndex(attrID);
3558         const bag_entry* bag;
3559         ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
3560         //printf("Got %d for enum\n", cnt);
3561         if (cnt >= 0) {
3562             resource_name rname;
3563             while (cnt > 0) {
3564                 if (!Res_INTERNALID(bag->map.name.ident)) {
3565                     //printf("Trying attr #%08x\n", bag->map.name.ident);
3566                     if (getResourceName(bag->map.name.ident, &rname)) {
3567                         #if 0
3568                         printf("Matching %s against %s (0x%08x)\n",
3569                                String8(s, len).string(),
3570                                String8(rname.name, rname.nameLen).string(),
3571                                bag->map.name.ident);
3572                         #endif
3573                         if (strzcmp16(s, len, rname.name, rname.nameLen) == 0) {
3574                             outValue->dataType = bag->map.value.dataType;
3575                             outValue->data = bag->map.value.data;
3576                             unlockBag(bag);
3577                             return true;
3578                         }
3579                     }
3580 
3581                 }
3582                 bag++;
3583                 cnt--;
3584             }
3585             unlockBag(bag);
3586         }
3587 
3588         if (fromAccessor) {
3589             if (accessor->getAttributeEnum(attrID, s, len, outValue)) {
3590                 return true;
3591             }
3592         }
3593     }
3594 
3595     if ((attrType&ResTable_map::TYPE_FLAGS) != 0) {
3596         const ssize_t p = getResourcePackageIndex(attrID);
3597         const bag_entry* bag;
3598         ssize_t cnt = p >= 0 ? lockBag(attrID, &bag) : -1;
3599         //printf("Got %d for flags\n", cnt);
3600         if (cnt >= 0) {
3601             bool failed = false;
3602             resource_name rname;
3603             outValue->dataType = Res_value::TYPE_INT_HEX;
3604             outValue->data = 0;
3605             const char16_t* end = s + len;
3606             const char16_t* pos = s;
3607             while (pos < end && !failed) {
3608                 const char16_t* start = pos;
3609                 pos++;
3610                 while (pos < end && *pos != '|') {
3611                     pos++;
3612                 }
3613                 //printf("Looking for: %s\n", String8(start, pos-start).string());
3614                 const bag_entry* bagi = bag;
3615                 ssize_t i;
3616                 for (i=0; i<cnt; i++, bagi++) {
3617                     if (!Res_INTERNALID(bagi->map.name.ident)) {
3618                         //printf("Trying attr #%08x\n", bagi->map.name.ident);
3619                         if (getResourceName(bagi->map.name.ident, &rname)) {
3620                             #if 0
3621                             printf("Matching %s against %s (0x%08x)\n",
3622                                    String8(start,pos-start).string(),
3623                                    String8(rname.name, rname.nameLen).string(),
3624                                    bagi->map.name.ident);
3625                             #endif
3626                             if (strzcmp16(start, pos-start, rname.name, rname.nameLen) == 0) {
3627                                 outValue->data |= bagi->map.value.data;
3628                                 break;
3629                             }
3630                         }
3631                     }
3632                 }
3633                 if (i >= cnt) {
3634                     // Didn't find this flag identifier.
3635                     failed = true;
3636                 }
3637                 if (pos < end) {
3638                     pos++;
3639                 }
3640             }
3641             unlockBag(bag);
3642             if (!failed) {
3643                 //printf("Final flag value: 0x%lx\n", outValue->data);
3644                 return true;
3645             }
3646         }
3647 
3648 
3649         if (fromAccessor) {
3650             if (accessor->getAttributeFlags(attrID, s, len, outValue)) {
3651                 //printf("Final flag value: 0x%lx\n", outValue->data);
3652                 return true;
3653             }
3654         }
3655     }
3656 
3657     if ((attrType&ResTable_map::TYPE_STRING) == 0) {
3658         if (accessor != NULL) {
3659             accessor->reportError(accessorCookie, "String types not allowed");
3660         }
3661         return false;
3662     }
3663 
3664     // Generic string handling...
3665     outValue->dataType = outValue->TYPE_STRING;
3666     if (outString) {
3667         bool failed = collectString(outString, s, len, preserveSpaces, &errorMsg);
3668         if (accessor != NULL) {
3669             accessor->reportError(accessorCookie, errorMsg);
3670         }
3671         return failed;
3672     }
3673 
3674     return true;
3675 }
3676 
collectString(String16 * outString,const char16_t * s,size_t len,bool preserveSpaces,const char ** outErrorMsg,bool append)3677 bool ResTable::collectString(String16* outString,
3678                              const char16_t* s, size_t len,
3679                              bool preserveSpaces,
3680                              const char** outErrorMsg,
3681                              bool append)
3682 {
3683     String16 tmp;
3684 
3685     char quoted = 0;
3686     const char16_t* p = s;
3687     while (p < (s+len)) {
3688         while (p < (s+len)) {
3689             const char16_t c = *p;
3690             if (c == '\\') {
3691                 break;
3692             }
3693             if (!preserveSpaces) {
3694                 if (quoted == 0 && isspace16(c)
3695                     && (c != ' ' || isspace16(*(p+1)))) {
3696                     break;
3697                 }
3698                 if (c == '"' && (quoted == 0 || quoted == '"')) {
3699                     break;
3700                 }
3701                 if (c == '\'' && (quoted == 0 || quoted == '\'')) {
3702                     /*
3703                      * In practice, when people write ' instead of \'
3704                      * in a string, they are doing it by accident
3705                      * instead of really meaning to use ' as a quoting
3706                      * character.  Warn them so they don't lose it.
3707                      */
3708                     if (outErrorMsg) {
3709                         *outErrorMsg = "Apostrophe not preceded by \\";
3710                     }
3711                     return false;
3712                 }
3713             }
3714             p++;
3715         }
3716         if (p < (s+len)) {
3717             if (p > s) {
3718                 tmp.append(String16(s, p-s));
3719             }
3720             if (!preserveSpaces && (*p == '"' || *p == '\'')) {
3721                 if (quoted == 0) {
3722                     quoted = *p;
3723                 } else {
3724                     quoted = 0;
3725                 }
3726                 p++;
3727             } else if (!preserveSpaces && isspace16(*p)) {
3728                 // Space outside of a quote -- consume all spaces and
3729                 // leave a single plain space char.
3730                 tmp.append(String16(" "));
3731                 p++;
3732                 while (p < (s+len) && isspace16(*p)) {
3733                     p++;
3734                 }
3735             } else if (*p == '\\') {
3736                 p++;
3737                 if (p < (s+len)) {
3738                     switch (*p) {
3739                     case 't':
3740                         tmp.append(String16("\t"));
3741                         break;
3742                     case 'n':
3743                         tmp.append(String16("\n"));
3744                         break;
3745                     case '#':
3746                         tmp.append(String16("#"));
3747                         break;
3748                     case '@':
3749                         tmp.append(String16("@"));
3750                         break;
3751                     case '?':
3752                         tmp.append(String16("?"));
3753                         break;
3754                     case '"':
3755                         tmp.append(String16("\""));
3756                         break;
3757                     case '\'':
3758                         tmp.append(String16("'"));
3759                         break;
3760                     case '\\':
3761                         tmp.append(String16("\\"));
3762                         break;
3763                     case 'u':
3764                     {
3765                         char16_t chr = 0;
3766                         int i = 0;
3767                         while (i < 4 && p[1] != 0) {
3768                             p++;
3769                             i++;
3770                             int c;
3771                             if (*p >= '0' && *p <= '9') {
3772                                 c = *p - '0';
3773                             } else if (*p >= 'a' && *p <= 'f') {
3774                                 c = *p - 'a' + 10;
3775                             } else if (*p >= 'A' && *p <= 'F') {
3776                                 c = *p - 'A' + 10;
3777                             } else {
3778                                 if (outErrorMsg) {
3779                                     *outErrorMsg = "Bad character in \\u unicode escape sequence";
3780                                 }
3781                                 return false;
3782                             }
3783                             chr = (chr<<4) | c;
3784                         }
3785                         tmp.append(String16(&chr, 1));
3786                     } break;
3787                     default:
3788                         // ignore unknown escape chars.
3789                         break;
3790                     }
3791                     p++;
3792                 }
3793             }
3794             len -= (p-s);
3795             s = p;
3796         }
3797     }
3798 
3799     if (tmp.size() != 0) {
3800         if (len > 0) {
3801             tmp.append(String16(s, len));
3802         }
3803         if (append) {
3804             outString->append(tmp);
3805         } else {
3806             outString->setTo(tmp);
3807         }
3808     } else {
3809         if (append) {
3810             outString->append(String16(s, len));
3811         } else {
3812             outString->setTo(s, len);
3813         }
3814     }
3815 
3816     return true;
3817 }
3818 
getBasePackageCount() const3819 size_t ResTable::getBasePackageCount() const
3820 {
3821     if (mError != NO_ERROR) {
3822         return 0;
3823     }
3824     return mPackageGroups.size();
3825 }
3826 
getBasePackageName(size_t idx) const3827 const char16_t* ResTable::getBasePackageName(size_t idx) const
3828 {
3829     if (mError != NO_ERROR) {
3830         return 0;
3831     }
3832     LOG_FATAL_IF(idx >= mPackageGroups.size(),
3833                  "Requested package index %d past package count %d",
3834                  (int)idx, (int)mPackageGroups.size());
3835     return mPackageGroups[idx]->name.string();
3836 }
3837 
getBasePackageId(size_t idx) const3838 uint32_t ResTable::getBasePackageId(size_t idx) const
3839 {
3840     if (mError != NO_ERROR) {
3841         return 0;
3842     }
3843     LOG_FATAL_IF(idx >= mPackageGroups.size(),
3844                  "Requested package index %d past package count %d",
3845                  (int)idx, (int)mPackageGroups.size());
3846     return mPackageGroups[idx]->id;
3847 }
3848 
getTableCount() const3849 size_t ResTable::getTableCount() const
3850 {
3851     return mHeaders.size();
3852 }
3853 
getTableStringBlock(size_t index) const3854 const ResStringPool* ResTable::getTableStringBlock(size_t index) const
3855 {
3856     return &mHeaders[index]->values;
3857 }
3858 
getTableCookie(size_t index) const3859 void* ResTable::getTableCookie(size_t index) const
3860 {
3861     return mHeaders[index]->cookie;
3862 }
3863 
getConfigurations(Vector<ResTable_config> * configs) const3864 void ResTable::getConfigurations(Vector<ResTable_config>* configs) const
3865 {
3866     const size_t I = mPackageGroups.size();
3867     for (size_t i=0; i<I; i++) {
3868         const PackageGroup* packageGroup = mPackageGroups[i];
3869         const size_t J = packageGroup->packages.size();
3870         for (size_t j=0; j<J; j++) {
3871             const Package* package = packageGroup->packages[j];
3872             const size_t K = package->types.size();
3873             for (size_t k=0; k<K; k++) {
3874                 const Type* type = package->types[k];
3875                 if (type == NULL) continue;
3876                 const size_t L = type->configs.size();
3877                 for (size_t l=0; l<L; l++) {
3878                     const ResTable_type* config = type->configs[l];
3879                     const ResTable_config* cfg = &config->config;
3880                     // only insert unique
3881                     const size_t M = configs->size();
3882                     size_t m;
3883                     for (m=0; m<M; m++) {
3884                         if (0 == (*configs)[m].compare(*cfg)) {
3885                             break;
3886                         }
3887                     }
3888                     // if we didn't find it
3889                     if (m == M) {
3890                         configs->add(*cfg);
3891                     }
3892                 }
3893             }
3894         }
3895     }
3896 }
3897 
getLocales(Vector<String8> * locales) const3898 void ResTable::getLocales(Vector<String8>* locales) const
3899 {
3900     Vector<ResTable_config> configs;
3901     LOGV("calling getConfigurations");
3902     getConfigurations(&configs);
3903     LOGV("called getConfigurations size=%d", (int)configs.size());
3904     const size_t I = configs.size();
3905     for (size_t i=0; i<I; i++) {
3906         char locale[6];
3907         configs[i].getLocale(locale);
3908         const size_t J = locales->size();
3909         size_t j;
3910         for (j=0; j<J; j++) {
3911             if (0 == strcmp(locale, (*locales)[j].string())) {
3912                 break;
3913             }
3914         }
3915         if (j == J) {
3916             locales->add(String8(locale));
3917         }
3918     }
3919 }
3920 
getEntry(const Package * package,int typeIndex,int entryIndex,const ResTable_config * config,const ResTable_type ** outType,const ResTable_entry ** outEntry,const Type ** outTypeClass) const3921 ssize_t ResTable::getEntry(
3922     const Package* package, int typeIndex, int entryIndex,
3923     const ResTable_config* config,
3924     const ResTable_type** outType, const ResTable_entry** outEntry,
3925     const Type** outTypeClass) const
3926 {
3927     LOGV("Getting entry from package %p\n", package);
3928     const ResTable_package* const pkg = package->package;
3929 
3930     const Type* allTypes = package->getType(typeIndex);
3931     LOGV("allTypes=%p\n", allTypes);
3932     if (allTypes == NULL) {
3933         LOGV("Skipping entry type index 0x%02x because type is NULL!\n", typeIndex);
3934         return 0;
3935     }
3936 
3937     if ((size_t)entryIndex >= allTypes->entryCount) {
3938         LOGW("getEntry failing because entryIndex %d is beyond type entryCount %d",
3939             entryIndex, (int)allTypes->entryCount);
3940         return BAD_TYPE;
3941     }
3942 
3943     const ResTable_type* type = NULL;
3944     uint32_t offset = ResTable_type::NO_ENTRY;
3945     ResTable_config bestConfig;
3946     memset(&bestConfig, 0, sizeof(bestConfig)); // make the compiler shut up
3947 
3948     const size_t NT = allTypes->configs.size();
3949     for (size_t i=0; i<NT; i++) {
3950         const ResTable_type* const thisType = allTypes->configs[i];
3951         if (thisType == NULL) continue;
3952 
3953         ResTable_config thisConfig;
3954         thisConfig.copyFromDtoH(thisType->config);
3955 
3956         TABLE_GETENTRY(LOGI("Match entry 0x%x in type 0x%x (sz 0x%x): imsi:%d/%d=%d/%d "
3957                             "lang:%c%c=%c%c cnt:%c%c=%c%c orien:%d=%d touch:%d=%d "
3958                             "density:%d=%d key:%d=%d inp:%d=%d nav:%d=%d w:%d=%d h:%d=%d "
3959                             "swdp:%d=%d wdp:%d=%d hdp:%d=%d\n",
3960                            entryIndex, typeIndex+1, dtohl(thisType->config.size),
3961                            thisConfig.mcc, thisConfig.mnc,
3962                            config ? config->mcc : 0, config ? config->mnc : 0,
3963                            thisConfig.language[0] ? thisConfig.language[0] : '-',
3964                            thisConfig.language[1] ? thisConfig.language[1] : '-',
3965                            config && config->language[0] ? config->language[0] : '-',
3966                            config && config->language[1] ? config->language[1] : '-',
3967                            thisConfig.country[0] ? thisConfig.country[0] : '-',
3968                            thisConfig.country[1] ? thisConfig.country[1] : '-',
3969                            config && config->country[0] ? config->country[0] : '-',
3970                            config && config->country[1] ? config->country[1] : '-',
3971                            thisConfig.orientation,
3972                            config ? config->orientation : 0,
3973                            thisConfig.touchscreen,
3974                            config ? config->touchscreen : 0,
3975                            thisConfig.density,
3976                            config ? config->density : 0,
3977                            thisConfig.keyboard,
3978                            config ? config->keyboard : 0,
3979                            thisConfig.inputFlags,
3980                            config ? config->inputFlags : 0,
3981                            thisConfig.navigation,
3982                            config ? config->navigation : 0,
3983                            thisConfig.screenWidth,
3984                            config ? config->screenWidth : 0,
3985                            thisConfig.screenHeight,
3986                            config ? config->screenHeight : 0,
3987                            thisConfig.smallestScreenWidthDp,
3988                            config ? config->smallestScreenWidthDp : 0,
3989                            thisConfig.screenWidthDp,
3990                            config ? config->screenWidthDp : 0,
3991                            thisConfig.screenHeightDp,
3992                            config ? config->screenHeightDp : 0));
3993 
3994         // Check to make sure this one is valid for the current parameters.
3995         if (config && !thisConfig.match(*config)) {
3996             TABLE_GETENTRY(LOGI("Does not match config!\n"));
3997             continue;
3998         }
3999 
4000         // Check if there is the desired entry in this type.
4001 
4002         const uint8_t* const end = ((const uint8_t*)thisType)
4003             + dtohl(thisType->header.size);
4004         const uint32_t* const eindex = (const uint32_t*)
4005             (((const uint8_t*)thisType) + dtohs(thisType->header.headerSize));
4006 
4007         uint32_t thisOffset = dtohl(eindex[entryIndex]);
4008         if (thisOffset == ResTable_type::NO_ENTRY) {
4009             TABLE_GETENTRY(LOGI("Skipping because it is not defined!\n"));
4010             continue;
4011         }
4012 
4013         if (type != NULL) {
4014             // Check if this one is less specific than the last found.  If so,
4015             // we will skip it.  We check starting with things we most care
4016             // about to those we least care about.
4017             if (!thisConfig.isBetterThan(bestConfig, config)) {
4018                 TABLE_GETENTRY(LOGI("This config is worse than last!\n"));
4019                 continue;
4020             }
4021         }
4022 
4023         type = thisType;
4024         offset = thisOffset;
4025         bestConfig = thisConfig;
4026         TABLE_GETENTRY(LOGI("Best entry so far -- using it!\n"));
4027         if (!config) break;
4028     }
4029 
4030     if (type == NULL) {
4031         TABLE_GETENTRY(LOGI("No value found for requested entry!\n"));
4032         return BAD_INDEX;
4033     }
4034 
4035     offset += dtohl(type->entriesStart);
4036     TABLE_NOISY(aout << "Looking in resource table " << package->header->header
4037           << ", typeOff="
4038           << (void*)(((const char*)type)-((const char*)package->header->header))
4039           << ", offset=" << (void*)offset << endl);
4040 
4041     if (offset > (dtohl(type->header.size)-sizeof(ResTable_entry))) {
4042         LOGW("ResTable_entry at 0x%x is beyond type chunk data 0x%x",
4043              offset, dtohl(type->header.size));
4044         return BAD_TYPE;
4045     }
4046     if ((offset&0x3) != 0) {
4047         LOGW("ResTable_entry at 0x%x is not on an integer boundary",
4048              offset);
4049         return BAD_TYPE;
4050     }
4051 
4052     const ResTable_entry* const entry = (const ResTable_entry*)
4053         (((const uint8_t*)type) + offset);
4054     if (dtohs(entry->size) < sizeof(*entry)) {
4055         LOGW("ResTable_entry size 0x%x is too small", dtohs(entry->size));
4056         return BAD_TYPE;
4057     }
4058 
4059     *outType = type;
4060     *outEntry = entry;
4061     if (outTypeClass != NULL) {
4062         *outTypeClass = allTypes;
4063     }
4064     return offset + dtohs(entry->size);
4065 }
4066 
parsePackage(const ResTable_package * const pkg,const Header * const header,uint32_t idmap_id)4067 status_t ResTable::parsePackage(const ResTable_package* const pkg,
4068                                 const Header* const header, uint32_t idmap_id)
4069 {
4070     const uint8_t* base = (const uint8_t*)pkg;
4071     status_t err = validate_chunk(&pkg->header, sizeof(*pkg),
4072                                   header->dataEnd, "ResTable_package");
4073     if (err != NO_ERROR) {
4074         return (mError=err);
4075     }
4076 
4077     const size_t pkgSize = dtohl(pkg->header.size);
4078 
4079     if (dtohl(pkg->typeStrings) >= pkgSize) {
4080         LOGW("ResTable_package type strings at %p are past chunk size %p.",
4081              (void*)dtohl(pkg->typeStrings), (void*)pkgSize);
4082         return (mError=BAD_TYPE);
4083     }
4084     if ((dtohl(pkg->typeStrings)&0x3) != 0) {
4085         LOGW("ResTable_package type strings at %p is not on an integer boundary.",
4086              (void*)dtohl(pkg->typeStrings));
4087         return (mError=BAD_TYPE);
4088     }
4089     if (dtohl(pkg->keyStrings) >= pkgSize) {
4090         LOGW("ResTable_package key strings at %p are past chunk size %p.",
4091              (void*)dtohl(pkg->keyStrings), (void*)pkgSize);
4092         return (mError=BAD_TYPE);
4093     }
4094     if ((dtohl(pkg->keyStrings)&0x3) != 0) {
4095         LOGW("ResTable_package key strings at %p is not on an integer boundary.",
4096              (void*)dtohl(pkg->keyStrings));
4097         return (mError=BAD_TYPE);
4098     }
4099 
4100     Package* package = NULL;
4101     PackageGroup* group = NULL;
4102     uint32_t id = idmap_id != 0 ? idmap_id : dtohl(pkg->id);
4103     // If at this point id == 0, pkg is an overlay package without a
4104     // corresponding idmap. During regular usage, overlay packages are
4105     // always loaded alongside their idmaps, but during idmap creation
4106     // the package is temporarily loaded by itself.
4107     if (id < 256) {
4108 
4109         package = new Package(this, header, pkg);
4110         if (package == NULL) {
4111             return (mError=NO_MEMORY);
4112         }
4113 
4114         size_t idx = mPackageMap[id];
4115         if (idx == 0) {
4116             idx = mPackageGroups.size()+1;
4117 
4118             char16_t tmpName[sizeof(pkg->name)/sizeof(char16_t)];
4119             strcpy16_dtoh(tmpName, pkg->name, sizeof(pkg->name)/sizeof(char16_t));
4120             group = new PackageGroup(this, String16(tmpName), id);
4121             if (group == NULL) {
4122                 delete package;
4123                 return (mError=NO_MEMORY);
4124             }
4125 
4126             err = package->typeStrings.setTo(base+dtohl(pkg->typeStrings),
4127                                            header->dataEnd-(base+dtohl(pkg->typeStrings)));
4128             if (err != NO_ERROR) {
4129                 delete group;
4130                 delete package;
4131                 return (mError=err);
4132             }
4133             err = package->keyStrings.setTo(base+dtohl(pkg->keyStrings),
4134                                           header->dataEnd-(base+dtohl(pkg->keyStrings)));
4135             if (err != NO_ERROR) {
4136                 delete group;
4137                 delete package;
4138                 return (mError=err);
4139             }
4140 
4141             //printf("Adding new package id %d at index %d\n", id, idx);
4142             err = mPackageGroups.add(group);
4143             if (err < NO_ERROR) {
4144                 return (mError=err);
4145             }
4146             group->basePackage = package;
4147 
4148             mPackageMap[id] = (uint8_t)idx;
4149         } else {
4150             group = mPackageGroups.itemAt(idx-1);
4151             if (group == NULL) {
4152                 return (mError=UNKNOWN_ERROR);
4153             }
4154         }
4155         err = group->packages.add(package);
4156         if (err < NO_ERROR) {
4157             return (mError=err);
4158         }
4159     } else {
4160         LOG_ALWAYS_FATAL("Package id out of range");
4161         return NO_ERROR;
4162     }
4163 
4164 
4165     // Iterate through all chunks.
4166     size_t curPackage = 0;
4167 
4168     const ResChunk_header* chunk =
4169         (const ResChunk_header*)(((const uint8_t*)pkg)
4170                                  + dtohs(pkg->header.headerSize));
4171     const uint8_t* endPos = ((const uint8_t*)pkg) + dtohs(pkg->header.size);
4172     while (((const uint8_t*)chunk) <= (endPos-sizeof(ResChunk_header)) &&
4173            ((const uint8_t*)chunk) <= (endPos-dtohl(chunk->size))) {
4174         TABLE_NOISY(LOGV("PackageChunk: type=0x%x, headerSize=0x%x, size=0x%x, pos=%p\n",
4175                          dtohs(chunk->type), dtohs(chunk->headerSize), dtohl(chunk->size),
4176                          (void*)(((const uint8_t*)chunk) - ((const uint8_t*)header->header))));
4177         const size_t csize = dtohl(chunk->size);
4178         const uint16_t ctype = dtohs(chunk->type);
4179         if (ctype == RES_TABLE_TYPE_SPEC_TYPE) {
4180             const ResTable_typeSpec* typeSpec = (const ResTable_typeSpec*)(chunk);
4181             err = validate_chunk(&typeSpec->header, sizeof(*typeSpec),
4182                                  endPos, "ResTable_typeSpec");
4183             if (err != NO_ERROR) {
4184                 return (mError=err);
4185             }
4186 
4187             const size_t typeSpecSize = dtohl(typeSpec->header.size);
4188 
4189             LOAD_TABLE_NOISY(printf("TypeSpec off %p: type=0x%x, headerSize=0x%x, size=%p\n",
4190                                     (void*)(base-(const uint8_t*)chunk),
4191                                     dtohs(typeSpec->header.type),
4192                                     dtohs(typeSpec->header.headerSize),
4193                                     (void*)typeSize));
4194             // look for block overrun or int overflow when multiplying by 4
4195             if ((dtohl(typeSpec->entryCount) > (INT32_MAX/sizeof(uint32_t))
4196                     || dtohs(typeSpec->header.headerSize)+(sizeof(uint32_t)*dtohl(typeSpec->entryCount))
4197                     > typeSpecSize)) {
4198                 LOGW("ResTable_typeSpec entry index to %p extends beyond chunk end %p.",
4199                      (void*)(dtohs(typeSpec->header.headerSize)
4200                              +(sizeof(uint32_t)*dtohl(typeSpec->entryCount))),
4201                      (void*)typeSpecSize);
4202                 return (mError=BAD_TYPE);
4203             }
4204 
4205             if (typeSpec->id == 0) {
4206                 LOGW("ResTable_type has an id of 0.");
4207                 return (mError=BAD_TYPE);
4208             }
4209 
4210             while (package->types.size() < typeSpec->id) {
4211                 package->types.add(NULL);
4212             }
4213             Type* t = package->types[typeSpec->id-1];
4214             if (t == NULL) {
4215                 t = new Type(header, package, dtohl(typeSpec->entryCount));
4216                 package->types.editItemAt(typeSpec->id-1) = t;
4217             } else if (dtohl(typeSpec->entryCount) != t->entryCount) {
4218                 LOGW("ResTable_typeSpec entry count inconsistent: given %d, previously %d",
4219                     (int)dtohl(typeSpec->entryCount), (int)t->entryCount);
4220                 return (mError=BAD_TYPE);
4221             }
4222             t->typeSpecFlags = (const uint32_t*)(
4223                     ((const uint8_t*)typeSpec) + dtohs(typeSpec->header.headerSize));
4224             t->typeSpec = typeSpec;
4225 
4226         } else if (ctype == RES_TABLE_TYPE_TYPE) {
4227             const ResTable_type* type = (const ResTable_type*)(chunk);
4228             err = validate_chunk(&type->header, sizeof(*type)-sizeof(ResTable_config)+4,
4229                                  endPos, "ResTable_type");
4230             if (err != NO_ERROR) {
4231                 return (mError=err);
4232             }
4233 
4234             const size_t typeSize = dtohl(type->header.size);
4235 
4236             LOAD_TABLE_NOISY(printf("Type off %p: type=0x%x, headerSize=0x%x, size=%p\n",
4237                                     (void*)(base-(const uint8_t*)chunk),
4238                                     dtohs(type->header.type),
4239                                     dtohs(type->header.headerSize),
4240                                     (void*)typeSize));
4241             if (dtohs(type->header.headerSize)+(sizeof(uint32_t)*dtohl(type->entryCount))
4242                 > typeSize) {
4243                 LOGW("ResTable_type entry index to %p extends beyond chunk end %p.",
4244                      (void*)(dtohs(type->header.headerSize)
4245                              +(sizeof(uint32_t)*dtohl(type->entryCount))),
4246                      (void*)typeSize);
4247                 return (mError=BAD_TYPE);
4248             }
4249             if (dtohl(type->entryCount) != 0
4250                 && dtohl(type->entriesStart) > (typeSize-sizeof(ResTable_entry))) {
4251                 LOGW("ResTable_type entriesStart at %p extends beyond chunk end %p.",
4252                      (void*)dtohl(type->entriesStart), (void*)typeSize);
4253                 return (mError=BAD_TYPE);
4254             }
4255             if (type->id == 0) {
4256                 LOGW("ResTable_type has an id of 0.");
4257                 return (mError=BAD_TYPE);
4258             }
4259 
4260             while (package->types.size() < type->id) {
4261                 package->types.add(NULL);
4262             }
4263             Type* t = package->types[type->id-1];
4264             if (t == NULL) {
4265                 t = new Type(header, package, dtohl(type->entryCount));
4266                 package->types.editItemAt(type->id-1) = t;
4267             } else if (dtohl(type->entryCount) != t->entryCount) {
4268                 LOGW("ResTable_type entry count inconsistent: given %d, previously %d",
4269                     (int)dtohl(type->entryCount), (int)t->entryCount);
4270                 return (mError=BAD_TYPE);
4271             }
4272 
4273             TABLE_GETENTRY(
4274                 ResTable_config thisConfig;
4275                 thisConfig.copyFromDtoH(type->config);
4276                 LOGI("Adding config to type %d: imsi:%d/%d lang:%c%c cnt:%c%c "
4277                      "orien:%d touch:%d density:%d key:%d inp:%d nav:%d w:%d h:%d "
4278                      "swdp:%d wdp:%d hdp:%d\n",
4279                       type->id,
4280                       thisConfig.mcc, thisConfig.mnc,
4281                       thisConfig.language[0] ? thisConfig.language[0] : '-',
4282                       thisConfig.language[1] ? thisConfig.language[1] : '-',
4283                       thisConfig.country[0] ? thisConfig.country[0] : '-',
4284                       thisConfig.country[1] ? thisConfig.country[1] : '-',
4285                       thisConfig.orientation,
4286                       thisConfig.touchscreen,
4287                       thisConfig.density,
4288                       thisConfig.keyboard,
4289                       thisConfig.inputFlags,
4290                       thisConfig.navigation,
4291                       thisConfig.screenWidth,
4292                       thisConfig.screenHeight,
4293                       thisConfig.smallestScreenWidthDp,
4294                       thisConfig.screenWidthDp,
4295                       thisConfig.screenHeightDp));
4296             t->configs.add(type);
4297         } else {
4298             status_t err = validate_chunk(chunk, sizeof(ResChunk_header),
4299                                           endPos, "ResTable_package:unknown");
4300             if (err != NO_ERROR) {
4301                 return (mError=err);
4302             }
4303         }
4304         chunk = (const ResChunk_header*)
4305             (((const uint8_t*)chunk) + csize);
4306     }
4307 
4308     if (group->typeCount == 0) {
4309         group->typeCount = package->types.size();
4310     }
4311 
4312     return NO_ERROR;
4313 }
4314 
createIdmap(const ResTable & overlay,uint32_t originalCrc,uint32_t overlayCrc,void ** outData,size_t * outSize) const4315 status_t ResTable::createIdmap(const ResTable& overlay, uint32_t originalCrc, uint32_t overlayCrc,
4316                                void** outData, size_t* outSize) const
4317 {
4318     // see README for details on the format of map
4319     if (mPackageGroups.size() == 0) {
4320         return UNKNOWN_ERROR;
4321     }
4322     if (mPackageGroups[0]->packages.size() == 0) {
4323         return UNKNOWN_ERROR;
4324     }
4325 
4326     Vector<Vector<uint32_t> > map;
4327     const PackageGroup* pg = mPackageGroups[0];
4328     const Package* pkg = pg->packages[0];
4329     size_t typeCount = pkg->types.size();
4330     // starting size is header + first item (number of types in map)
4331     *outSize = (IDMAP_HEADER_SIZE + 1) * sizeof(uint32_t);
4332     const String16 overlayPackage(overlay.mPackageGroups[0]->packages[0]->package->name);
4333     const uint32_t pkg_id = pkg->package->id << 24;
4334 
4335     for (size_t typeIndex = 0; typeIndex < typeCount; ++typeIndex) {
4336         ssize_t offset = -1;
4337         const Type* typeConfigs = pkg->getType(typeIndex);
4338         ssize_t mapIndex = map.add();
4339         if (mapIndex < 0) {
4340             return NO_MEMORY;
4341         }
4342         Vector<uint32_t>& vector = map.editItemAt(mapIndex);
4343         for (size_t entryIndex = 0; entryIndex < typeConfigs->entryCount; ++entryIndex) {
4344             uint32_t resID = (0xff000000 & ((pkg->package->id)<<24))
4345                 | (0x00ff0000 & ((typeIndex+1)<<16))
4346                 | (0x0000ffff & (entryIndex));
4347             resource_name resName;
4348             if (!this->getResourceName(resID, &resName)) {
4349                 LOGW("idmap: resource 0x%08x has spec but lacks values, skipping\n", resID);
4350                 continue;
4351             }
4352 
4353             const String16 overlayType(resName.type, resName.typeLen);
4354             const String16 overlayName(resName.name, resName.nameLen);
4355             uint32_t overlayResID = overlay.identifierForName(overlayName.string(),
4356                                                               overlayName.size(),
4357                                                               overlayType.string(),
4358                                                               overlayType.size(),
4359                                                               overlayPackage.string(),
4360                                                               overlayPackage.size());
4361             if (overlayResID != 0) {
4362                 // overlay package has package ID == 0, use original package's ID instead
4363                 overlayResID |= pkg_id;
4364             }
4365             vector.push(overlayResID);
4366             if (overlayResID != 0 && offset == -1) {
4367                 offset = Res_GETENTRY(resID);
4368             }
4369 #if 0
4370             if (overlayResID != 0) {
4371                 LOGD("%s/%s 0x%08x -> 0x%08x\n",
4372                      String8(String16(resName.type)).string(),
4373                      String8(String16(resName.name)).string(),
4374                      resID, overlayResID);
4375             }
4376 #endif
4377         }
4378 
4379         if (offset != -1) {
4380             // shave off leading and trailing entries which lack overlay values
4381             vector.removeItemsAt(0, offset);
4382             vector.insertAt((uint32_t)offset, 0, 1);
4383             while (vector.top() == 0) {
4384                 vector.pop();
4385             }
4386             // reserve space for number and offset of entries, and the actual entries
4387             *outSize += (2 + vector.size()) * sizeof(uint32_t);
4388         } else {
4389             // no entries of current type defined in overlay package
4390             vector.clear();
4391             // reserve space for type offset
4392             *outSize += 1 * sizeof(uint32_t);
4393         }
4394     }
4395 
4396     if ((*outData = malloc(*outSize)) == NULL) {
4397         return NO_MEMORY;
4398     }
4399     uint32_t* data = (uint32_t*)*outData;
4400     *data++ = htodl(IDMAP_MAGIC);
4401     *data++ = htodl(originalCrc);
4402     *data++ = htodl(overlayCrc);
4403     const size_t mapSize = map.size();
4404     *data++ = htodl(mapSize);
4405     size_t offset = mapSize;
4406     for (size_t i = 0; i < mapSize; ++i) {
4407         const Vector<uint32_t>& vector = map.itemAt(i);
4408         const size_t N = vector.size();
4409         if (N == 0) {
4410             *data++ = htodl(0);
4411         } else {
4412             offset++;
4413             *data++ = htodl(offset);
4414             offset += N;
4415         }
4416     }
4417     for (size_t i = 0; i < mapSize; ++i) {
4418         const Vector<uint32_t>& vector = map.itemAt(i);
4419         const size_t N = vector.size();
4420         if (N == 0) {
4421             continue;
4422         }
4423         *data++ = htodl(N - 1); // do not count the offset (which is vector's first element)
4424         for (size_t j = 0; j < N; ++j) {
4425             const uint32_t& overlayResID = vector.itemAt(j);
4426             *data++ = htodl(overlayResID);
4427         }
4428     }
4429 
4430     return NO_ERROR;
4431 }
4432 
getIdmapInfo(const void * idmap,size_t sizeBytes,uint32_t * pOriginalCrc,uint32_t * pOverlayCrc)4433 bool ResTable::getIdmapInfo(const void* idmap, size_t sizeBytes,
4434                             uint32_t* pOriginalCrc, uint32_t* pOverlayCrc)
4435 {
4436     const uint32_t* map = (const uint32_t*)idmap;
4437     if (!assertIdmapHeader(map, sizeBytes)) {
4438         return false;
4439     }
4440     *pOriginalCrc = map[1];
4441     *pOverlayCrc = map[2];
4442     return true;
4443 }
4444 
4445 
4446 #ifndef HAVE_ANDROID_OS
4447 #define CHAR16_TO_CSTR(c16, len) (String8(String16(c16,len)).string())
4448 
4449 #define CHAR16_ARRAY_EQ(constant, var, len) \
4450         ((len == (sizeof(constant)/sizeof(constant[0]))) && (0 == memcmp((var), (constant), (len))))
4451 
print_complex(uint32_t complex,bool isFraction)4452 void print_complex(uint32_t complex, bool isFraction)
4453 {
4454     const float MANTISSA_MULT =
4455         1.0f / (1<<Res_value::COMPLEX_MANTISSA_SHIFT);
4456     const float RADIX_MULTS[] = {
4457         1.0f*MANTISSA_MULT, 1.0f/(1<<7)*MANTISSA_MULT,
4458         1.0f/(1<<15)*MANTISSA_MULT, 1.0f/(1<<23)*MANTISSA_MULT
4459     };
4460 
4461     float value = (complex&(Res_value::COMPLEX_MANTISSA_MASK
4462                    <<Res_value::COMPLEX_MANTISSA_SHIFT))
4463             * RADIX_MULTS[(complex>>Res_value::COMPLEX_RADIX_SHIFT)
4464                             & Res_value::COMPLEX_RADIX_MASK];
4465     printf("%f", value);
4466 
4467     if (!isFraction) {
4468         switch ((complex>>Res_value::COMPLEX_UNIT_SHIFT)&Res_value::COMPLEX_UNIT_MASK) {
4469             case Res_value::COMPLEX_UNIT_PX: printf("px"); break;
4470             case Res_value::COMPLEX_UNIT_DIP: printf("dp"); break;
4471             case Res_value::COMPLEX_UNIT_SP: printf("sp"); break;
4472             case Res_value::COMPLEX_UNIT_PT: printf("pt"); break;
4473             case Res_value::COMPLEX_UNIT_IN: printf("in"); break;
4474             case Res_value::COMPLEX_UNIT_MM: printf("mm"); break;
4475             default: printf(" (unknown unit)"); break;
4476         }
4477     } else {
4478         switch ((complex>>Res_value::COMPLEX_UNIT_SHIFT)&Res_value::COMPLEX_UNIT_MASK) {
4479             case Res_value::COMPLEX_UNIT_FRACTION: printf("%%"); break;
4480             case Res_value::COMPLEX_UNIT_FRACTION_PARENT: printf("%%p"); break;
4481             default: printf(" (unknown unit)"); break;
4482         }
4483     }
4484 }
4485 
4486 // Normalize a string for output
normalizeForOutput(const char * input)4487 String8 ResTable::normalizeForOutput( const char *input )
4488 {
4489     String8 ret;
4490     char buff[2];
4491     buff[1] = '\0';
4492 
4493     while (*input != '\0') {
4494         switch (*input) {
4495             // All interesting characters are in the ASCII zone, so we are making our own lives
4496             // easier by scanning the string one byte at a time.
4497         case '\\':
4498             ret += "\\\\";
4499             break;
4500         case '\n':
4501             ret += "\\n";
4502             break;
4503         case '"':
4504             ret += "\\\"";
4505             break;
4506         default:
4507             buff[0] = *input;
4508             ret += buff;
4509             break;
4510         }
4511 
4512         input++;
4513     }
4514 
4515     return ret;
4516 }
4517 
print_value(const Package * pkg,const Res_value & value) const4518 void ResTable::print_value(const Package* pkg, const Res_value& value) const
4519 {
4520     if (value.dataType == Res_value::TYPE_NULL) {
4521         printf("(null)\n");
4522     } else if (value.dataType == Res_value::TYPE_REFERENCE) {
4523         printf("(reference) 0x%08x\n", value.data);
4524     } else if (value.dataType == Res_value::TYPE_ATTRIBUTE) {
4525         printf("(attribute) 0x%08x\n", value.data);
4526     } else if (value.dataType == Res_value::TYPE_STRING) {
4527         size_t len;
4528         const char* str8 = pkg->header->values.string8At(
4529                 value.data, &len);
4530         if (str8 != NULL) {
4531             printf("(string8) \"%s\"\n", normalizeForOutput(str8).string());
4532         } else {
4533             const char16_t* str16 = pkg->header->values.stringAt(
4534                     value.data, &len);
4535             if (str16 != NULL) {
4536                 printf("(string16) \"%s\"\n",
4537                     normalizeForOutput(String8(str16, len).string()).string());
4538             } else {
4539                 printf("(string) null\n");
4540             }
4541         }
4542     } else if (value.dataType == Res_value::TYPE_FLOAT) {
4543         printf("(float) %g\n", *(const float*)&value.data);
4544     } else if (value.dataType == Res_value::TYPE_DIMENSION) {
4545         printf("(dimension) ");
4546         print_complex(value.data, false);
4547         printf("\n");
4548     } else if (value.dataType == Res_value::TYPE_FRACTION) {
4549         printf("(fraction) ");
4550         print_complex(value.data, true);
4551         printf("\n");
4552     } else if (value.dataType >= Res_value::TYPE_FIRST_COLOR_INT
4553             || value.dataType <= Res_value::TYPE_LAST_COLOR_INT) {
4554         printf("(color) #%08x\n", value.data);
4555     } else if (value.dataType == Res_value::TYPE_INT_BOOLEAN) {
4556         printf("(boolean) %s\n", value.data ? "true" : "false");
4557     } else if (value.dataType >= Res_value::TYPE_FIRST_INT
4558             || value.dataType <= Res_value::TYPE_LAST_INT) {
4559         printf("(int) 0x%08x or %d\n", value.data, value.data);
4560     } else {
4561         printf("(unknown type) t=0x%02x d=0x%08x (s=0x%04x r=0x%02x)\n",
4562                (int)value.dataType, (int)value.data,
4563                (int)value.size, (int)value.res0);
4564     }
4565 }
4566 
print(bool inclValues) const4567 void ResTable::print(bool inclValues) const
4568 {
4569     if (mError != 0) {
4570         printf("mError=0x%x (%s)\n", mError, strerror(mError));
4571     }
4572 #if 0
4573     printf("mParams=%c%c-%c%c,\n",
4574             mParams.language[0], mParams.language[1],
4575             mParams.country[0], mParams.country[1]);
4576 #endif
4577     size_t pgCount = mPackageGroups.size();
4578     printf("Package Groups (%d)\n", (int)pgCount);
4579     for (size_t pgIndex=0; pgIndex<pgCount; pgIndex++) {
4580         const PackageGroup* pg = mPackageGroups[pgIndex];
4581         printf("Package Group %d id=%d packageCount=%d name=%s\n",
4582                 (int)pgIndex, pg->id, (int)pg->packages.size(),
4583                 String8(pg->name).string());
4584 
4585         size_t pkgCount = pg->packages.size();
4586         for (size_t pkgIndex=0; pkgIndex<pkgCount; pkgIndex++) {
4587             const Package* pkg = pg->packages[pkgIndex];
4588             size_t typeCount = pkg->types.size();
4589             printf("  Package %d id=%d name=%s typeCount=%d\n", (int)pkgIndex,
4590                     pkg->package->id, String8(String16(pkg->package->name)).string(),
4591                     (int)typeCount);
4592             for (size_t typeIndex=0; typeIndex<typeCount; typeIndex++) {
4593                 const Type* typeConfigs = pkg->getType(typeIndex);
4594                 if (typeConfigs == NULL) {
4595                     printf("    type %d NULL\n", (int)typeIndex);
4596                     continue;
4597                 }
4598                 const size_t NTC = typeConfigs->configs.size();
4599                 printf("    type %d configCount=%d entryCount=%d\n",
4600                        (int)typeIndex, (int)NTC, (int)typeConfigs->entryCount);
4601                 if (typeConfigs->typeSpecFlags != NULL) {
4602                     for (size_t entryIndex=0; entryIndex<typeConfigs->entryCount; entryIndex++) {
4603                         uint32_t resID = (0xff000000 & ((pkg->package->id)<<24))
4604                                     | (0x00ff0000 & ((typeIndex+1)<<16))
4605                                     | (0x0000ffff & (entryIndex));
4606                         resource_name resName;
4607                         if (this->getResourceName(resID, &resName)) {
4608                             printf("      spec resource 0x%08x %s:%s/%s: flags=0x%08x\n",
4609                                 resID,
4610                                 CHAR16_TO_CSTR(resName.package, resName.packageLen),
4611                                 CHAR16_TO_CSTR(resName.type, resName.typeLen),
4612                                 CHAR16_TO_CSTR(resName.name, resName.nameLen),
4613                                 dtohl(typeConfigs->typeSpecFlags[entryIndex]));
4614                         } else {
4615                             printf("      INVALID TYPE CONFIG FOR RESOURCE 0x%08x\n", resID);
4616                         }
4617                     }
4618                 }
4619                 for (size_t configIndex=0; configIndex<NTC; configIndex++) {
4620                     const ResTable_type* type = typeConfigs->configs[configIndex];
4621                     if ((((uint64_t)type)&0x3) != 0) {
4622                         printf("      NON-INTEGER ResTable_type ADDRESS: %p\n", type);
4623                         continue;
4624                     }
4625                     char density[16];
4626                     uint16_t dval = dtohs(type->config.density);
4627                     if (dval == ResTable_config::DENSITY_DEFAULT) {
4628                         strcpy(density, "def");
4629                     } else if (dval == ResTable_config::DENSITY_NONE) {
4630                         strcpy(density, "no");
4631                     } else {
4632                         sprintf(density, "%d", (int)dval);
4633                     }
4634                     printf("      config %d", (int)configIndex);
4635                     if (type->config.mcc != 0) {
4636                         printf(" mcc=%d", dtohs(type->config.mcc));
4637                     }
4638                     if (type->config.mnc != 0) {
4639                         printf(" mnc=%d", dtohs(type->config.mnc));
4640                     }
4641                     if (type->config.locale != 0) {
4642                         printf(" lang=%c%c cnt=%c%c",
4643                                type->config.language[0] ? type->config.language[0] : '-',
4644                                type->config.language[1] ? type->config.language[1] : '-',
4645                                type->config.country[0] ? type->config.country[0] : '-',
4646                                type->config.country[1] ? type->config.country[1] : '-');
4647                     }
4648                     if (type->config.screenLayout != 0) {
4649                         printf(" sz=%d",
4650                                 type->config.screenLayout&ResTable_config::MASK_SCREENSIZE);
4651                         switch (type->config.screenLayout&ResTable_config::MASK_SCREENSIZE) {
4652                             case ResTable_config::SCREENSIZE_SMALL:
4653                                 printf(" (small)");
4654                                 break;
4655                             case ResTable_config::SCREENSIZE_NORMAL:
4656                                 printf(" (normal)");
4657                                 break;
4658                             case ResTable_config::SCREENSIZE_LARGE:
4659                                 printf(" (large)");
4660                                 break;
4661                             case ResTable_config::SCREENSIZE_XLARGE:
4662                                 printf(" (xlarge)");
4663                                 break;
4664                         }
4665                         printf(" lng=%d",
4666                                 type->config.screenLayout&ResTable_config::MASK_SCREENLONG);
4667                         switch (type->config.screenLayout&ResTable_config::MASK_SCREENLONG) {
4668                             case ResTable_config::SCREENLONG_NO:
4669                                 printf(" (notlong)");
4670                                 break;
4671                             case ResTable_config::SCREENLONG_YES:
4672                                 printf(" (long)");
4673                                 break;
4674                         }
4675                     }
4676                     if (type->config.orientation != 0) {
4677                         printf(" orient=%d", type->config.orientation);
4678                         switch (type->config.orientation) {
4679                             case ResTable_config::ORIENTATION_PORT:
4680                                 printf(" (port)");
4681                                 break;
4682                             case ResTable_config::ORIENTATION_LAND:
4683                                 printf(" (land)");
4684                                 break;
4685                             case ResTable_config::ORIENTATION_SQUARE:
4686                                 printf(" (square)");
4687                                 break;
4688                         }
4689                     }
4690                     if (type->config.uiMode != 0) {
4691                         printf(" type=%d",
4692                                 type->config.uiMode&ResTable_config::MASK_UI_MODE_TYPE);
4693                         switch (type->config.uiMode&ResTable_config::MASK_UI_MODE_TYPE) {
4694                             case ResTable_config::UI_MODE_TYPE_NORMAL:
4695                                 printf(" (normal)");
4696                                 break;
4697                             case ResTable_config::UI_MODE_TYPE_CAR:
4698                                 printf(" (car)");
4699                                 break;
4700                         }
4701                         printf(" night=%d",
4702                                 type->config.uiMode&ResTable_config::MASK_UI_MODE_NIGHT);
4703                         switch (type->config.uiMode&ResTable_config::MASK_UI_MODE_NIGHT) {
4704                             case ResTable_config::UI_MODE_NIGHT_NO:
4705                                 printf(" (no)");
4706                                 break;
4707                             case ResTable_config::UI_MODE_NIGHT_YES:
4708                                 printf(" (yes)");
4709                                 break;
4710                         }
4711                     }
4712                     if (dval != 0) {
4713                         printf(" density=%s", density);
4714                     }
4715                     if (type->config.touchscreen != 0) {
4716                         printf(" touch=%d", type->config.touchscreen);
4717                         switch (type->config.touchscreen) {
4718                             case ResTable_config::TOUCHSCREEN_NOTOUCH:
4719                                 printf(" (notouch)");
4720                                 break;
4721                             case ResTable_config::TOUCHSCREEN_STYLUS:
4722                                 printf(" (stylus)");
4723                                 break;
4724                             case ResTable_config::TOUCHSCREEN_FINGER:
4725                                 printf(" (finger)");
4726                                 break;
4727                         }
4728                     }
4729                     if (type->config.inputFlags != 0) {
4730                         printf(" keyhid=%d", type->config.inputFlags&ResTable_config::MASK_KEYSHIDDEN);
4731                         switch (type->config.inputFlags&ResTable_config::MASK_KEYSHIDDEN) {
4732                             case ResTable_config::KEYSHIDDEN_NO:
4733                                 printf(" (no)");
4734                                 break;
4735                             case ResTable_config::KEYSHIDDEN_YES:
4736                                 printf(" (yes)");
4737                                 break;
4738                             case ResTable_config::KEYSHIDDEN_SOFT:
4739                                 printf(" (soft)");
4740                                 break;
4741                         }
4742                         printf(" navhid=%d", type->config.inputFlags&ResTable_config::MASK_NAVHIDDEN);
4743                         switch (type->config.inputFlags&ResTable_config::MASK_NAVHIDDEN) {
4744                             case ResTable_config::NAVHIDDEN_NO:
4745                                 printf(" (no)");
4746                                 break;
4747                             case ResTable_config::NAVHIDDEN_YES:
4748                                 printf(" (yes)");
4749                                 break;
4750                         }
4751                     }
4752                     if (type->config.keyboard != 0) {
4753                         printf(" kbd=%d", type->config.keyboard);
4754                         switch (type->config.keyboard) {
4755                             case ResTable_config::KEYBOARD_NOKEYS:
4756                                 printf(" (nokeys)");
4757                                 break;
4758                             case ResTable_config::KEYBOARD_QWERTY:
4759                                 printf(" (qwerty)");
4760                                 break;
4761                             case ResTable_config::KEYBOARD_12KEY:
4762                                 printf(" (12key)");
4763                                 break;
4764                         }
4765                     }
4766                     if (type->config.navigation != 0) {
4767                         printf(" nav=%d", type->config.navigation);
4768                         switch (type->config.navigation) {
4769                             case ResTable_config::NAVIGATION_NONAV:
4770                                 printf(" (nonav)");
4771                                 break;
4772                             case ResTable_config::NAVIGATION_DPAD:
4773                                 printf(" (dpad)");
4774                                 break;
4775                             case ResTable_config::NAVIGATION_TRACKBALL:
4776                                 printf(" (trackball)");
4777                                 break;
4778                             case ResTable_config::NAVIGATION_WHEEL:
4779                                 printf(" (wheel)");
4780                                 break;
4781                         }
4782                     }
4783                     if (type->config.screenWidth != 0) {
4784                         printf(" w=%d", dtohs(type->config.screenWidth));
4785                     }
4786                     if (type->config.screenHeight != 0) {
4787                         printf(" h=%d", dtohs(type->config.screenHeight));
4788                     }
4789                     if (type->config.smallestScreenWidthDp != 0) {
4790                         printf(" swdp=%d", dtohs(type->config.smallestScreenWidthDp));
4791                     }
4792                     if (type->config.screenWidthDp != 0) {
4793                         printf(" wdp=%d", dtohs(type->config.screenWidthDp));
4794                     }
4795                     if (type->config.screenHeightDp != 0) {
4796                         printf(" hdp=%d", dtohs(type->config.screenHeightDp));
4797                     }
4798                     if (type->config.sdkVersion != 0) {
4799                         printf(" sdk=%d", dtohs(type->config.sdkVersion));
4800                     }
4801                     if (type->config.minorVersion != 0) {
4802                         printf(" mver=%d", dtohs(type->config.minorVersion));
4803                     }
4804                     printf("\n");
4805                     size_t entryCount = dtohl(type->entryCount);
4806                     uint32_t entriesStart = dtohl(type->entriesStart);
4807                     if ((entriesStart&0x3) != 0) {
4808                         printf("      NON-INTEGER ResTable_type entriesStart OFFSET: %p\n", (void*)entriesStart);
4809                         continue;
4810                     }
4811                     uint32_t typeSize = dtohl(type->header.size);
4812                     if ((typeSize&0x3) != 0) {
4813                         printf("      NON-INTEGER ResTable_type header.size: %p\n", (void*)typeSize);
4814                         continue;
4815                     }
4816                     for (size_t entryIndex=0; entryIndex<entryCount; entryIndex++) {
4817 
4818                         const uint8_t* const end = ((const uint8_t*)type)
4819                             + dtohl(type->header.size);
4820                         const uint32_t* const eindex = (const uint32_t*)
4821                             (((const uint8_t*)type) + dtohs(type->header.headerSize));
4822 
4823                         uint32_t thisOffset = dtohl(eindex[entryIndex]);
4824                         if (thisOffset == ResTable_type::NO_ENTRY) {
4825                             continue;
4826                         }
4827 
4828                         uint32_t resID = (0xff000000 & ((pkg->package->id)<<24))
4829                                     | (0x00ff0000 & ((typeIndex+1)<<16))
4830                                     | (0x0000ffff & (entryIndex));
4831                         resource_name resName;
4832                         if (this->getResourceName(resID, &resName)) {
4833                             printf("        resource 0x%08x %s:%s/%s: ", resID,
4834                                     CHAR16_TO_CSTR(resName.package, resName.packageLen),
4835                                     CHAR16_TO_CSTR(resName.type, resName.typeLen),
4836                                     CHAR16_TO_CSTR(resName.name, resName.nameLen));
4837                         } else {
4838                             printf("        INVALID RESOURCE 0x%08x: ", resID);
4839                         }
4840                         if ((thisOffset&0x3) != 0) {
4841                             printf("NON-INTEGER OFFSET: %p\n", (void*)thisOffset);
4842                             continue;
4843                         }
4844                         if ((thisOffset+sizeof(ResTable_entry)) > typeSize) {
4845                             printf("OFFSET OUT OF BOUNDS: %p+%p (size is %p)\n",
4846                                    (void*)entriesStart, (void*)thisOffset,
4847                                    (void*)typeSize);
4848                             continue;
4849                         }
4850 
4851                         const ResTable_entry* ent = (const ResTable_entry*)
4852                             (((const uint8_t*)type) + entriesStart + thisOffset);
4853                         if (((entriesStart + thisOffset)&0x3) != 0) {
4854                             printf("NON-INTEGER ResTable_entry OFFSET: %p\n",
4855                                  (void*)(entriesStart + thisOffset));
4856                             continue;
4857                         }
4858 
4859                         uint16_t esize = dtohs(ent->size);
4860                         if ((esize&0x3) != 0) {
4861                             printf("NON-INTEGER ResTable_entry SIZE: %p\n", (void*)esize);
4862                             continue;
4863                         }
4864                         if ((thisOffset+esize) > typeSize) {
4865                             printf("ResTable_entry OUT OF BOUNDS: %p+%p+%p (size is %p)\n",
4866                                    (void*)entriesStart, (void*)thisOffset,
4867                                    (void*)esize, (void*)typeSize);
4868                             continue;
4869                         }
4870 
4871                         const Res_value* valuePtr = NULL;
4872                         const ResTable_map_entry* bagPtr = NULL;
4873                         Res_value value;
4874                         if ((dtohs(ent->flags)&ResTable_entry::FLAG_COMPLEX) != 0) {
4875                             printf("<bag>");
4876                             bagPtr = (const ResTable_map_entry*)ent;
4877                         } else {
4878                             valuePtr = (const Res_value*)
4879                                 (((const uint8_t*)ent) + esize);
4880                             value.copyFrom_dtoh(*valuePtr);
4881                             printf("t=0x%02x d=0x%08x (s=0x%04x r=0x%02x)",
4882                                    (int)value.dataType, (int)value.data,
4883                                    (int)value.size, (int)value.res0);
4884                         }
4885 
4886                         if ((dtohs(ent->flags)&ResTable_entry::FLAG_PUBLIC) != 0) {
4887                             printf(" (PUBLIC)");
4888                         }
4889                         printf("\n");
4890 
4891                         if (inclValues) {
4892                             if (valuePtr != NULL) {
4893                                 printf("          ");
4894                                 print_value(pkg, value);
4895                             } else if (bagPtr != NULL) {
4896                                 const int N = dtohl(bagPtr->count);
4897                                 const uint8_t* baseMapPtr = (const uint8_t*)ent;
4898                                 size_t mapOffset = esize;
4899                                 const ResTable_map* mapPtr = (ResTable_map*)(baseMapPtr+mapOffset);
4900                                 printf("          Parent=0x%08x, Count=%d\n",
4901                                     dtohl(bagPtr->parent.ident), N);
4902                                 for (int i=0; i<N && mapOffset < (typeSize-sizeof(ResTable_map)); i++) {
4903                                     printf("          #%i (Key=0x%08x): ",
4904                                         i, dtohl(mapPtr->name.ident));
4905                                     value.copyFrom_dtoh(mapPtr->value);
4906                                     print_value(pkg, value);
4907                                     const size_t size = dtohs(mapPtr->value.size);
4908                                     mapOffset += size + sizeof(*mapPtr)-sizeof(mapPtr->value);
4909                                     mapPtr = (ResTable_map*)(baseMapPtr+mapOffset);
4910                                 }
4911                             }
4912                         }
4913                     }
4914                 }
4915             }
4916         }
4917     }
4918 }
4919 
4920 #endif // HAVE_ANDROID_OS
4921 
4922 }   // namespace android
4923