xref: /aosp_15_r20/external/sandboxed-api/contrib/libidn2/libidn2_sapi.h (revision ec63e07ab9515d95e79c211197c445ef84cefa6a)
1*ec63e07aSXin Li // Copyright 2022 Google LLC
2*ec63e07aSXin Li //
3*ec63e07aSXin Li // Licensed under the Apache License, Version 2.0 (the "License");
4*ec63e07aSXin Li // you may not use this file except in compliance with the License.
5*ec63e07aSXin Li // You may obtain a copy of the License at
6*ec63e07aSXin Li //
7*ec63e07aSXin Li //     https://www.apache.org/licenses/LICENSE-2.0
8*ec63e07aSXin Li //
9*ec63e07aSXin Li // Unless required by applicable law or agreed to in writing, software
10*ec63e07aSXin Li // distributed under the License is distributed on an "AS IS" BASIS,
11*ec63e07aSXin Li // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*ec63e07aSXin Li // See the License for the specific language governing permissions and
13*ec63e07aSXin Li // limitations under the License.
14*ec63e07aSXin Li 
15*ec63e07aSXin Li #ifndef CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_
16*ec63e07aSXin Li #define CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_
17*ec63e07aSXin Li 
18*ec63e07aSXin Li #include <idn2.h>
19*ec63e07aSXin Li #include <syscall.h>
20*ec63e07aSXin Li 
21*ec63e07aSXin Li #include <cstdlib>
22*ec63e07aSXin Li 
23*ec63e07aSXin Li #include "libidn2_sapi.sapi.h"  // NOLINT(build/include)
24*ec63e07aSXin Li #include "absl/log/die_if_null.h"
25*ec63e07aSXin Li #include "sandboxed_api/util/fileops.h"
26*ec63e07aSXin Li 
27*ec63e07aSXin Li class Idn2SapiSandbox : public IDN2Sandbox {
28*ec63e07aSXin Li  public:
ModifyPolicy(sandbox2::PolicyBuilder *)29*ec63e07aSXin Li   std::unique_ptr<sandbox2::Policy> ModifyPolicy(
30*ec63e07aSXin Li       sandbox2::PolicyBuilder*) override {
31*ec63e07aSXin Li     return sandbox2::PolicyBuilder()
32*ec63e07aSXin Li         .AllowSystemMalloc()
33*ec63e07aSXin Li         .AllowRead()
34*ec63e07aSXin Li         .AllowStat()
35*ec63e07aSXin Li         .AllowWrite()
36*ec63e07aSXin Li         .AllowExit()
37*ec63e07aSXin Li         .AllowGetPIDs()
38*ec63e07aSXin Li         .AllowSyscalls({
39*ec63e07aSXin Li             __NR_futex,
40*ec63e07aSXin Li             __NR_close,
41*ec63e07aSXin Li             __NR_lseek,
42*ec63e07aSXin Li         })
43*ec63e07aSXin Li         .BlockSyscallWithErrno(__NR_openat, ENOENT)
44*ec63e07aSXin Li         .BuildOrDie();
45*ec63e07aSXin Li   }
46*ec63e07aSXin Li };
47*ec63e07aSXin Li 
48*ec63e07aSXin Li class IDN2Lib {
49*ec63e07aSXin Li  public:
IDN2Lib(Idn2SapiSandbox * sandbox)50*ec63e07aSXin Li   explicit IDN2Lib(Idn2SapiSandbox* sandbox)
51*ec63e07aSXin Li       : sandbox_(ABSL_DIE_IF_NULL(sandbox)), api_(sandbox_) {}
52*ec63e07aSXin Li   absl::StatusOr<std::string> idn2_register_u8(const char* ulabel,
53*ec63e07aSXin Li                                                const char* alabel);
54*ec63e07aSXin Li   absl::StatusOr<std::string> idn2_lookup_u8(const char* data);
55*ec63e07aSXin Li   absl::StatusOr<std::string> idn2_to_ascii_8z(const char* ulabel);
56*ec63e07aSXin Li   absl::StatusOr<std::string> idn2_to_unicode_8z8z(const char* ulabel);
57*ec63e07aSXin Li 
58*ec63e07aSXin Li  private:
59*ec63e07aSXin Li   absl::StatusOr<std::string> SapiGeneric(
60*ec63e07aSXin Li       const char* data,
61*ec63e07aSXin Li       absl::StatusOr<int> (IDN2Api::*cb)(sapi::v::Ptr* input,
62*ec63e07aSXin Li                                          sapi::v::Ptr* output, int flags));
63*ec63e07aSXin Li   absl::StatusOr<std::string> ProcessErrors(const absl::StatusOr<int>& status,
64*ec63e07aSXin Li                                             sapi::v::GenericPtr& ptr);
65*ec63e07aSXin Li   Idn2SapiSandbox* sandbox_;
66*ec63e07aSXin Li   IDN2Api api_;
67*ec63e07aSXin Li };
68*ec63e07aSXin Li 
69*ec63e07aSXin Li #endif  // CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_
70