1// Copyright (C) 2016 The Qt Company Ltd.
2// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
3// Qt-Security score:critical reason:data-parser
4
5#include "qdbusargument_p.h"
6#include "qdbusconnection.h"
7
8#include <memory>
9
10#include <stdlib.h>
11
12QT_BEGIN_NAMESPACE
13
14template <typename T>
15static inline T qIterGet(DBusMessageIter *it)
16{
17 // Use a union of expected and largest type q_dbus_message_iter_get_basic
18 // will return to ensure reading the wrong basic type does not result in
19 // stack overwrite
20 union {
21 // The value to be extracted
22 T t;
23 // Largest type that q_dbus_message_iter_get_basic will return
24 // according to dbus_message_iter_get_basic API documentation
25 dbus_uint64_t maxValue;
26 // A pointer to ensure no stack overwrite in case there is a platform
27 // where sizeof(void*) > sizeof(dbus_uint64_t)
28 void* ptr;
29 } value;
30
31 // Initialize the value in case a narrower type is extracted to it.
32 // Note that the result of extracting a narrower type in place of a wider
33 // one and vice-versa will be platform-dependent.
34 value.t = T();
35
36 q_dbus_message_iter_get_basic(it, &value);
37 q_dbus_message_iter_next(iter: it);
38 return value.t;
39}
40
41QDBusDemarshaller::~QDBusDemarshaller()
42{
43}
44
45inline QString QDBusDemarshaller::currentSignature()
46{
47 char *sig = q_dbus_message_iter_get_signature(iter: &iterator);
48 QString retval = QString::fromUtf8(utf8: sig);
49 q_dbus_free(memory: sig);
50
51 return retval;
52}
53
54inline uchar QDBusDemarshaller::toByte()
55{
56 return qIterGet<uchar>(it: &iterator);
57}
58
59inline bool QDBusDemarshaller::toBool()
60{
61 return bool(qIterGet<dbus_bool_t>(it: &iterator));
62}
63
64inline ushort QDBusDemarshaller::toUShort()
65{
66 return qIterGet<dbus_uint16_t>(it: &iterator);
67}
68
69inline short QDBusDemarshaller::toShort()
70{
71 return qIterGet<dbus_int16_t>(it: &iterator);
72}
73
74inline int QDBusDemarshaller::toInt()
75{
76 return qIterGet<dbus_int32_t>(it: &iterator);
77}
78
79inline uint QDBusDemarshaller::toUInt()
80{
81 return qIterGet<dbus_uint32_t>(it: &iterator);
82}
83
84inline qlonglong QDBusDemarshaller::toLongLong()
85{
86 return qIterGet<qlonglong>(it: &iterator);
87}
88
89inline qulonglong QDBusDemarshaller::toULongLong()
90{
91 return qIterGet<qulonglong>(it: &iterator);
92}
93
94inline double QDBusDemarshaller::toDouble()
95{
96 return qIterGet<double>(it: &iterator);
97}
98
99inline QString QDBusDemarshaller::toStringUnchecked()
100{
101 return QString::fromUtf8(utf8: qIterGet<char *>(it: &iterator));
102}
103
104inline QString QDBusDemarshaller::toString()
105{
106 if (isCurrentTypeStringLike())
107 return toStringUnchecked();
108 else
109 return QString();
110}
111
112inline QDBusObjectPath QDBusDemarshaller::toObjectPathUnchecked()
113 {
114 return QDBusObjectPath(QString::fromUtf8(utf8: qIterGet<char *>(it: &iterator)));
115 }
116
117inline QDBusObjectPath QDBusDemarshaller::toObjectPath()
118{
119 if (isCurrentTypeStringLike())
120 return toObjectPathUnchecked();
121 else
122 return QDBusObjectPath();
123}
124
125inline QDBusSignature QDBusDemarshaller::toSignatureUnchecked()
126 {
127 return QDBusSignature(QString::fromUtf8(utf8: qIterGet<char *>(it: &iterator)));
128 }
129
130inline QDBusSignature QDBusDemarshaller::toSignature()
131{
132 if (isCurrentTypeStringLike())
133 return toSignatureUnchecked();
134 else
135 return QDBusSignature();
136}
137
138inline QDBusUnixFileDescriptor QDBusDemarshaller::toUnixFileDescriptor()
139{
140 QDBusUnixFileDescriptor fd;
141 fd.giveFileDescriptor(fileDescriptor: qIterGet<dbus_int32_t>(it: &iterator));
142 return fd;
143}
144
145inline QDBusVariant QDBusDemarshaller::toVariant()
146{
147 QDBusDemarshaller sub(capabilities);
148 sub.message = q_dbus_message_ref(message);
149 q_dbus_message_iter_recurse(iter: &iterator, sub: &sub.iterator);
150 q_dbus_message_iter_next(iter: &iterator);
151
152 return QDBusVariant( sub.toVariantInternal() );
153}
154
155QDBusArgument::ElementType QDBusDemarshaller::currentType()
156{
157 switch (q_dbus_message_iter_get_arg_type(iter: &iterator)) {
158 case DBUS_TYPE_BYTE:
159 case DBUS_TYPE_INT16:
160 case DBUS_TYPE_UINT16:
161 case DBUS_TYPE_INT32:
162 case DBUS_TYPE_UINT32:
163 case DBUS_TYPE_INT64:
164 case DBUS_TYPE_UINT64:
165 case DBUS_TYPE_BOOLEAN:
166 case DBUS_TYPE_DOUBLE:
167 case DBUS_TYPE_STRING:
168 case DBUS_TYPE_OBJECT_PATH:
169 case DBUS_TYPE_SIGNATURE:
170 return QDBusArgument::BasicType;
171
172 case DBUS_TYPE_VARIANT:
173 return QDBusArgument::VariantType;
174
175 case DBUS_TYPE_ARRAY:
176 switch (q_dbus_message_iter_get_element_type(iter: &iterator)) {
177 case DBUS_TYPE_BYTE:
178 case DBUS_TYPE_STRING:
179 // QByteArray and QStringList
180 return QDBusArgument::BasicType;
181 case DBUS_TYPE_DICT_ENTRY:
182 return QDBusArgument::MapType;
183 default:
184 return QDBusArgument::ArrayType;
185 }
186
187 case DBUS_TYPE_STRUCT:
188 return QDBusArgument::StructureType;
189 case DBUS_TYPE_DICT_ENTRY:
190 return QDBusArgument::MapEntryType;
191
192 case DBUS_TYPE_UNIX_FD:
193 return capabilities & QDBusConnection::UnixFileDescriptorPassing ?
194 QDBusArgument::BasicType : QDBusArgument::UnknownType;
195
196 case DBUS_TYPE_INVALID:
197 return QDBusArgument::UnknownType;
198
199// default:
200// qWarning("QDBusDemarshaller: Found unknown D-Bus type %d '%c'",
201// q_dbus_message_iter_get_arg_type(&iterator),
202// q_dbus_message_iter_get_arg_type(&iterator));
203 }
204 return QDBusArgument::UnknownType;
205}
206
207QVariant QDBusDemarshaller::toVariantInternal()
208{
209 switch (q_dbus_message_iter_get_arg_type(iter: &iterator)) {
210 case DBUS_TYPE_BYTE:
211 return QVariant::fromValue(value: toByte());
212 case DBUS_TYPE_INT16:
213 return QVariant::fromValue(value: toShort());
214 case DBUS_TYPE_UINT16:
215 return QVariant::fromValue(value: toUShort());
216 case DBUS_TYPE_INT32:
217 return toInt();
218 case DBUS_TYPE_UINT32:
219 return toUInt();
220 case DBUS_TYPE_DOUBLE:
221 return toDouble();
222 case DBUS_TYPE_BOOLEAN:
223 return toBool();
224 case DBUS_TYPE_INT64:
225 return toLongLong();
226 case DBUS_TYPE_UINT64:
227 return toULongLong();
228 case DBUS_TYPE_STRING:
229 return toStringUnchecked();
230 case DBUS_TYPE_OBJECT_PATH:
231 return QVariant::fromValue(value: toObjectPathUnchecked());
232 case DBUS_TYPE_SIGNATURE:
233 return QVariant::fromValue(value: toSignatureUnchecked());
234 case DBUS_TYPE_VARIANT:
235 return QVariant::fromValue(value: toVariant());
236
237 case DBUS_TYPE_ARRAY:
238 switch (q_dbus_message_iter_get_element_type(iter: &iterator)) {
239 case DBUS_TYPE_BYTE:
240 // QByteArray
241 return toByteArrayUnchecked();
242 case DBUS_TYPE_STRING:
243 return toStringListUnchecked();
244 case DBUS_TYPE_DICT_ENTRY:
245 return QVariant::fromValue(value: duplicate());
246
247 default:
248 return QVariant::fromValue(value: duplicate());
249 }
250
251 case DBUS_TYPE_STRUCT:
252 return QVariant::fromValue(value: duplicate());
253
254 case DBUS_TYPE_UNIX_FD:
255 if (capabilities & QDBusConnection::UnixFileDescriptorPassing)
256 return QVariant::fromValue(value: toUnixFileDescriptor());
257 Q_FALLTHROUGH();
258
259 default:
260// qWarning("QDBusDemarshaller: Found unknown D-Bus type %d '%c'",
261// q_dbus_message_iter_get_arg_type(&iterator),
262// q_dbus_message_iter_get_arg_type(&iterator));
263 char *ptr = nullptr;
264 ptr += q_dbus_message_iter_get_arg_type(iter: &iterator);
265 q_dbus_message_iter_next(iter: &iterator);
266
267 // I hope you never dereference this pointer!
268 return QVariant::fromValue<void *>(value: ptr);
269 };
270}
271
272bool QDBusDemarshaller::isCurrentTypeStringLike()
273{
274 const int type = q_dbus_message_iter_get_arg_type(iter: &iterator);
275 switch (type) {
276 case DBUS_TYPE_STRING: //FALLTHROUGH
277 case DBUS_TYPE_OBJECT_PATH: //FALLTHROUGH
278 case DBUS_TYPE_SIGNATURE:
279 return true;
280 default:
281 return false;
282 }
283}
284
285QStringList QDBusDemarshaller::toStringListUnchecked()
286{
287 QStringList list;
288
289 QDBusDemarshaller sub(capabilities);
290 q_dbus_message_iter_recurse(iter: &iterator, sub: &sub.iterator);
291 q_dbus_message_iter_next(iter: &iterator);
292 while (!sub.atEnd())
293 list.append(t: sub.toStringUnchecked());
294
295 return list;
296}
297
298QStringList QDBusDemarshaller::toStringList()
299{
300 if (q_dbus_message_iter_get_arg_type(iter: &iterator) == DBUS_TYPE_ARRAY
301 && q_dbus_message_iter_get_element_type(iter: &iterator) == DBUS_TYPE_STRING)
302 return toStringListUnchecked();
303 else
304 return QStringList();
305}
306
307QByteArray QDBusDemarshaller::toByteArrayUnchecked()
308{
309 DBusMessageIter sub;
310 q_dbus_message_iter_recurse(iter: &iterator, sub: &sub);
311 q_dbus_message_iter_next(iter: &iterator);
312 int len;
313 char* data;
314 q_dbus_message_iter_get_fixed_array(iter: &sub,value: &data,n_elements: &len);
315 return QByteArray(data,len);
316}
317
318QByteArray QDBusDemarshaller::toByteArray()
319{
320 if (q_dbus_message_iter_get_arg_type(iter: &iterator) == DBUS_TYPE_ARRAY
321 && q_dbus_message_iter_get_element_type(iter: &iterator) == DBUS_TYPE_BYTE) {
322 return toByteArrayUnchecked();
323 }
324 return QByteArray();
325}
326
327bool QDBusDemarshaller::atEnd()
328{
329 // dbus_message_iter_has_next is broken if the list has one single element
330 return q_dbus_message_iter_get_arg_type(iter: &iterator) == DBUS_TYPE_INVALID;
331}
332
333inline QDBusDemarshaller *QDBusDemarshaller::beginStructure()
334{
335 return beginCommon();
336}
337
338inline QDBusDemarshaller *QDBusDemarshaller::beginArray()
339{
340 return beginCommon();
341}
342
343inline QDBusDemarshaller *QDBusDemarshaller::beginMap()
344{
345 return beginCommon();
346}
347
348inline QDBusDemarshaller *QDBusDemarshaller::beginMapEntry()
349{
350 return beginCommon();
351}
352
353QDBusDemarshaller *QDBusDemarshaller::beginCommon()
354{
355 QDBusDemarshaller *d = new QDBusDemarshaller(capabilities);
356 d->parent = this;
357 d->message = q_dbus_message_ref(message);
358
359 // recurse
360 q_dbus_message_iter_recurse(iter: &iterator, sub: &d->iterator);
361 q_dbus_message_iter_next(iter: &iterator);
362 return d;
363}
364
365inline QDBusDemarshaller *QDBusDemarshaller::endStructure()
366{
367 return endCommon();
368}
369
370inline QDBusDemarshaller *QDBusDemarshaller::endArray()
371{
372 return endCommon();
373}
374
375inline QDBusDemarshaller *QDBusDemarshaller::endMap()
376{
377 return endCommon();
378}
379
380inline QDBusDemarshaller *QDBusDemarshaller::endMapEntry()
381{
382 return endCommon();
383}
384
385QDBusDemarshaller *QDBusDemarshaller::endCommon()
386{
387 QDBusDemarshaller *retval = parent;
388 delete this;
389 return retval;
390}
391
392QDBusArgument QDBusDemarshaller::duplicate()
393{
394 std::unique_ptr<QDBusDemarshaller> d(new QDBusDemarshaller(capabilities));
395 d->iterator = iterator;
396 d->message = q_dbus_message_ref(message);
397
398 q_dbus_message_iter_next(iter: &iterator);
399 return QDBusArgumentPrivate::create(d: d.release());
400}
401
402QT_END_NAMESPACE
403

source code of qtbase/src/dbus/qdbusdemarshaller.cpp