diff options
Diffstat (limited to 'src/gui/embedded/qtransportauth_qws_p.h')
| -rw-r--r-- | src/gui/embedded/qtransportauth_qws_p.h | 189 |
1 files changed, 189 insertions, 0 deletions
diff --git a/src/gui/embedded/qtransportauth_qws_p.h b/src/gui/embedded/qtransportauth_qws_p.h new file mode 100644 index 0000000..33e2edc --- /dev/null +++ b/src/gui/embedded/qtransportauth_qws_p.h @@ -0,0 +1,189 @@ +/**************************************************************************** +** +** Copyright (C) 2009 Nokia Corporation and/or its subsidiary(-ies). +** Contact: Qt Software Information (qt-info@nokia.com) +** +** This file is part of the QtGui module of the Qt Toolkit. +** +** $QT_BEGIN_LICENSE:LGPL$ +** No Commercial Usage +** This file contains pre-release code and may not be distributed. +** You may use this file in accordance with the terms and conditions +** contained in the either Technology Preview License Agreement or the +** Beta Release License Agreement. +** +** GNU Lesser General Public License Usage +** Alternatively, this file may be used under the terms of the GNU Lesser +** General Public License version 2.1 as published by the Free Software +** Foundation and appearing in the file LICENSE.LGPL included in the +** packaging of this file. Please review the following information to +** ensure the GNU Lesser General Public License version 2.1 requirements +** will be met: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. +** +** In addition, as a special exception, Nokia gives you certain +** additional rights. These rights are described in the Nokia Qt LGPL +** Exception version 1.0, included in the file LGPL_EXCEPTION.txt in this +** package. +** +** GNU General Public License Usage +** Alternatively, this file may be used under the terms of the GNU +** General Public License version 3.0 as published by the Free Software +** Foundation and appearing in the file LICENSE.GPL included in the +** packaging of this file. Please review the following information to +** ensure the GNU General Public License version 3.0 requirements will be +** met: http://www.gnu.org/copyleft/gpl.html. +** +** If you are unsure which license is appropriate for your use, please +** contact the sales department at qt-sales@nokia.com. +** $QT_END_LICENSE$ +** +****************************************************************************/ + +#ifndef QTRANSPORTAUTH_QWS_P_H +#define QTRANSPORTAUTH_QWS_P_H + +// +// W A R N I N G +// ------------- +// +// This file is not part of the Qt API. It exists purely as an +// implementation detail. This header file may change from version to +// version without notice, or even be removed. +// +// We mean it. +// + +#include <QtCore/qglobal.h> + +#ifndef QT_NO_SXE + +#include "qtransportauth_qws.h" +#include "qtransportauthdefs_qws.h" +#include "qbuffer.h" + +#include <qmutex.h> +#include <qdatetime.h> +#include "private/qobject_p.h" + +#include <QtCore/qcache.h> + +QT_BEGIN_NAMESPACE + +// Uncomment to generate debug output +// #define QTRANSPORTAUTH_DEBUG 1 + +#ifdef QTRANSPORTAUTH_DEBUG +void hexstring( char *buf, const unsigned char* key, size_t sz ); +#endif + +// proj id for ftok usage in sxe +#define SXE_PROJ 10022 + +/*! + \internal + memset for security purposes, guaranteed not to be optimized away + http://www.faqs.org/docs/Linux-HOWTO/Secure-Programs-HOWTO.html +*/ +void *guaranteed_memset(void *v,int c,size_t n); + +class QUnixSocketMessage; + +/*! + \internal + \class AuthCookie + Struct to carry process authentication key and id +*/ +#define QSXE_HEADER_LEN 24 + +/*! + \macro AUTH_ID + Macro to manage authentication header. Format of header is: + \table + \header \i BYTES \i CONTENT + \row \i 0-3 \i magic numbers + \row \i 4 \i length of authenticated data (max 255 bytes) + \row i\ 5 \i reserved + \row \i 6-21 \i MAC digest, or shared secret in case of simple auth + \row \i 22 \i program id + \row \i 23 \i sequence number + \endtable + Total length of the header is 24 bytes + + However this may change. Instead of coding these numbers use the AUTH_ID, + AUTH_KEY, AUTH_DATA and AUTH_SPACE macros. +*/ + +#define AUTH_ID(k) ((unsigned char)(k[QSXE_KEY_LEN])) +#define AUTH_KEY(k) ((unsigned char *)(k)) + +#define AUTH_DATA(x) (unsigned char *)((x) + QSXE_HEADER_LEN) +#define AUTH_SPACE(x) ((x) + QSXE_HEADER_LEN) +#define QSXE_LEN_IDX 4 +#define QSXE_KEY_IDX 6 +#define QSXE_PROG_IDX 22 +#define QSXE_SEQ_IDX 23 + +class SxeRegistryLocker : public QObject +{ + Q_OBJECT +public: + SxeRegistryLocker( QObject * ); + ~SxeRegistryLocker(); + bool success() const { return m_success; } +private: + bool m_success; + QObject *m_reg; +}; + +class QTransportAuthPrivate : public QObjectPrivate +{ + Q_DECLARE_PUBLIC(QTransportAuth) +public: + QTransportAuthPrivate(); + ~QTransportAuthPrivate(); + + const unsigned char *getClientKey( unsigned char progId ); + void invalidateClientKeyCache(); + + bool keyInitialised; + QString m_logFilePath; + QString m_keyFilePath; + QObject *m_packageRegistry; + AuthCookie authKey; + QCache<unsigned char, char> keyCache; + QHash< QObject*, QIODevice*> buffersByClient; + QMutex keyfileMutex; +}; + +/*! + \internal + Enforces the False Authentication Rate. If more than 4 authentications + are received per minute the sxemonitor is notified that the FAR has been exceeded +*/ +class FAREnforcer +{ + public: + static FAREnforcer *getInstance(); + void logAuthAttempt( QDateTime time = QDateTime::currentDateTime() ); + void reset(); + +#ifndef TEST_FAR_ENFORCER + private: +#endif + FAREnforcer(); + FAREnforcer( const FAREnforcer & ); + FAREnforcer &operator=(FAREnforcer const & ); + + static const QString FARMessage; + static const int minutelyRate; + static const QString SxeTag; + static const int minute; + + QList<QDateTime> authAttempts; +}; + +QT_END_NAMESPACE + +#endif // QT_NO_SXE +#endif // QTRANSPORTAUTH_QWS_P_H + |