app-info 2.8.5 → 3.0.0.beta1

data/lib/app_info/helper/generate_class.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module AppInfo::Helper
+  module GenerateClass
+    def create_class(klass_name, parent_class, namespace:)
+      klass = Class.new(parent_class) do
+        yield if block_given?
+      end
+
+      name = namespace.to_s.empty? ? klass_name : "#{namespace}::#{klass_name}"
+      if Object.const_get(namespace).const_defined?(klass_name)
+        Object.const_get(namespace).const_get(klass_name)
+      elsif Object.const_defined?(name)
+        Object.const_get(name)
+      else
+        Object.const_get(namespace).const_set(klass_name, klass)
+      end
+    end
+
+    def define_instance_method(key, value)
+      instance_variable_set("@#{key}", value)
+      self.class.class_eval <<-RUBY, __FILE__, __LINE__ + 1
+        def #{key}
+          @#{key}
+        end
+      RUBY
+    end
+  end
+end

data/lib/app_info/helper/protobuf.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module AppInfo::Helper
+  module Protobuf
+    def reference_segments(value)
+      new_value = value.is_a?(Aapt::Pb::Reference) ? value.name : value
+      return new_value.split('/', 2) if new_value.include?('/')
+
+      [nil, new_value]
+    end
+  end
+end

data/lib/app_info/helper/signatures.rb

@@ -0,0 +1,229 @@
+# frozen_string_literal: true
+
+module AppInfo::Helper
+  # Binary IO Block Helper
+  module IOBlock
+    def length_prefix_block(
+      io, size: AppInfo::Android::Signature::UINT32_SIZE,
+      raw: false, ignore_left_size_precheck: false
+    )
+      offset = io.size - io.pos
+      if offset < AppInfo::Android::Signature::UINT32_SIZE
+        raise SecurityError,
+              'Remaining buffer too short to contain length of length-prefixed field.'
+      end
+
+      size = io.read(size).unpack1('I')
+      raise SecurityError, 'Negative length' if size.negative?
+
+      if !ignore_left_size_precheck && size > io.size
+        message = "Underflow while reading length-prefixed value. #{size} > #{io.size}"
+        raise SecurityError, message
+      end
+
+      raw_data = io.read(size)
+      raw ? raw_data : StringIO.new(raw_data)
+    end
+
+    # Only use for uint32 length-prefixed block
+    def loop_length_prefix_io(
+      io, name:, max_bytes: nil, logger: nil, raw: false,
+      ignore_left_size_precheck: false, &block
+    )
+      index = 0
+      until io.eof?
+        logger&.debug "#{name} count ##{index}"
+        buffer = length_prefix_block(
+          io,
+          raw: raw,
+          ignore_left_size_precheck: ignore_left_size_precheck
+        )
+
+        left_bytes_check(buffer, max_bytes, SecurityError) do |left_bytes|
+          "#{name} too short: #{left_bytes} < #{max_bytes}"
+        end
+
+        block.call(buffer)
+        index += 1
+      end
+    end
+
+    def left_bytes_check(io, max_bytes, exception, message = nil, &block)
+      return if max_bytes.nil?
+
+      left_bytes = io.size - io.pos
+      return left_bytes if left_bytes.zero?
+
+      message ||= if block_given?
+                    block.call(left_bytes)
+                  else
+                    "IO too short: #{offset} < #{max_bytes}"
+                  end
+
+      raise exception, message if left_bytes < max_bytes
+
+      left_bytes
+    end
+  end
+
+  # Signature Block helper
+  module Signatures
+    def singers_block(block_id)
+      info = AppInfo::Android::Signature::Info.new(@version, @parser, logger)
+      raise SecurityError, 'ZIP64 APK not supported' if info.zip64?
+
+      info.signers(block_id)
+    end
+
+    def signed_data_certs(io)
+      certificates = []
+      loop_length_prefix_io(io, name: 'Certificates', raw: true) do |cert_data|
+        certificates << AppInfo::Certificate.parse(cert_data)
+      end
+      certificates
+    end
+
+    def signed_data_digests(io)
+      content_digests = {}
+      loop_length_prefix_io(
+        io,
+        name: 'Digests',
+        max_bytes: AppInfo::Android::Signature::UINT64_SIZE
+      ) do |digest|
+        algorithm = digest.read(AppInfo::Android::Signature::UINT32_SIZE).unpack('C*')
+        digest_name = algorithm_match(algorithm)
+        next unless digest_name
+
+        content = length_prefix_block(digest)
+        content_digests[digest_name] = {
+          id: algorithm,
+          content: content
+        }
+      end
+
+      content_digests
+    end
+
+    # FIXME: this code not work, need fix.
+    def verify_additional_attrs(attrs, _certs)
+      loop_length_prefix_io(
+        attrs, name: 'Additional Attributes', ignore_left_size_precheck: true
+      ) do |attr|
+        id = attr.read(AppInfo::Android::Signature::UINT32_SIZE)
+        logger.debug "ID #{id} / #{id.size} / #{id.unpack('H*')} / #{id.unpack('C*')}"
+        if id.unpack('C*') == AppInfo::Helper::Algorithm::SIG_STRIPPING_PROTECTION_ATTR_ID
+          offset = attr.size - attr.pos
+          if offset < AppInfo::Android::Signature::UINT32_SIZE
+            raise SecurityError,
+                  "V2 Signature Scheme Stripping Protection Attribute value too small. Expected #{UINT32_SIZE} bytes, but found #{offset}"
+          end
+
+          # value = attr.read(UINT32_SIZE).unpack1('I')
+          if @version == AppInfo::Android::Signature::Version::V3
+            raise SecurityError,
+                  'V2 signature indicates APK is signed using APK Signature Scheme v3, but none was found. Signature stripped?'
+          end
+        end
+      end
+    end
+
+    def signature_algorithms(signatures)
+      algorithems = []
+      loop_length_prefix_io(
+        signatures,
+        name: 'Signature Algorithms',
+        max_bytes: AppInfo::Android::Signature::UINT64_SIZE,
+        logger: logger
+      ) do |signature|
+        algorithm = signature.read(AppInfo::Android::Signature::UINT32_SIZE).unpack('C*')
+        digest = algorithm_match(algorithm)
+        next unless digest
+
+        signature = length_prefix_block(signature, raw: true)
+        algorithems << {
+          id: algorithm,
+          digest: digest,
+          signature: signature
+        }
+      end
+
+      algorithems
+    end
+  end
+
+  # Signature Algorithm helper
+  module Algorithm
+    # Signature certificate identifiers
+    SIG_RSA_PSS_WITH_SHA256 = [0x01, 0x01, 0x00, 0x00].freeze                # 0x0101
+    SIG_RSA_PSS_WITH_SHA512 = [0x02, 0x01, 0x00, 0x00].freeze                # 0x0102
+    SIG_RSA_PKCS1_V1_5_WITH_SHA256 = [0x03, 0x01, 0x00, 0x00].freeze         # 0x0103
+    SIG_RSA_PKCS1_V1_5_WITH_SHA512 = [0x04, 0x01, 0x00, 0x00].freeze         # 0x0104
+    SIG_ECDSA_WITH_SHA256 = [0x01, 0x02, 0x00, 0x00].freeze                  # 0x0201
+    SIG_ECDSA_WITH_SHA512 = [0x02, 0x02, 0x00, 0x00].freeze                  # 0x0202
+    SIG_DSA_WITH_SHA256 = [0x01, 0x03, 0x00, 0x00].freeze                    # 0x0301
+    SIG_VERITY_RSA_PKCS1_V1_5_WITH_SHA256 = [0x21, 0x04, 0x00, 0x00].freeze  # 0x0421
+    SIG_VERITY_ECDSA_WITH_SHA256 = [0x23, 0x04, 0x00, 0x00].freeze           # 0x0423
+    SIG_VERITY_DSA_WITH_SHA256 = [0x25, 0x04, 0x00, 0x00].freeze             # 0x0425
+
+    SIG_STRIPPING_PROTECTION_ATTR_ID = [0x0d, 0xf0, 0xef, 0xbe].freeze       # 0xbeeff00d
+
+    def best_algorithem(algorithems)
+      methods = algorithems.map { |algorithem| algorithem[:method] }
+      best_method = methods.max { |a, b| algorithem_priority(a) <=> algorithem_priority(b) }
+      best_method_index = methods.index(best_method)
+      algorithems[best_method_index]
+    end
+
+    def compare_algorithem(source, target)
+      case algorithem_priority(source) <=> algorithem_priority(target)
+      when -1
+        target
+      else
+        source
+      end
+    end
+
+    def algorithem_priority(algorithm)
+      case algorithm
+      when SIG_RSA_PSS_WITH_SHA256,
+        SIG_RSA_PKCS1_V1_5_WITH_SHA256,
+        SIG_ECDSA_WITH_SHA256,
+        SIG_DSA_WITH_SHA256
+        1
+      when SIG_RSA_PSS_WITH_SHA512,
+        SIG_RSA_PKCS1_V1_5_WITH_SHA512,
+        SIG_ECDSA_WITH_SHA512
+        2
+      when SIG_VERITY_RSA_PKCS1_V1_5_WITH_SHA256,
+        SIG_VERITY_ECDSA_WITH_SHA256,
+        SIG_VERITY_DSA_WITH_SHA256
+        3
+      end
+    end
+
+    def algorithm_method(algorithm)
+      case algorithm
+      when SIG_RSA_PSS_WITH_SHA256, SIG_RSA_PSS_WITH_SHA512,
+        SIG_RSA_PKCS1_V1_5_WITH_SHA256, SIG_RSA_PKCS1_V1_5_WITH_SHA512,
+        SIG_VERITY_RSA_PKCS1_V1_5_WITH_SHA256
+        :rsa
+      when SIG_ECDSA_WITH_SHA256, SIG_ECDSA_WITH_SHA512, SIG_VERITY_ECDSA_WITH_SHA256
+        :ec
+      when SIG_DSA_WITH_SHA256, SIG_VERITY_DSA_WITH_SHA256
+        :dsa
+      end
+    end
+
+    def algorithm_match(algorithm)
+      case algorithm
+      when SIG_RSA_PSS_WITH_SHA256, SIG_RSA_PKCS1_V1_5_WITH_SHA256,
+        SIG_ECDSA_WITH_SHA256, SIG_DSA_WITH_SHA256,
+        SIG_VERITY_RSA_PKCS1_V1_5_WITH_SHA256, SIG_VERITY_ECDSA_WITH_SHA256,
+        SIG_VERITY_DSA_WITH_SHA256
+        'SHA256'
+      when SIG_RSA_PSS_WITH_SHA512, SIG_RSA_PKCS1_V1_5_WITH_SHA512, SIG_ECDSA_WITH_SHA512
+        'SHA512'
+      end
+    end
+  end
+end

data/lib/app_info/helper.rb

@@ -1,128 +1,7 @@
 # frozen_string_literal: true
 
-module AppInfo
-  # App Platform
-  module Platform
-    MACOS = 'macOS'
-    IOS = 'iOS'
-    ANDROID = 'Android'
-    DSYM = 'dSYM'
-    PROGUARD = 'Proguard'
-  end
-
-  # Device Type
-  module Device
-    MACOS = 'macOS'
-    IPHONE = 'iPhone'
-    IPAD = 'iPad'
-    UNIVERSAL = 'Universal'
-  end
-
-  module AndroidDevice
-    PHONE   = 'Phone'
-    TABLET  = 'Tablet'
-    WATCH   = 'Watch'
-    TV      = 'Television'
-  end
-
-  # Icon Key
-  ICON_KEYS = {
-    Device::IPHONE => ['CFBundleIcons'],
-    Device::IPAD => ['CFBundleIcons~ipad'],
-    Device::UNIVERSAL => ['CFBundleIcons', 'CFBundleIcons~ipad'],
-    Device::MACOS => %w[CFBundleIconFile CFBundleIconName]
-  }.freeze
-
-  module Helper
-    module HumanFileSize
-      def file_to_human_size(file, human_size:)
-        number = File.size(file)
-        human_size ? number_to_human_size(number) : number
-      end
-
-      FILE_SIZE_UNITS = %w[B KB MB GB TB].freeze
-
-      def number_to_human_size(number)
-        if number.to_i < 1024
-          exponent = 0
-        else
-          max_exp = FILE_SIZE_UNITS.size - 1
-          exponent = (Math.log(number) / Math.log(1024)).to_i
-          exponent = max_exp if exponent > max_exp
-          number = format('%<number>.2f', number: (number / (1024**exponent.to_f)))
-        end
-
-        "#{number} #{FILE_SIZE_UNITS[exponent]}"
-      end
-    end
-
-    module Archive
-      require 'zip'
-      require 'fileutils'
-      require 'securerandom'
-
-      # Unarchive zip file
-      #
-      # source: https://github.com/soffes/lagunitas/blob/master/lib/lagunitas/ipa.rb
-      def unarchive(file, path: nil)
-        path = path ? "#{path}-" : ''
-        root_path = "#{Dir.mktmpdir}/AppInfo-#{path}#{SecureRandom.hex}"
-        Zip::File.open(file) do |zip_file|
-          if block_given?
-            yield root_path, zip_file
-          else
-            zip_file.each do |f|
-              f_path = File.join(root_path, f.name)
-              FileUtils.mkdir_p(File.dirname(f_path))
-              zip_file.extract(f, f_path) unless File.exist?(f_path)
-            end
-          end
-        end
-
-        root_path
-      end
-
-      def tempdir(file, prefix:)
-        dest_path ||= File.join(File.dirname(file), prefix)
-        dest_file = File.join(dest_path, File.basename(file))
-        FileUtils.mkdir_p(dest_path, mode: 0_700)
-        dest_file
-      end
-    end
-
-    module Defines
-      def create_class(klass_name, parent_class, namespace:)
-        klass = Class.new(parent_class) do
-          yield if block_given?
-        end
-
-        name = namespace.to_s.empty? ? klass_name : "#{namespace}::#{klass_name}"
-        if Object.const_get(namespace).const_defined?(klass_name)
-          Object.const_get(namespace).const_get(klass_name)
-        elsif Object.const_defined?(name)
-          Object.const_get(name)
-        else
-          Object.const_get(namespace).const_set(klass_name, klass)
-        end
-      end
-
-      def define_instance_method(key, value)
-        instance_variable_set("@#{key}", value)
-        self.class.class_eval <<-RUBY, __FILE__, __LINE__ + 1
-          def #{key}
-            @#{key}
-          end
-        RUBY
-      end
-    end
-
-    module ReferenceParser
-      def reference_segments(value)
-        new_value = value.is_a?(Aapt::Pb::Reference) ? value.name : value
-        return new_value.split('/', 2) if new_value.include?('/')
-
-        [nil, new_value]
-      end
-    end
-  end
-end
+require 'app_info/helper/archive'
+require 'app_info/helper/file_size'
+require 'app_info/helper/generate_class'
+require 'app_info/helper/protobuf'
+require 'app_info/helper/signatures'

data/lib/app_info/info_plist.rb

@@ -6,11 +6,19 @@ require 'app_info/png_uncrush'
 
 module AppInfo
   # iOS Info.plist parser
-  class InfoPlist
+  class InfoPlist < File
     extend Forwardable
 
-    def initialize(file)
-      @file = file
+    # Icon Key
+    ICON_KEYS = {
+      Device::IPHONE => ['CFBundleIcons'],
+      Device::IPAD => ['CFBundleIcons~ipad'],
+      Device::UNIVERSAL => ['CFBundleIcons', 'CFBundleIcons~ipad'],
+      Device::MACOS => %w[CFBundleIconFile CFBundleIconName]
+    }.freeze
+
+    def file_type
+      Format::INFOPLIST
     end
 
     def version
@@ -126,7 +134,7 @@ module AppInfo
     private
 
     def info
-      return unless File.file?(@file)
+      return unless ::File.file?(@file)
 
       @info ||= CFPropertyList.native_types(CFPropertyList::List.new(file: @file).value)
     end
@@ -134,9 +142,9 @@ module AppInfo
     def app_path
       @app_path ||= case device_type
                     when Device::MACOS
-                      File.dirname(@file)
+                      ::File.dirname(@file)
                     else
-                      File.expand_path('../', @file)
+                      ::File.expand_path('../', @file)
                     end
     end
   end

data/lib/app_info/ipa/framework.rb

@@ -8,7 +8,7 @@ module AppInfo
     extend Forwardable
 
     def self.parse(path, name = 'Frameworks')
-      files = Dir.glob(File.join(path, name.to_s, '*'))
+      files = Dir.glob(::File.join(path, name.to_s, '*'))
       return [] if files.empty?
 
       files.sort.each_with_object([]) do |file, obj|
@@ -26,7 +26,7 @@ module AppInfo
     end
 
     def name
-      File.basename(file)
+      ::File.basename(file)
     end
 
     def macho
@@ -37,11 +37,11 @@ module AppInfo
     end
 
     def lib?
-      File.file?(file)
+      ::File.file?(file)
     end
 
     def info
-      @info ||= InfoPlist.new(File.join(file, 'Info.plist'))
+      @info ||= InfoPlist.new(::File.join(file, 'Info.plist'))
     end
 
     def to_s

data/lib/app_info/ipa.rb

@@ -7,7 +7,7 @@ require 'cfpropertylist'
 
 module AppInfo
   # IPA parser
-  class IPA
+  class IPA < File
     include Helper::HumanFileSize
     include Helper::Archive
     extend Forwardable
@@ -25,18 +25,26 @@ module AppInfo
       INHOUSE = 'Enterprise' # Rename and Alias to enterprise
     end
 
-    def initialize(file)
-      @file = file
-    end
-
+    # return file size
+    # @example Read file size in integer
+    #   aab.size                    # => 3618865
+    #
+    # @example Read file size in human readabale
+    #   aab.size(human_size: true)  # => '3.45 MB'
+    #
+    # @param [Boolean] human_size Convert integer value to human readable.
+    # @return [Integer, String]
     def size(human_size: false)
       file_to_human_size(@file, human_size: human_size)
     end
 
-    def os
+    def file_type
+      Format::IPA
+    end
+
+    def platform
       Platform::IOS
     end
-    alias file_type os
 
     def_delegators :info, :iphone?, :ipad?, :universal?, :build_version, :name,
                    :release_version, :identifier, :bundle_id, :display_name,
@@ -70,7 +78,7 @@ module AppInfo
     end
 
     def archs
-      return unless File.exist?(bundle_path)
+      return unless ::File.exist?(bundle_path)
 
       file = MachO.open(bundle_path)
       case file
@@ -114,14 +122,14 @@ module AppInfo
     end
 
     def mobileprovision?
-      File.exist?(mobileprovision_path)
+      ::File.exist?(mobileprovision_path)
     end
 
     def mobileprovision_path
       filename = 'embedded.mobileprovision'
-      @mobileprovision_path ||= File.join(@file, filename)
-      unless File.exist?(@mobileprovision_path)
-        @mobileprovision_path = File.join(app_path, filename)
+      @mobileprovision_path ||= ::File.join(@file, filename)
+      unless ::File.exist?(@mobileprovision_path)
+        @mobileprovision_path = ::File.join(app_path, filename)
       end
 
       @mobileprovision_path
@@ -134,15 +142,15 @@ module AppInfo
     end
 
     def metadata?
-      File.exist?(metadata_path)
+      ::File.exist?(metadata_path)
     end
 
     def metadata_path
-      @metadata_path ||= File.join(contents, 'iTunesMetadata.plist')
+      @metadata_path ||= ::File.join(contents, 'iTunesMetadata.plist')
     end
 
     def bundle_path
-      @bundle_path ||= File.join(app_path, info.bundle_name)
+      @bundle_path ||= ::File.join(app_path, info.bundle_name)
     end
 
     def info
@@ -150,35 +158,32 @@ module AppInfo
     end
 
     def info_path
-      @info_path ||= File.join(app_path, 'Info.plist')
+      @info_path ||= ::File.join(app_path, 'Info.plist')
     end
 
     def app_path
-      @app_path ||= Dir.glob(File.join(contents, 'Payload', '*.app')).first
+      @app_path ||= Dir.glob(::File.join(contents, 'Payload', '*.app')).first
     end
 
     IPHONE_KEY = 'CFBundleIcons'
     IPAD_KEY = 'CFBundleIcons~ipad'
 
     def icons_path
-      return @icons_path if @icons_path
-
-      @icons_path = []
-      icon_keys.each do |name|
-        filenames = info.try(:[], name)
-                        .try(:[], 'CFBundlePrimaryIcon')
-                        .try(:[], 'CFBundleIconFiles')
-
-        next if filenames.nil? || filenames.empty?
-
-        filenames.each do |filename|
-          Dir.glob(File.join(app_path, "#{filename}*")).find_all.each do |file|
-            @icons_path << file
+      @icons_path ||= lambda {
+        icon_keys.each_with_object([]) do |name, icons|
+          filenames = info.try(:[], name)
+                          .try(:[], 'CFBundlePrimaryIcon')
+                          .try(:[], 'CFBundleIconFiles')
+
+          next if filenames.nil? || filenames.empty?
+
+          filenames.each do |filename|
+            Dir.glob(::File.join(app_path, "#{filename}*")).find_all.each do |file|
+              icons << file
+            end
           end
         end
-      end
-
-      @icons_path
+      }.call
     end
 
     def clear!
@@ -197,7 +202,7 @@ module AppInfo
     end
 
     def contents
-      @contents ||= unarchive(@file, path: 'ios')
+      @contents ||= unarchive(@file, prefix: 'ios')
     end
 
     private
@@ -206,7 +211,7 @@ module AppInfo
       uncrushed_file = uncrush ? uncrush_png(file) : nil
 
       {
-        name: File.basename(file),
+        name: ::File.basename(file),
         file: file,
         uncrushed_file: uncrushed_file,
         dimensions: PngUncrush.dimensions(file)
@@ -217,7 +222,7 @@ module AppInfo
     def uncrush_png(src_file)
       dest_file = tempdir(src_file, prefix: 'uncrushed')
       PngUncrush.decompress(src_file, dest_file)
-      File.exist?(dest_file) ? dest_file : nil
+      ::File.exist?(dest_file) ? dest_file : nil
     end
 
     def icon_keys