Changeset 74707 in vbox for trunk/src/VBox/Runtime/common/ldr

Timestamp:

Oct 9, 2018 8:36:39 AM (7 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

125628

Message:

IPRT/ldr: Started on Mach-O code signature verification. bugref:9232

Location:

trunk/src/VBox/Runtime/common/ldr

Files:

• ldrMachO.cpp (modified) (2 diffs)
• ldrPE.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/ldr/ldrMachO.cpp

@@ -3966 +3966 @@
 
 /**
+ * @interface_method_impl{RTLDROPS,pfnVerifySignature}
+ */
+static DECLCALLBACK(int)
+rtldrMachO_VerifySignature(PRTLDRMODINTERNAL pMod, PFNRTLDRVALIDATESIGNEDDATA pfnCallback, void *pvUser, PRTERRINFO pErrInfo)
+{
+#ifndef IPRT_WITHOUT_LDR_VERIFY
+    PRTLDRMODMACHO pThis = RT_FROM_MEMBER(pMod, RTLDRMODMACHO, Core);
+
+    int rc = rtldrMachO_LoadSignatureBlob(pThis);
+    if (RT_SUCCESS(rc))
+    {
+        RT_NOREF(pfnCallback, pvUser, pErrInfo);
+#if 0
+        int rc = rtldrPE_VerifySignatureImagePrecoditions(pModPe, pErrInfo);
+        if (RT_SUCCESS(rc))
+        {
+            PRTLDRPESIGNATURE pSignature = NULL;
+            rc = rtldrPE_VerifySignatureRead(pModPe, &pSignature, pErrInfo);
+            if (RT_SUCCESS(rc))
+            {
+                rc = rtldrPE_VerifySignatureDecode(pModPe, pSignature, pErrInfo);
+                if (RT_SUCCESS(rc))
+                    rc = rtldrPE_VerifySignatureValidateHash(pModPe, pSignature, pErrInfo);
+                if (RT_SUCCESS(rc))
+                {
+                    rc = pfnCallback(&pModPe->Core, RTLDRSIGNATURETYPE_PKCS7_SIGNED_DATA,
+                                     &pSignature->ContentInfo, sizeof(pSignature->ContentInfo),
+                                     pErrInfo, pvUser);
+                }
+                rtldrPE_VerifySignatureDestroy(pModPe, pSignature);
+            }
+        }
+#endif
+    }
+    return rc;
+#else
+    RT_NOREF_PV(pMod); RT_NOREF_PV(pfnCallback); RT_NOREF_PV(pvUser); RT_NOREF_PV(pErrInfo);
+    return VERR_NOT_SUPPORTED;
+#endif
+}
+
+
+/**
  * Operations for a Mach-O module interpreter.
  */
@@ -3989 +4032 @@
     rtldrMachO_ReadDbgInfo,
     rtldrMachO_QueryProp,
-    NULL /*pfnVerifySignature*/,
+    rtldrMachO_VerifySignature,
     NULL /*pfnHashImage*/,
     NULL /*pfnUnwindFrame*/,

trunk/src/VBox/Runtime/common/ldr/ldrPE.cpp

@@ -2840 +2840 @@
              *
              * Seems the difference between V1 and V2 page hash attributes is
-             * that v1 uses SHA-1 while v2 uses SHA-256. The data structures to
-             * be identical otherwise.  Initially we assumed the digest
+             * that v1 uses SHA-1 while v2 uses SHA-256. The data structures
+             * seems to be identical otherwise.  Initially we assumed the digest
              * algorithm was supposed to be RTCRSPCINDIRECTDATACONTENT::DigestInfo,
              * i.e. the same as for the whole image hash.  The initial approach