mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-21 01:05:45 +00:00
6546334973
On MacOS Firefox will add the com.apple.quarantine attribute to files it downloads. Firefox does this as a safety measure to indicate to the OS that the file may be from an untrusted source. While the attribute can be set prior to MacOS 10.15, the attribute is used to enforce new features in 10.15. This leads to issues where if we do not clear the attribute from GMPs we download, we will fail to load dynamic libs. This patch means we will clear the quarantine from GMP downloads. These GMPs come from a trusted source and are checksummed via hash. Note, most of the heavy lifting for this was done in bug 1566700. We just leverage the new API here. Differential Revision: https://phabricator.services.mozilla.com/D39369 --HG-- extra : moz-landing-system : lando
90 lines
2.9 KiB
JavaScript
90 lines
2.9 KiB
JavaScript
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
/* eslint-env mozilla/chrome-worker */
|
|
|
|
"use strict";
|
|
|
|
importScripts("resource://gre/modules/osfile.jsm");
|
|
|
|
const FILE_ENTRY = "201: ";
|
|
|
|
onmessage = async function(msg) {
|
|
try {
|
|
let extractedPaths = [];
|
|
let jarPath = "jar:file://" + msg.data.zipPath + "!/";
|
|
let jarResponse = await fetch(jarPath);
|
|
let dirListing = await jarResponse.text();
|
|
let lines = dirListing.split("\n");
|
|
let reader = new FileReader();
|
|
for (let line of lines) {
|
|
if (!line.startsWith(FILE_ENTRY)) {
|
|
// Not a file entry, skip.
|
|
continue;
|
|
}
|
|
let lineSplits = line.split(" ");
|
|
let fileName = lineSplits[1];
|
|
// We don't need these types of files.
|
|
if (
|
|
fileName == "verified_contents.json" ||
|
|
fileName == "icon-128x128.png"
|
|
) {
|
|
continue;
|
|
}
|
|
let filePath = jarPath + fileName;
|
|
let filePathResponse = await fetch(filePath);
|
|
let fileContents = await filePathResponse.blob();
|
|
let fileData = await new Promise(resolve => {
|
|
reader.onloadend = function() {
|
|
resolve(reader.result);
|
|
};
|
|
reader.readAsArrayBuffer(fileContents);
|
|
});
|
|
let profileDirPath = OS.Constants.Path.profileDir;
|
|
let installToDirPath = OS.Path.join(
|
|
profileDirPath,
|
|
msg.data.relativeInstallPath
|
|
);
|
|
await OS.File.makeDir(installToDirPath, {
|
|
ignoreExisting: true,
|
|
unixMode: 0o755,
|
|
from: profileDirPath,
|
|
});
|
|
// Do not extract into directories. Extract all files to the same
|
|
// directory.
|
|
let destPath = OS.Path.join(installToDirPath, fileName);
|
|
await OS.File.writeAtomic(destPath, new Uint8Array(fileData), {
|
|
tmpPath: destPath + ".tmp",
|
|
});
|
|
// Ensure files are writable and executable. Otherwise, we may be
|
|
// unable to execute or uninstall them.
|
|
await OS.File.setPermissions(destPath, { unixMode: 0o700 });
|
|
if (OS.Constants.Sys.Name == "Darwin") {
|
|
// If we're on MacOS Firefox will add the quarantine xattr to files it
|
|
// downloads. In this case we want to clear that xattr so we can load
|
|
// the CDM.
|
|
try {
|
|
await OS.File.macRemoveXAttr(destPath, "com.apple.quarantine");
|
|
} catch (e) {
|
|
// Failed to remove the attribute. This could be because the profile
|
|
// exists on a file system without xattr support.
|
|
//
|
|
// Don't fail the extraction here, as in this case it's likely we
|
|
// didn't set quarantine on these files in the first place.
|
|
}
|
|
}
|
|
extractedPaths.push(destPath);
|
|
}
|
|
postMessage({
|
|
result: "success",
|
|
extractedPaths,
|
|
});
|
|
} catch (e) {
|
|
postMessage({
|
|
result: "fail",
|
|
exception: e.message,
|
|
});
|
|
}
|
|
};
|