// Copyright 2022 Google LLC // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // https://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. #ifndef CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_ #define CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_ #include #include #include #include "libidn2_sapi.sapi.h" // NOLINT(build/include) #include "sandboxed_api/util/fileops.h" class Idn2SapiSandbox : public IDN2Sandbox { public: std::unique_ptr ModifyPolicy( sandbox2::PolicyBuilder*) override { return sandbox2::PolicyBuilder() .AllowSystemMalloc() .AllowRead() .AllowStat() .AllowWrite() .AllowExit() .AllowSyscalls({ __NR_futex, __NR_close, __NR_lseek, __NR_getpid, }) .BuildOrDie(); } }; class IDN2Lib { public: explicit IDN2Lib(Idn2SapiSandbox* sandbox) : sandbox_(CHECK_NOTNULL(sandbox)), api_(sandbox_) {} absl::StatusOr idn2_register_u8(const char* ulabel, const char* alabel); absl::StatusOr idn2_lookup_u8(const char* data); absl::StatusOr idn2_to_ascii_8z(const char* ulabel); absl::StatusOr idn2_to_unicode_8z8z(const char* ulabel); private: absl::StatusOr SapiGeneric( const char* data, absl::StatusOr (IDN2Api::*cb)(sapi::v::Ptr* input, sapi::v::Ptr* output, int flags)); absl::StatusOr ProcessErrors(const absl::StatusOr& status, sapi::v::GenericPtr& ptr); Idn2SapiSandbox* sandbox_; IDN2Api api_; }; #endif // CONTRIB_LIBIDN2_LIBIDN2_SAPI_H_