2666311481

Build Type

github

Committed by GitHub

Commit Message

<a href="https://github.com/google/santa/commit/<a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/3c61291abb8d16480fdd033dc15256093cfb5f94">3c61291ab">&lt;a href=&quot;https://github.com/google/santa/commit/</a><a class="double-link" href="https://github.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/3c61291abb8d16480fdd033dc15256093cfb5f94">3c61291ab</a><a href="https://github.com/google/santa/commit/3c61291abb8d16480fdd033dc15256093cfb5f94">&quot;&gt;&amp;lt;a href=&amp;quot;https://github.com/google/santa/commit/&lt;/a&gt;&lt;a class=&quot;double-link&quot; href=&quot;https://github.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://git&quot;&gt;&amp;lt;a class=&lt;/a&gt;hub.com/google/santa/commit/3c61291abb8d16480fdd033dc15256093cfb5f94&quot;&gt;3c61291ab&lt;/a&gt;&lt;a href=&quot;https://github.com/google/santa/commit/3c61291abb8d16480fdd033dc15256093cfb5f94&quot;&gt;&amp;quot;&amp;gt;&amp;amp;lt;a href=&amp;amp;quot;https://github.com/google/santa/commit/&amp;lt;/a&amp;gt;&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&amp;amp;lt;a class=&amp;amp;quot;double-link&amp;amp;quot; href=&amp;amp;quot;https://git&amp;quot... (continued)

Pull Request Pull Request #846: santad: Allow configuring a static set of rules via configuration profile

Run Details

2066 of 4968 branches covered (41.59%)

Branch coverage included in aggregate %.

90 of 90 new or added lines in 6 files covered. (100.0%)

7868 of 12859 relevant lines covered (61.19%)

18304.62 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

50.3

/Source/common/SNTRule.m

/// Copyright 2015 Google Inc. All rights reserved.
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///    http://www.apache.org/licenses/LICENSE-2.0
///
///    Unless required by applicable law or agreed to in writing, software
///    distributed under the License is distributed on an "AS IS" BASIS,
///    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
///    See the License for the specific language governing permissions and
///    limitations under the License.

#import "Source/common/SNTRule.h"
#import "Source/common/SNTSyncConstants.h"

@interface SNTRule ()
@property(readwrite) NSUInteger timestamp;
@end

@implementation SNTRule

- (instancetype)initWithIdentifier:(NSString *)identifier
                             state:(SNTRuleState)state
                              type:(SNTRuleType)type
                         customMsg:(NSString *)customMsg
                         timestamp:(NSUInteger)timestamp {
  self = [super init];
  if (self) {
    _identifier = identifier;
    _state = state;
    _type = type;
    _customMsg = customMsg;
    _timestamp = timestamp;
  }
  return self;
}

- (instancetype)initWithIdentifier:(NSString *)identifier
                             state:(SNTRuleState)state
                              type:(SNTRuleType)type
                         customMsg:(NSString *)customMsg {
  self = [self initWithIdentifier:identifier state:state type:type customMsg:customMsg timestamp:0];
  // Initialize timestamp to current time if rule is transitive.
  if (self && state == SNTRuleStateAllowTransitive) {
    [self resetTimestamp];
  }
  return self;
}

// Converts rule information downloaded from the server into a SNTRule.  Because any information
// not recorded by SNTRule is thrown away here, this method is also responsible for dealing with
// the extra bundle rule information (bundle_hash & rule_count).
- (instancetype)initWithDictionary:(NSDictionary *)dict {
  if (![dict isKindOfClass:[NSDictionary class]]) return nil;

  self = [super init];
  if (self) {
    _identifier = dict[kRuleIdentifier];
    if (!_identifier.length) _identifier = dict[kRuleSHA256];
    if (!_identifier.length) {
      return nil;
    }

    NSString *policyString = dict[kRulePolicy];
    if ([policyString isEqual:kRulePolicyAllowlist] ||
        [policyString isEqual:kRulePolicyAllowlistDeprecated]) {
      _state = SNTRuleStateAllow;
    } else if ([policyString isEqual:kRulePolicyAllowlistCompiler] ||
               [policyString isEqual:kRulePolicyAllowlistCompilerDeprecated]) {
      _state = SNTRuleStateAllowCompiler;
    } else if ([policyString isEqual:kRulePolicyBlocklist] ||
               [policyString isEqual:kRulePolicyBlocklistDeprecated]) {
      _state = SNTRuleStateBlock;
    } else if ([policyString isEqual:kRulePolicySilentBlocklist] ||
               [policyString isEqual:kRulePolicySilentBlocklistDeprecated]) {
      _state = SNTRuleStateSilentBlock;
    } else if ([policyString isEqual:kRulePolicyRemove]) {
      _state = SNTRuleStateRemove;
    } else {
      return nil;
    }

    NSString *ruleTypeString = dict[kRuleType];
    if ([ruleTypeString isEqual:kRuleTypeBinary]) {
      _type = SNTRuleTypeBinary;
    } else if ([ruleTypeString isEqual:kRuleTypeCertificate]) {
      _type = SNTRuleTypeCertificate;
    } else if ([ruleTypeString isEqual:kRuleTypeTeamID]) {
      _type = SNTRuleTypeTeamID;
    } else {
      return nil;
    }

    NSString *customMsg = dict[kRuleCustomMsg];
    if (customMsg.length) {
      _customMsg = customMsg;
    }
  }
  return self;
}

#pragma mark NSSecureCoding

#pragma clang diagnostic push
#pragma clang diagnostic ignored "-Wobjc-literal-conversion"
#define ENCODE(obj, key) \
  if (obj) [coder encodeObject:obj forKey:key]
#define DECODE(cls, key) [decoder decodeObjectOfClass:[cls class] forKey:key]

+ (BOOL)supportsSecureCoding {
  return YES;
}

- (void)encodeWithCoder:(NSCoder *)coder {
  ENCODE(self.identifier, @"identifier");
  ENCODE(@(self.state), @"state");
  ENCODE(@(self.type), @"type");
  ENCODE(self.customMsg, @"custommsg");
  ENCODE(@(self.timestamp), @"timestamp");
}

- (instancetype)initWithCoder:(NSCoder *)decoder {
  self = [super init];
  if (self) {
    _identifier = DECODE(NSString, @"identifier");
    _state = [DECODE(NSNumber, @"state") intValue];
    _type = [DECODE(NSNumber, @"type") intValue];
    _customMsg = DECODE(NSString, @"custommsg");
    _timestamp = [DECODE(NSNumber, @"timestamp") unsignedIntegerValue];
  }
  return self;
}

#undef DECODE
#undef ENCODE
#pragma clang diagnostic pop

- (BOOL)isEqual:(id)other {
  if (other == self) return YES;
  if (![other isKindOfClass:[SNTRule class]]) return NO;
  SNTRule *o = other;
  return ([self.identifier isEqual:o.identifier] && self.state == o.state && self.type == o.type);
}

- (NSUInteger)hash {
  NSUInteger prime = 31;
  NSUInteger result = 1;
  result = prime * result + [self.identifier hash];
  result = prime * result + self.state;
  result = prime * result + self.type;
  return result;
}

- (NSString *)description {
  return [NSString
    stringWithFormat:@"SNTRule: Identifier: %@, State: %ld, Type: %ld, Timestamp: %lu",
                     self.identifier, self.state, self.type, (unsigned long)self.timestamp];
}

#pragma mark Last-access Timestamp

- (void)resetTimestamp {
  self.timestamp = (NSUInteger)[[NSDate date] timeIntervalSinceReferenceDate];
}

@end

1	/// Copyright 2015 Google Inc. All rights reserved.
2	///
3	/// Licensed under the Apache License, Version 2.0 (the "License");
4	/// you may not use this file except in compliance with the License.
5	/// You may obtain a copy of the License at
6	///
7	/// http://www.apache.org/licenses/LICENSE-2.0
8	///
9	/// Unless required by applicable law or agreed to in writing, software
10	/// distributed under the License is distributed on an "AS IS" BASIS,
11	/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12	/// See the License for the specific language governing permissions and
13	/// limitations under the License.
14
15	#import "Source/common/SNTRule.h"
16	#import "Source/common/SNTSyncConstants.h"
17
18	@interface SNTRule ()
19	@property(readwrite) NSUInteger timestamp;
20	@end
21
22	@implementation SNTRule
23
24	- (instancetype)initWithIdentifier:(NSString *)identifier
25	state:(SNTRuleState)state
26	type:(SNTRuleType)type
27	customMsg:(NSString *)customMsg
28	timestamp:(NSUInteger)timestamp {	15✔
29	self = [super init];	15✔
30	if (self) {	15!
31	_identifier = identifier;	15✔
32	_state = state;	15✔
33	_type = type;	15✔
34	_customMsg = customMsg;	15✔
35	_timestamp = timestamp;	15✔
36	}	15✔
37	return self;	15✔
38	}	15✔
39
40	- (instancetype)initWithIdentifier:(NSString *)identifier
41	state:(SNTRuleState)state
42	type:(SNTRuleType)type
43	customMsg:(NSString *)customMsg {	4✔
44	self = [self initWithIdentifier:identifier state:state type:type customMsg:customMsg timestamp:0];	4✔
45	// Initialize timestamp to current time if rule is transitive.
46	if (self && state == SNTRuleStateAllowTransitive) {	4!
47	[self resetTimestamp];	×
48	}	×
49	return self;	4✔
50	}	4✔
51
52	// Converts rule information downloaded from the server into a SNTRule. Because any information
53	// not recorded by SNTRule is thrown away here, this method is also responsible for dealing with
54	// the extra bundle rule information (bundle_hash & rule_count).
55	- (instancetype)initWithDictionary:(NSDictionary *)dict {	4✔
56	if (![dict isKindOfClass:[NSDictionary class]]) return nil;	4!
57
58	self = [super init];	4✔
59	if (self) {	4!
60	_identifier = dict[kRuleIdentifier];	4✔
61	if (!_identifier.length) _identifier = dict[kRuleSHA256];	4✔
62	if (!_identifier.length) {	4!
63	return nil;	×
64	}	×
65
66	NSString *policyString = dict[kRulePolicy];	4✔
67	if ([policyString isEqual:kRulePolicyAllowlist] \|\|	4✔
68	[policyString isEqual:kRulePolicyAllowlistDeprecated]) {	3!
69	_state = SNTRuleStateAllow;	1✔
70	} else if ([policyString isEqual:kRulePolicyAllowlistCompiler] \|\|	3!
71	[policyString isEqual:kRulePolicyAllowlistCompilerDeprecated]) {	3!
72	_state = SNTRuleStateAllowCompiler;	×
73	} else if ([policyString isEqual:kRulePolicyBlocklist] \|\|	3✔
74	[policyString isEqual:kRulePolicyBlocklistDeprecated]) {	3!
75	_state = SNTRuleStateBlock;	3✔
76	} else if ([policyString isEqual:kRulePolicySilentBlocklist] \|\|	×
77	[policyString isEqual:kRulePolicySilentBlocklistDeprecated]) {	×
78	_state = SNTRuleStateSilentBlock;	×
79	} else if ([policyString isEqual:kRulePolicyRemove]) {	×
80	_state = SNTRuleStateRemove;	×
81	} else {	×
82	return nil;	×
83	}	×
84
85	NSString *ruleTypeString = dict[kRuleType];	4✔
86	if ([ruleTypeString isEqual:kRuleTypeBinary]) {	4✔
87	_type = SNTRuleTypeBinary;	1✔
88	} else if ([ruleTypeString isEqual:kRuleTypeCertificate]) {	3✔
89	_type = SNTRuleTypeCertificate;	2✔
90	} else if ([ruleTypeString isEqual:kRuleTypeTeamID]) {	1!
91	_type = SNTRuleTypeTeamID;	1✔
92	} else {	×
93	return nil;	×
94	}	×
95
96	NSString *customMsg = dict[kRuleCustomMsg];	4✔
97	if (customMsg.length) {	4✔
98	_customMsg = customMsg;	2✔
99	}	2✔
100	}	4✔
101	return self;	4✔
102	}	4✔
103
104	#pragma mark NSSecureCoding
105
106	#pragma clang diagnostic push
107	#pragma clang diagnostic ignored "-Wobjc-literal-conversion"
108	#define ENCODE(obj, key) \
109	if (obj) [coder encodeObject:obj forKey:key]	×
110	#define DECODE(cls, key) [decoder decodeObjectOfClass:[cls class] forKey:key]	×
111
112	+ (BOOL)supportsSecureCoding {	×
113	return YES;	×
114	}	×
115
116	- (void)encodeWithCoder:(NSCoder *)coder {	×
117	ENCODE(self.identifier, @"identifier");	×
118	ENCODE(@(self.state), @"state");	×
119	ENCODE(@(self.type), @"type");	×
120	ENCODE(self.customMsg, @"custommsg");	×
121	ENCODE(@(self.timestamp), @"timestamp");	×
122	}	×
123
124	- (instancetype)initWithCoder:(NSCoder *)decoder {	×
125	self = [super init];	×
126	if (self) {	×
127	_identifier = DECODE(NSString, @"identifier");	×
128	_state = [DECODE(NSNumber, @"state") intValue];	×
129	_type = [DECODE(NSNumber, @"type") intValue];	×
130	_customMsg = DECODE(NSString, @"custommsg");	×
131	_timestamp = [DECODE(NSNumber, @"timestamp") unsignedIntegerValue];	×
132	}	×
133	return self;	×
134	}	×
135
136	#undef DECODE
137	#undef ENCODE
138	#pragma clang diagnostic pop
139
140	- (BOOL)isEqual:(id)other {	4✔
141	if (other == self) return YES;	4!
142	if (![other isKindOfClass:[SNTRule class]]) return NO;	4!
143	SNTRule *o = other;	4✔
144	return ([self.identifier isEqual:o.identifier] && self.state == o.state && self.type == o.type);	4!
145	}	4✔
146
147	- (NSUInteger)hash {	×
148	NSUInteger prime = 31;	×
149	NSUInteger result = 1;	×
150	result = prime * result + [self.identifier hash];	×
151	result = prime * result + self.state;	×
152	result = prime * result + self.type;	×
153	return result;	×
154	}	×
155
156	- (NSString *)description {	1✔
157	return [NSString	1✔
158	stringWithFormat:@"SNTRule: Identifier: %@, State: %ld, Type: %ld, Timestamp: %lu",	1✔
159	self.identifier, self.state, self.type, (unsigned long)self.timestamp];	1✔
160	}	1✔
161
162	#pragma mark Last-access Timestamp
163
164	- (void)resetTimestamp {	×
165	self.timestamp = (NSUInteger)[[NSDate date] timeIntervalSinceReferenceDate];	×
166	}	×
167
168	@end

google / santa / 2666311481

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous