/*

 * Copyright (c) 1997, 2017, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package java.net;

import java.io.IOException;

import java.io.ObjectInputStream;

import java.io.ObjectOutputStream;

import java.io.ObjectStreamField;

import java.io.Serializable;

import java.net.InetAddress;

import java.security.AccessController;

import java.security.Permission;

import java.security.PermissionCollection;

import java.security.PrivilegedAction;

import java.security.Security;

import java.util.Collections;

import java.util.Comparator;

import java.util.Enumeration;

import java.util.Vector;

import java.util.StringJoiner;

import java.util.StringTokenizer;

import java.util.concurrent.ConcurrentSkipListMap;

import sun.net.util.IPAddressUtil;

import sun.net.PortConfig;

import sun.security.util.RegisteredDomain;

import sun.security.util.SecurityConstants;

import sun.security.util.Debug;

/**

 * This class represents access to a network via sockets.

 * A SocketPermission consists of a

 * host specification and a set of "actions" specifying ways to

 * connect to that host. The host is specified as

 * <pre>

 *    host = (hostname | IPv4address | iPv6reference) [:portrange]

 *    portrange = portnumber | -portnumber | portnumber-[portnumber]

 * </pre>

 * The host is expressed as a DNS name, as a numerical IP address,

 * or as "localhost" (for the local machine).

 * The wildcard "*" may be included once in a DNS name host

 * specification. If it is included, it must be in the leftmost

 * position, as in "*.example.com".

 * <p>

 * The format of the IPv6reference should follow that specified in <a

 * href="http://www.ietf.org/rfc/rfc2732.txt"><i>RFC&nbsp;2732: Format

 * for Literal IPv6 Addresses in URLs</i></a>:

 * <pre>

 *    ipv6reference = "[" IPv6address "]"

 *</pre>

 * For example, you can construct a SocketPermission instance

 * as the following:

 * <pre>

 *    String hostAddress = inetaddress.getHostAddress();

 *    if (inetaddress instanceof Inet6Address) {

 *        sp = new SocketPermission("[" + hostAddress + "]:" + port, action);

 *    } else {

 *        sp = new SocketPermission(hostAddress + ":" + port, action);

 *    }

 * </pre>

 * or

 * <pre>

 *    String host = url.getHost();

 *    sp = new SocketPermission(host + ":" + port, action);

 * </pre>

 * <p>

 * The <A HREF="Inet6Address.html#lform">full uncompressed form</A> of

 * an IPv6 literal address is also valid.

 * <p>

 * The port or portrange is optional. A port specification of the

 * form "N-", where <i>N</i> is a port number, signifies all ports

 * numbered <i>N</i> and above, while a specification of the

 * form "-N" indicates all ports numbered <i>N</i> and below.

 * The special port value {@code 0} refers to the entire <i>ephemeral</i>

 * port range. This is a fixed range of ports a system may use to

 * allocate dynamic ports from. The actual range may be system dependent.

 * <p>

 * The possible ways to connect to the host are

 * <pre>

 * accept

 * connect

 * listen

 * resolve

 * </pre>

 * The "listen" action is only meaningful when used with "localhost" and

 * means the ability to bind to a specified port.

 * The "resolve" action is implied when any of the other actions are present.

 * The action "resolve" refers to host/ip name service lookups.

 * <P>

 * The actions string is converted to lowercase before processing.

 * <p>As an example of the creation and meaning of SocketPermissions,

 * note that if the following permission:

 *

 * <pre>

 *   p1 = new SocketPermission("foo.example.com:7777", "connect,accept");

 * </pre>

 *

 * is granted to some code, it allows that code to connect to port 7777 on

 * {@code foo.example.com}, and to accept connections on that port.

 *

 * <p>Similarly, if the following permission:

 *

 * <pre>

 *   p2 = new SocketPermission("localhost:1024-", "accept,connect,listen");

 * </pre>

 *

 * is granted to some code, it allows that code to

 * accept connections on, connect to, or listen on any port between

 * 1024 and 65535 on the local host.

 *

 * <p>Note: Granting code permission to accept or make connections to remote

 * hosts may be dangerous because malevolent code can then more easily

 * transfer and share confidential data among parties who may not

 * otherwise have access to the data.

 *

 * @see java.security.Permissions

 * @see SocketPermission

 *

 *

 * @author Marianne Mueller

 * @author Roland Schemers

 * @since 1.2

 *

 * @serial exclude

 */

public final class SocketPermission extends Permission

    implements java.io.Serializable

{

    private static final long serialVersionUID = -7204263841984476862L;

    /**

     * Connect to host:port

     */

    private static final int CONNECT    = 0x1;

    /**

     * Listen on host:port

     */

    private static final int LISTEN     = 0x2;

    /**

     * Accept a connection from host:port

     */

    private static final int ACCEPT     = 0x4;

    /**

     * Resolve DNS queries

     */

    private static final int RESOLVE    = 0x8;

    /**

     * No actions

     */

    private static final int NONE               = 0x0;

    /**

     * All actions

     */

    private static final int ALL        = CONNECT|LISTEN|ACCEPT|RESOLVE;

    // various port constants

    private static final int PORT_MIN = 0;

    private static final int PORT_MAX = 65535;

    private static final int PRIV_PORT_MAX = 1023;

    private static final int DEF_EPH_LOW = 49152;

    // the actions mask

    private transient int mask;

    /**

     * the actions string.

     *

     * @serial

     */

    private String actions; // Left null as long as possible, then

                            // created and re-used in the getAction function.

    // hostname part as it is passed

    private transient String hostname;

    // the canonical name of the host

    // in the case of "*.foo.com", cname is ".foo.com".

    private transient String cname;

    // all the IP addresses of the host

    private transient InetAddress[] addresses;

    // true if the hostname is a wildcard (e.g. "*.example.com")

    private transient boolean wildcard;

    // true if we were initialized with a single numeric IP address

    private transient boolean init_with_ip;

    // true if this SocketPermission represents an invalid/unknown host

    // used for implies when the delayed lookup has already failed

    private transient boolean invalid;

    // port range on host

    private transient int[] portrange;

    private transient boolean defaultDeny = false;

    // true if this SocketPermission represents a hostname

    // that failed our reverse mapping heuristic test

    private transient boolean untrusted;

    private transient boolean trusted;

    // true if the sun.net.trustNameService system property is set

    private static boolean trustNameService;

    private static Debug debug = null;

    private static boolean debugInit = false;

    // lazy initializer

    private static class EphemeralRange {

        static final int low = initEphemeralPorts("low", DEF_EPH_LOW);

            static final int high = initEphemeralPorts("high", PORT_MAX);

    };

    static {

        Boolean tmp = java.security.AccessController.doPrivileged(

                new sun.security.action.GetBooleanAction("sun.net.trustNameService"));

        trustNameService = tmp.booleanValue();

    }

    private static synchronized Debug getDebug() {

        if (!debugInit) {

            debug = Debug.getInstance("access");

            debugInit = true;

        }

        return debug;

    }

    /**

     * Creates a new SocketPermission object with the specified actions.

     * The host is expressed as a DNS name, or as a numerical IP address.

     * Optionally, a port or a portrange may be supplied (separated

     * from the DNS name or IP address by a colon).

     * <p>

     * To specify the local machine, use "localhost" as the <i>host</i>.

     * Also note: An empty <i>host</i> String ("") is equivalent to "localhost".

     * <p>

     * The <i>actions</i> parameter contains a comma-separated list of the

     * actions granted for the specified host (and port(s)). Possible actions are

     * "connect", "listen", "accept", "resolve", or

     * any combination of those. "resolve" is automatically added

     * when any of the other three are specified.

     * <p>

     * Examples of SocketPermission instantiation are the following:

     * <pre>

     *    nr = new SocketPermission("www.example.com", "connect");

     *    nr = new SocketPermission("www.example.com:80", "connect");

     *    nr = new SocketPermission("*.example.com", "connect");

     *    nr = new SocketPermission("*.edu", "resolve");

     *    nr = new SocketPermission("204.160.241.0", "connect");

     *    nr = new SocketPermission("localhost:1024-65535", "listen");

     *    nr = new SocketPermission("204.160.241.0:1024-65535", "connect");

     * </pre>

     *

     * @param host the hostname or IP address of the computer, optionally

     * including a colon followed by a port or port range.

     * @param action the action string.

     */

    public SocketPermission(String host, String action) {

        super(getHost(host));

        // name initialized to getHost(host); NPE detected in getHost()

        init(getName(), getMask(action));

    }

    SocketPermission(String host, int mask) {

        super(getHost(host));

        // name initialized to getHost(host); NPE detected in getHost()

        init(getName(), mask);

    }

    private void setDeny() {

        defaultDeny = true;

    }

    private static String getHost(String host) {

        if (host.isEmpty()) {

            return "localhost";

        } else {

            /* IPv6 literal address used in this context should follow

             * the format specified in RFC 2732;

             * if not, we try to solve the unambiguous case

             */

            int ind;

            if (host.charAt(0) != '[') {

                if ((ind = host.indexOf(':')) != host.lastIndexOf(':')) {

                    /* More than one ":", meaning IPv6 address is not

                     * in RFC 2732 format;

                     * We will rectify user errors for all unambiguous cases

                     */

                    StringTokenizer st = new StringTokenizer(host, ":");

                    int tokens = st.countTokens();

                    if (tokens == 9) {

                        // IPv6 address followed by port

                        ind = host.lastIndexOf(':');

                        host = "[" + host.substring(0, ind) + "]" +

                            host.substring(ind);

                    } else if (tokens == 8 && host.indexOf("::") == -1) {

                        // IPv6 address only, not followed by port

                        host = "[" + host + "]";

                    } else {

                        // could be ambiguous

                        throw new IllegalArgumentException("Ambiguous"+

                                                           " hostport part");

                    }

                }

            }

            return host;

        }

    }

    private int[] parsePort(String port)

        throws Exception

    {

        if (port == null || port.isEmpty() || port.equals("*")) {

            return new int[] {PORT_MIN, PORT_MAX};

        }

        int dash = port.indexOf('-');

        if (dash == -1) {

            int p = Integer.parseInt(port);

            return new int[] {p, p};

        } else {

            String low = port.substring(0, dash);

            String high = port.substring(dash+1);

            int l,h;

            if (low.isEmpty()) {

                l = PORT_MIN;

            } else {

                l = Integer.parseInt(low);

            }

            if (high.isEmpty()) {

                h = PORT_MAX;

            } else {

                h = Integer.parseInt(high);

            }

            if (l < 0 || h < 0 || h<l)

                throw new IllegalArgumentException("invalid port range");

            return new int[] {l, h};

        }

    }

    /**

     * Returns true if the permission has specified zero

     * as its value (or lower bound) signifying the ephemeral range

     */

    private boolean includesEphemerals() {

        return portrange[0] == 0;

    }

    /**

     * Initialize the SocketPermission object. We don't do any DNS lookups

     * as this point, instead we hold off until the implies method is

     * called.

     */

    private void init(String host, int mask) {

        // Set the integer mask that represents the actions

        if ((mask & ALL) != mask)

            throw new IllegalArgumentException("invalid actions mask");

        // always OR in RESOLVE if we allow any of the others

        this.mask = mask | RESOLVE;

        // Parse the host name.  A name has up to three components, the

        // hostname, a port number, or two numbers representing a port

        // range.   "www.example.com:8080-9090" is a valid host name.

        // With IPv6 an address can be 2010:836B:4179::836B:4179

        // An IPv6 address needs to be enclose in []

        // For ex: [2010:836B:4179::836B:4179]:8080-9090

        // Refer to RFC 2732 for more information.

        int rb = 0 ;

        int start = 0, end = 0;

        int sep = -1;

        String hostport = host;

        if (host.charAt(0) == '[') {

            start = 1;

            rb = host.indexOf(']');

            if (rb != -1) {

                host = host.substring(start, rb);

            } else {

                throw new

                    IllegalArgumentException("invalid host/port: "+host);

            }

            sep = hostport.indexOf(':', rb+1);

        } else {

            start = 0;

            sep = host.indexOf(':', rb);

            end = sep;

            if (sep != -1) {

                host = host.substring(start, end);

            }

        }

        if (sep != -1) {

            String port = hostport.substring(sep+1);

            try {

                portrange = parsePort(port);

            } catch (Exception e) {

                throw new

                    IllegalArgumentException("invalid port range: "+port);

            }

        } else {

            portrange = new int[] { PORT_MIN, PORT_MAX };

        }

        hostname = host;

        // is this a domain wildcard specification

        if (host.lastIndexOf('*') > 0) {

            throw new

               IllegalArgumentException("invalid host wildcard specification");

        } else if (host.startsWith("*")) {

            wildcard = true;

            if (host.equals("*")) {

                cname = "";

            } else if (host.startsWith("*.")) {

                cname = host.substring(1).toLowerCase();

            } else {

              throw new

               IllegalArgumentException("invalid host wildcard specification");

            }

            return;

        } else {

                // see if we are being initialized with an IP address.

                char ch = host.charAt(0);

                if (ch == ':' || Character.digit(ch, 16) != -1) {

                    byte ip[] = IPAddressUtil.textToNumericFormatV4(host);

                    if (ip == null) {

                        ip = IPAddressUtil.textToNumericFormatV6(host);

                    }

                    if (ip != null) {

                        try {

                            addresses =

                                new InetAddress[]

                                {InetAddress.getByAddress(ip) };

                            init_with_ip = true;

                        } catch (UnknownHostException uhe) {

                            // this shouldn't happen

                            invalid = true;

                        }

                    }

                }

            }

        }

    }

    /**

     * Convert an action string to an integer actions mask.

     *

     * @param action the action string

     * @return the action mask

     */

    private static int getMask(String action) {

        if (action == null) {

            throw new NullPointerException("action can't be null");

        }

        if (action.isEmpty()) {

            throw new IllegalArgumentException("action can't be empty");

        }

        int mask = NONE;

        // Use object identity comparison against known-interned strings for

        // performance benefit (these values are used heavily within the JDK).

        if (action == SecurityConstants.SOCKET_RESOLVE_ACTION) {

            return RESOLVE;

        } else if (action == SecurityConstants.SOCKET_CONNECT_ACTION) {

            return CONNECT;

        } else if (action == SecurityConstants.SOCKET_LISTEN_ACTION) {

            return LISTEN;

        } else if (action == SecurityConstants.SOCKET_ACCEPT_ACTION) {

            return ACCEPT;

        } else if (action == SecurityConstants.SOCKET_CONNECT_ACCEPT_ACTION) {

            return CONNECT|ACCEPT;