comparison mupdf-source/platform/java/jni/pkcs7verifier.c @ 2:b50eed0cc0ef upstream

ADD: MuPDF v1.26.7: the MuPDF source as downloaded by a default build of PyMuPDF 1.26.4. The directory name has changed: no version number in the expanded directory now.
author Franz Glasner <fzglas.hg@dom66.de>
date Mon, 15 Sep 2025 11:43:07 +0200
parents
children
comparison
equal deleted inserted replaced
1:1d09e1dec1d9 2:b50eed0cc0ef
1 // Copyright (C) 2004-2021 Artifex Software, Inc.
2 //
3 // This file is part of MuPDF.
4 //
5 // MuPDF is free software: you can redistribute it and/or modify it under the
6 // terms of the GNU Affero General Public License as published by the Free
7 // Software Foundation, either version 3 of the License, or (at your option)
8 // any later version.
9 //
10 // MuPDF is distributed in the hope that it will be useful, but WITHOUT ANY
11 // WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
12 // FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
13 // details.
14 //
15 // You should have received a copy of the GNU Affero General Public License
16 // along with MuPDF. If not, see <https://www.gnu.org/licenses/agpl-3.0.en.html>
17 //
18 // Alternative licensing terms are available from the licensor.
19 // For commercial licensing, see <https://www.artifex.com/> or contact
20 // Artifex Software, Inc., 39 Mesa Street, Suite 108A, San Francisco,
21 // CA 94129, USA, for further information.
22
23 /* PKCS7Verifier interface */
24
25 static void java_pkcs7_drop_verifier(fz_context *ctx, pdf_pkcs7_verifier *verifier_)
26 {
27 java_pkcs7_verifier *verifier = (java_pkcs7_verifier *) verifier_;
28 jboolean detach = JNI_FALSE;
29 JNIEnv *env = NULL;
30
31 env = jni_attach_thread(&detach);
32 if (!env)
33 fz_throw(ctx, FZ_ERROR_GENERIC, "cannot attach to JVM in java_pkcs7_check_digest");
34
35 (*env)->DeleteGlobalRef(env, verifier->jverifier);
36 fz_free(ctx, verifier);
37
38 jni_detach_thread(detach);
39 }
40
41 static pdf_signature_error java_pkcs7_check_certificate(fz_context *ctx, pdf_pkcs7_verifier *verifier, unsigned char *signature, size_t len)
42 {
43 java_pkcs7_verifier *pkcs7_verifier = (java_pkcs7_verifier *) verifier;
44 jobject jverifier = pkcs7_verifier->jverifier;
45 jint result = PDF_SIGNATURE_ERROR_UNKNOWN;
46 jboolean detach = JNI_FALSE;
47 JNIEnv *env = NULL;
48 jobject jsignature = NULL;
49
50 env = jni_attach_thread(&detach);
51 if (env == NULL)
52 fz_throw(ctx, FZ_ERROR_GENERIC, "cannot attach to JVM in java_pkcs7_check_digest");
53
54 fz_try(ctx)
55 jsignature = to_byteArray(ctx, env, signature, (int)len);
56 fz_catch(ctx)
57 fz_rethrow_and_detach_thread(ctx, detach);
58
59 result = (*env)->CallIntMethod(env, jverifier, mid_PKCS7Verifier_checkCertificate, jsignature);
60 if ((*env)->ExceptionCheck(env))
61 fz_throw_java_and_detach_thread(ctx, env, detach);
62
63 jni_detach_thread(detach);
64
65 return result;
66 }
67
68 static pdf_signature_error java_pkcs7_check_digest(fz_context *ctx, pdf_pkcs7_verifier *verifier, fz_stream *stm, unsigned char *signature, size_t len)
69 {
70 java_pkcs7_verifier *pkcs7_verifier = (java_pkcs7_verifier *) verifier;
71 jobject jverifier = pkcs7_verifier->jverifier;
72 jint result = PDF_SIGNATURE_ERROR_UNKNOWN;
73 jboolean detach = JNI_FALSE;
74 jobject jsignature = NULL;
75 jobject jstm = NULL;
76 JNIEnv *env = NULL;
77
78 env = jni_attach_thread(&detach);
79 if (env == NULL)
80 fz_throw(ctx, FZ_ERROR_GENERIC, "cannot attach to JVM in java_pkcs7_check_digest");
81
82 fz_try(ctx)
83 {
84 jsignature = to_byteArray(ctx, env, signature, (int)len);
85 jstm = to_FitzInputStream(ctx, env, stm);
86 }
87 fz_catch(ctx)
88 fz_rethrow_and_detach_thread(ctx, detach);
89
90 result = (*env)->CallIntMethod(env, jverifier, mid_PKCS7Verifier_checkDigest, jstm, jsignature);
91 if ((*env)->ExceptionCheck(env))
92 fz_throw_java_and_detach_thread(ctx, env, detach);
93
94 jni_detach_thread(detach);
95
96 return result;
97 }
98
99 static pdf_pkcs7_verifier *java_pkcs7_new_verifier(fz_context *ctx, jobject jverifier)
100 {
101 java_pkcs7_verifier *verifier = fz_malloc_struct(ctx, java_pkcs7_verifier);
102 verifier->base.drop = java_pkcs7_drop_verifier;
103 verifier->base.check_digest = java_pkcs7_check_digest;
104 verifier->base.check_certificate = java_pkcs7_check_certificate;
105 verifier->jverifier = jverifier;
106 return &verifier->base;
107 }
108
109 JNIEXPORT jlong JNICALL
110 FUN(PKCS7Verifier_newNative)(JNIEnv *env, jobject self, jobject jverifier)
111 {
112 fz_context *ctx = get_context(env);
113 pdf_pkcs7_verifier *verifier = NULL;
114
115 if (!ctx) return 0;
116 if (!jverifier) jni_throw_arg(env, "verifier must not be null");
117
118 jverifier = (*env)->NewGlobalRef(env, jverifier);
119 if (!jverifier) jni_throw_arg(env, "unable to get reference to verifier");
120
121 fz_try(ctx)
122 verifier = java_pkcs7_new_verifier(ctx, jverifier);
123 fz_catch(ctx)
124 {
125 (*env)->DeleteGlobalRef(env, jverifier);
126 jni_rethrow(env, ctx);
127 }
128
129 return jlong_cast(verifier);
130 }
131
132 JNIEXPORT void JNICALL
133 FUN(PKCS7Verifier_finalize)(JNIEnv *env, jobject self)
134 {
135 fz_context *ctx = get_context(env);
136 java_pkcs7_verifier *verifier = from_PKCS7Verifier_safe(env, self);
137 if (!ctx || !verifier) return;
138 (*env)->SetLongField(env, self, fid_PKCS7Verifier_pointer, 0);
139 pdf_drop_verifier(ctx, &verifier->base);
140 }