1010#include "security-manager.h"
1111
1212static MonoSecurityMode mono_security_mode = MONO_SECURITY_MODE_NONE ;
13- static MonoBoolean mono_security_manager_activated = FALSE;
14- static MonoBoolean mono_security_manager_enabled = TRUE;
15- static MonoBoolean mono_security_manager_execution = TRUE;
1613
1714void
1815mono_security_set_mode (MonoSecurityMode mode )
@@ -26,22 +23,6 @@ mono_security_get_mode (void)
2623 return mono_security_mode ;
2724}
2825
29- /*
30- * Note: The security manager is activate once when executing the Mono. This
31- * is not meant to be a turn on/off runtime switch.
32- */
33- void
34- mono_activate_security_manager (void )
35- {
36- mono_security_manager_activated = TRUE;
37- }
38-
39- gboolean
40- mono_is_security_manager_active (void )
41- {
42- return mono_security_manager_activated ;
43- }
44-
4526#ifndef DISABLE_SECURITY
4627
4728static MonoSecurityManager secman ;
@@ -59,120 +40,10 @@ mono_security_manager_get_methods (void)
5940 g_assert (secman .securitymanager );
6041 if (!secman .securitymanager -> inited )
6142 mono_class_init (secman .securitymanager );
62-
63- secman .demand = mono_class_get_method_from_name (secman .securitymanager ,
64- "InternalDemand" , 2 );
65- g_assert (secman .demand );
66-
67- secman .demandchoice = mono_class_get_method_from_name (secman .securitymanager ,
68- "InternalDemandChoice" , 2 );
69- g_assert (secman .demandchoice );
70-
71- secman .demandunmanaged = mono_class_get_method_from_name (secman .securitymanager ,
72- "DemandUnmanaged" , 0 );
73- g_assert (secman .demandunmanaged );
74-
75- secman .inheritancedemand = mono_class_get_method_from_name (secman .securitymanager ,
76- "InheritanceDemand" , 3 );
77- g_assert (secman .inheritancedemand );
78-
79- secman .inheritsecurityexception = mono_class_get_method_from_name (secman .securitymanager ,
80- "InheritanceDemandSecurityException" , 4 );
81- g_assert (secman .inheritsecurityexception );
82-
83- secman .linkdemand = mono_class_get_method_from_name (secman .securitymanager ,
84- "LinkDemand" , 3 );
85- g_assert (secman .linkdemand );
86-
87- secman .linkdemandunmanaged = mono_class_get_method_from_name (secman .securitymanager ,
88- "LinkDemandUnmanaged" , 1 );
89- g_assert (secman .linkdemandunmanaged );
90-
91- secman .linkdemandfulltrust = mono_class_get_method_from_name (secman .securitymanager ,
92- "LinkDemandFullTrust" , 1 );
93- g_assert (secman .linkdemandfulltrust );
94-
95- secman .linkdemandsecurityexception = mono_class_get_method_from_name (secman .securitymanager ,
96- "LinkDemandSecurityException" , 2 );
97- g_assert (secman .linkdemandsecurityexception );
98-
99- secman .allowpartiallytrustedcallers = mono_class_from_name (mono_defaults .corlib , "System.Security" ,
100- "AllowPartiallyTrustedCallersAttribute" );
101- g_assert (secman .allowpartiallytrustedcallers );
102-
103- secman .suppressunmanagedcodesecurity = mono_class_from_name (mono_defaults .corlib , "System.Security" ,
104- "SuppressUnmanagedCodeSecurityAttribute" );
105- g_assert (secman .suppressunmanagedcodesecurity );
10643
10744 return & secman ;
10845}
10946
110- static gboolean
111- mono_secman_inheritance_check (MonoClass * klass , MonoDeclSecurityActions * demands )
112- {
113- MonoSecurityManager * secman = mono_security_manager_get_methods ();
114- MonoDomain * domain = mono_domain_get ();
115- MonoAssembly * assembly = mono_image_get_assembly (klass -> image );
116- MonoReflectionAssembly * refass = mono_assembly_get_object (domain , assembly );
117- MonoObject * res ;
118- gpointer args [3 ];
119-
120- args [0 ] = domain -> domain ;
121- args [1 ] = refass ;
122- args [2 ] = demands ;
123-
124- res = mono_runtime_invoke (secman -> inheritancedemand , NULL , args , NULL );
125- return (* (MonoBoolean * ) mono_object_unbox (res ));
126- }
127-
128- void
129- mono_secman_inheritancedemand_class (MonoClass * klass , MonoClass * parent )
130- {
131- MonoDeclSecurityActions demands ;
132-
133- /* don't hide previous results -and- don't calc everything for nothing */
134- if (klass -> exception_type != 0 )
135- return ;
136-
137- /* short-circuit corlib as it is fully trusted (within itself)
138- * and because this cause major recursion headaches */
139- if ((klass -> image == mono_defaults .corlib ) && (parent -> image == mono_defaults .corlib ))
140- return ;
141-
142- /* Check if there are an InheritanceDemand on the parent class */
143- if (mono_declsec_get_inheritdemands_class (parent , & demands )) {
144- /* If so check the demands on the klass (inheritor) */
145- if (!mono_secman_inheritance_check (klass , & demands )) {
146- /* Keep flags in MonoClass to be able to throw a SecurityException later (if required) */
147- mono_class_set_failure (klass , MONO_EXCEPTION_SECURITY_INHERITANCEDEMAND , NULL );
148- }
149- }
150- }
151-
152- void
153- mono_secman_inheritancedemand_method (MonoMethod * override , MonoMethod * base )
154- {
155- MonoDeclSecurityActions demands ;
156-
157- /* don't hide previous results -and- don't calc everything for nothing */
158- if (override -> klass -> exception_type != 0 )
159- return ;
160-
161- /* short-circuit corlib as it is fully trusted (within itself)
162- * and because this cause major recursion headaches */
163- if ((override -> klass -> image == mono_defaults .corlib ) && (base -> klass -> image == mono_defaults .corlib ))
164- return ;
165-
166- /* Check if there are an InheritanceDemand on the base (virtual) method */
167- if (mono_declsec_get_inheritdemands_method (base , & demands )) {
168- /* If so check the demands on the overriding method */
169- if (!mono_secman_inheritance_check (override -> klass , & demands )) {
170- /* Keep flags in MonoClass to be able to throw a SecurityException later (if required) */
171- mono_class_set_failure (override -> klass , MONO_EXCEPTION_SECURITY_INHERITANCEDEMAND , base );
172- }
173- }
174- }
175-
17647#else
17748
17849MonoSecurityManager *
@@ -181,16 +52,6 @@ mono_security_manager_get_methods (void)
18152 return NULL ;
18253}
18354
184- void
185- mono_secman_inheritancedemand_class (MonoClass * klass , MonoClass * parent )
186- {
187- }
188-
189- void
190- mono_secman_inheritancedemand_method (MonoMethod * override , MonoMethod * base )
191- {
192- }
193-
19455#endif /* DISABLE_SECURITY */
19556
19657/*
@@ -230,10 +91,8 @@ mono_get_context_capture_method (void)
23091{
23192 static MonoMethod * method = NULL ;
23293
233- if (!mono_security_manager_activated ) {
234- if (mono_image_get_assembly (mono_defaults .corlib )-> aname .major < 2 )
235- return NULL ;
236- }
94+ if (mono_image_get_assembly (mono_defaults .corlib )-> aname .major < 2 )
95+ return NULL ;
23796
23897 /* older corlib revisions won't have the class (nor the method) */
23998 if (mono_defaults .executioncontext_class && !method ) {
@@ -250,59 +109,30 @@ mono_get_context_capture_method (void)
250109MonoBoolean
251110ves_icall_System_Security_SecurityManager_get_SecurityEnabled (void )
252111{
253- if (!mono_security_manager_activated ) {
254- /* SecurityManager is internal for Moonlight and SecurityEnabled is used to know if CoreCLR is active
255- * (e.g. plugin executing in the browser) or not (e.g. smcs compiling source code with corlib 2.1)
256- */
257- return (mono_security_get_mode () == MONO_SECURITY_MODE_CORE_CLR );
258- }
259- return mono_security_manager_enabled ;
112+ /* SecurityManager is internal for Moonlight and SecurityEnabled is used to know if CoreCLR is active
113+ * (e.g. plugin executing in the browser) or not (e.g. smcs compiling source code with corlib 2.1)
114+ */
115+ return (mono_security_get_mode () == MONO_SECURITY_MODE_CORE_CLR );
260116}
261117
262118void
263119ves_icall_System_Security_SecurityManager_set_SecurityEnabled (MonoBoolean value )
264120{
265- /* value can be changed only if the security manager is activated */
266- if (mono_security_manager_activated ) {
267- mono_security_manager_enabled = value ;
268- }
269121}
270122
271123MonoBoolean
272124ves_icall_System_Security_SecurityManager_get_CheckExecutionRights (void )
273125{
274- if (!mono_security_manager_activated )
275- return FALSE;
276- return mono_security_manager_execution ;
126+ return FALSE;
277127}
278128
279129void
280130ves_icall_System_Security_SecurityManager_set_CheckExecutionRights (MonoBoolean value )
281131{
282- /* value can be changed only id the security manager is activated */
283- if (mono_security_manager_activated ) {
284- mono_security_manager_execution = value ;
285- }
286132}
287133
288134MonoBoolean
289135ves_icall_System_Security_SecurityManager_GetLinkDemandSecurity (MonoReflectionMethod * m , MonoDeclSecurityActions * kactions , MonoDeclSecurityActions * mactions )
290136{
291- MonoMethod * method = m -> method ;
292- /* we want the original as the wrapper is "free" of the security informations */
293- if (method -> wrapper_type == MONO_WRAPPER_MANAGED_TO_NATIVE || method -> wrapper_type == MONO_WRAPPER_MANAGED_TO_MANAGED ) {
294- method = mono_marshal_method_from_wrapper (method );
295- }
296-
297- mono_class_init (method -> klass );
298-
299- /* if either the method or it's class has security (any type) */
300- if ((method -> flags & METHOD_ATTRIBUTE_HAS_SECURITY ) || (method -> klass -> flags & TYPE_ATTRIBUTE_HAS_SECURITY )) {
301- memset (kactions , 0 , sizeof (MonoDeclSecurityActions ));
302- memset (mactions , 0 , sizeof (MonoDeclSecurityActions ));
303-
304- /* get any linkdemand (either on the method or it's class) */
305- return mono_declsec_get_linkdemands (method , kactions , mactions );
306- }
307137 return FALSE;
308138}
0 commit comments