Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use the managed signer to remove the code signature from singlefile bundles #110063

Merged
merged 6 commits into from
Nov 26, 2024
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 13 additions & 8 deletions src/installer/managed/Microsoft.NET.HostModel/Bundle/Bundler.cs
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,13 @@
using System.Diagnostics;
using System.IO;
using System.IO.Compression;
using System.IO.MemoryMappedFiles;
using System.Linq;
using System.Reflection.PortableExecutable;
using System.Runtime.InteropServices;
using Microsoft.DotNet.CoreSetup;
using Microsoft.NET.HostModel.AppHost;
using Microsoft.NET.HostModel.MachO;

namespace Microsoft.NET.HostModel.Bundle
{
Expand Down Expand Up @@ -92,7 +94,7 @@ private bool ShouldCompress(FileType type)
/// startOffset: offset of the start 'file' within 'bundle'
/// compressedSize: size of the compressed data, if entry was compressed, otherwise 0
/// </returns>
private (long startOffset, long compressedSize) AddToBundle(Stream bundle, FileStream file, FileType type)
private (long startOffset, long compressedSize) AddToBundle(FileStream bundle, FileStream file, FileType type)
{
long startOffset = bundle.Position;
if (ShouldCompress(type))
Expand Down Expand Up @@ -273,20 +275,23 @@ public string GenerateBundle(IReadOnlyList<FileSpec> fileSpecs)

BinaryUtils.CopyFile(hostSource, bundlePath);

if (_target.IsOSX && RuntimeInformation.IsOSPlatform(OSPlatform.OSX) && Codesign.IsAvailable)
{
Codesign.Run("--remove-signature", bundlePath);
}

// Note: We're comparing file paths both on the OS we're running on as well as on the target OS for the app
// We can't really make assumptions about the file systems (even on Linux there can be case insensitive file systems
// and vice versa for Windows). So it's safer to do case sensitive comparison everywhere.
var relativePathToSpec = new Dictionary<string, FileSpec>(StringComparer.Ordinal);

long headerOffset = 0;
using (BinaryWriter writer = new BinaryWriter(File.OpenWrite(bundlePath)))
using (FileStream bundle = File.Open(bundlePath, FileMode.Open, FileAccess.ReadWrite))
using (BinaryWriter writer = new BinaryWriter(bundle))
elinor-fung marked this conversation as resolved.
Show resolved Hide resolved
{
Stream bundle = writer.BaseStream;
long? newLength;
using (MemoryMappedFile mmap = MemoryMappedFile.CreateFromFile(bundle, null, 0, MemoryMappedFileAccess.ReadWrite, HandleInheritability.None, true))
using (MemoryMappedViewAccessor accessor = mmap.CreateViewAccessor(0, 0, MemoryMappedFileAccess.ReadWrite))
{
MachObjectFile.TryRemoveCodesign(accessor, out newLength);
}
newLength ??= new FileInfo(bundlePath).Length;
bundle.SetLength(newLength.Value);
elinor-fung marked this conversation as resolved.
Show resolved Hide resolved
bundle.Position = bundle.Length;

foreach (var fileSpec in fileSpecs)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -485,12 +485,23 @@ private void ResourceWithUnknownLanguage()
}
}

private static readonly byte[] s_placeholderData = AppBinaryPathPlaceholderSearchValue.Concat(DotNetSearchPlaceholderValue).ToArray();
private static readonly byte[] s_apphostPlaceholderData = AppBinaryPathPlaceholderSearchValue.Concat(DotNetSearchPlaceholderValue).ToArray();
private static readonly byte[] s_singleFileApphostPlaceholderData = {
// 8 bytes represent the bundle header-offset
// Zero for non-bundle apphosts (default).
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
// 32 bytes represent the bundle signature: SHA-256 for ".net core bundle"
0x8b, 0x12, 0x02, 0xb9, 0x6a, 0x61, 0x20, 0x38,
0x72, 0x7b, 0x93, 0x02, 0x14, 0xd7, 0xa0, 0x32,
0x13, 0xf5, 0xb9, 0xe6, 0xef, 0xae, 0x33, 0x18,
0xee, 0x3b, 0x2d, 0xce, 0x24, 0xb3, 0x6a, 0xae
};

/// <summary>
/// Prepares a mock executable file with the AppHost placeholder embedded in it.
/// This file will not run, but can be used to test HostWriter and signing process.
/// </summary>
public static string PrepareMockMachAppHostFile(string directory)
public static string PrepareMockMachAppHostFile(string directory, bool singleFile = false)
{
string fileName = "MockAppHost.mach.o";
string outputFilePath = Path.Combine(directory, fileName);
Expand All @@ -501,7 +512,7 @@ public static string PrepareMockMachAppHostFile(string directory)
// Add the placeholder - it just needs to exist somewhere in the image
// We'll put it at 4096 bytes into the file - this should be in the middle of the __TEXT segment
managedSignFile.Position = 4096;
managedSignFile.Write(s_placeholderData);
managedSignFile.Write(singleFile ? s_singleFileApphostPlaceholderData : s_apphostPlaceholderData);
}
return outputFilePath;
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,11 @@

using FluentAssertions;
using Microsoft.DotNet.Cli.Build.Framework;
using Microsoft.DotNet.CoreSetup;
using Microsoft.DotNet.CoreSetup.Test;
using Microsoft.NET.HostModel.AppHost.Tests;
using Microsoft.NET.HostModel.MachO;
using Microsoft.NET.HostModel.MachO.CodeSign.Tests;
using Xunit;

namespace Microsoft.NET.HostModel.Bundle.Tests
Expand Down Expand Up @@ -313,13 +317,12 @@ public void AssemblyAlignment()
[Theory]
[InlineData(true)]
[InlineData(false)]
[PlatformSpecific(TestPlatforms.OSX)]
public void Codesign(bool shouldCodesign)
public void MacOSBundleIsCodeSigned(bool shouldCodesign)
{
TestApp app = sharedTestState.App;
FileSpec[] fileSpecs = new FileSpec[]
{
new FileSpec(Binaries.AppHost.FilePath, BundlerHostName),
new FileSpec(CreateAppHost.PrepareMockMachAppHostFile(app.Location, singleFile: true), BundlerHostName),
new FileSpec(app.AppDll, Path.GetRelativePath(app.Location, app.AppDll)),
new FileSpec(app.DepsJson, Path.GetRelativePath(app.Location, app.DepsJson)),
new FileSpec(app.RuntimeConfigJson, Path.GetRelativePath(app.Location, app.RuntimeConfigJson)),
Expand All @@ -328,19 +331,23 @@ public void Codesign(bool shouldCodesign)
Bundler bundler = CreateBundlerInstance(macosCodesign: shouldCodesign);
string bundledApp = bundler.GenerateBundle(fileSpecs);

// Check if the file is signed
CommandResult result = Command.Create("codesign", $"-v {bundledApp}")
.CaptureStdErr()
.CaptureStdOut()
.Execute(expectedToFail: !shouldCodesign);
if (!RuntimeInformation.IsOSPlatform(OSPlatform.OSX))
{
SigningTests.IsSigned(bundledApp).Should().BeFalse();
elinor-fung marked this conversation as resolved.
Show resolved Hide resolved
return;
}

// Check if the file is signed
var result = Codesign.Run("-v", bundledApp);
if (shouldCodesign)
{
result.Should().Pass();
result.ExitCode.Should().Be(0);
}
else
{
result.Should().Fail();
result.ExitCode.Should().NotBe(0);
// Ensure we can sign it again
Codesign.Run("-s -", bundledApp).ExitCode.Should().Be(0);
}
}

Expand Down