#

# Copyright (c) 2004-2009 Nokia Corporation and/or its subsidiary(-ies).

# All rights reserved.

# This component and the accompanying materials are made available

# under the terms of the License "Eclipse Public License v1.0"

# which accompanies this distribution, and is available

# at the URL "http://www.eclipse.org/legal/epl-v10.html".

#

# Initial Contributors:

# Nokia Corporation - initial contribution.

#

# Contributors:

#

# Description: 

#

use Cwd;

use strict;

use Getopt::Std;

use File::Basename;

use File::Copy;     # for future portability

# Note that although Win32 internally will quite happily accept

# forward slashes as directory separators, both cmd.exe and

# makesis.exe/signsis.exe interpret these as option separators,

# so use backslashes when calling these programs.

die "EPOCROOT not defined" if !defined ($ENV{EPOCROOT});

my $makesis = "$ENV{EPOCROOT}epoc32\\tools\\makesis.exe";

my $signsis = "$ENV{EPOCROOT}epoc32\\tools\\signsis.exe";

if ( ! -x $makesis || ! -x $signsis ) {

   die "$makesis and $signsis are not executable";

}

my $cert_path = "$ENV{'SECURITYSOURCEDIR'}\\installationservices\\switestfw\\testcertificates";

my %opt;

getopts( "vch:", \%opt ) or usage();

my $platform = lc($ARGV[0]);

my $configuration = lc($ARGV[1]);

my $packagedir = "packages";

my $non_iby_packagedir = "non_iby_packages";

my $builddir = "buildsis_${platform}_${configuration}";

usage() if $opt{h};

clean() if $opt{c};

usage() if !defined($ARGV[0]) || !defined($ARGV[1]);

# --------------------------------------------------------------------------

sub usage() {

    print STDERR << "EOF";

    usage: $0 [-hcv] <platform> <udeb|urel>

     -h        : this (help) message

     -v        : verbose output

     -c        : clean up signed .sis files

EOF

   exit;

}

# --------------------------------------------------------------------------

sub clean() {

   foreach my $file (getFiles($builddir, "\.pkg\$")) { unlink("$builddir/$file"); }

   foreach my $file (getFiles($builddir, "\.sis\$")) { unlink("$builddir/$file"); }

   exit;

}

# --------------------------------------------------------------------------

sub mtime($) {

    my ($file) = shift;

    my ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,

      $size,$atime,$mtime,$ctime,$blksize,$blocks) = stat($file);

    $mtime = 0 if ! defined( $mtime );

    return $mtime;

}

# --------------------------------------------------------------------------

# Return an array of files matching a regexp in a directory

sub getFiles($$) {

    my $dir = shift;

    my $regfiles = shift;

    my @files;

    if ( opendir DIR, $dir ) {

       @files = grep (/$regfiles/, readdir(DIR));

       closedir DIR;

    }

    return @files;

}

# --------------------------------------------------------------------------

# Edit a file

sub EditFile ($$) {

	my ($file, $coderef) = @_;

	local $_ = ReadFile($file);

	&$coderef();

	WriteFile($file, $_);

}

# --------------------------------------------------------------------------

# Read the contents of a file into a string and return it

sub ReadFile ($) {

	my ($file) = @_;

	open FILE, "<$file" or die "Can't read from $file: $!";

	local $/ = undef;

	my $data = <FILE>;

	close FILE;

	return $data;

}

# --------------------------------------------------------------------------

# Replace a file with a string

sub WriteFile ($$) {

	my ($file, $data) = @_;

	# Ensure directory exists

	if ($file =~ basename($1) && ! -e $1) {

		mkdir($1);

	}

	system("attrib -r $file");

	open FILE, ">$file" or die "Can't write to $file: $!";

	print FILE $data;

	close FILE;

}

# --------------------------------------------------------------------------

print "\nBuilding test executables for $platform $configuration configuration\n\n";

if ($platform =~ /armv5/i)

{

	mkdir("/epoc32/winscw/c/tswi/tsis/data/armv5/");

	my $testexeiby = "/epoc32/rom/include/tswiexes.iby";

	unlink $testexeiby;

	open(iby, ">> $testexeiby" ) || die "Could not open $testexeiby: $!";

}

mkdir($builddir);

print "Processing files in directory: $builddir\n\n";

MakeSISFiles($packagedir,"yes");

MakeSISFiles($non_iby_packagedir,"no");

# Copy emulator version of preinstalled exes to location script expects.

# They will be moved by the test script to the e: drive.

if ($platform =~/winscw/i)

	{

	mkdir("/epoc32/winscw/c/tswi/tuiscriptadaptors/data");

	copy("/epoc32/release/$platform/$configuration/console_app_longrun_forpackage.exe",

	     "/epoc32/winscw/c/tswi/tuiscriptadaptors/data/preinstalled_console_app.exe");

	copy("/epoc32/release/$platform/$configuration/runtestexe2_forpackage.exe",

	     "/epoc32/winscw/c/tswi/tuiscriptadaptors/data/preinstalled_runtestexe2.exe");

	copy("/epoc32/release/$platform/$configuration/runwait1.exe",

	     "/epoc32/winscw/c/tswi/tuiscriptadaptors/data/runwait1.exe");

	copy("/epoc32/release/$platform/$configuration/runwait2.exe",

	     "/epoc32/winscw/c/tswi/tuiscriptadaptors/data/runwait2.exe");

	copy("/epoc32/release/$platform/$configuration/runwait3.exe",

	     "/epoc32/winscw/c/tswi/tuiscriptadaptors/data/runwait3.exe");

	}

AddCustomSisFiles(\*iby, $platform);

sub MakeSISFiles($$)

  {

    my ($dir, $add_to_iby) = @_;

    foreach my $file ( getFiles( $dir, "\.pkg\$" ))

      {

	# Copy package files to builddir if not present or package more recent.

	# Some package files are re-written with platform, config and builddir.

	#

	if ( mtime("$dir/$file") > mtime("$builddir/$file") )

	{

		print "Copying $dir/$file to $builddir/$file and re-writing\n" if $opt{v};

		copy("$dir/$file", "$builddir/$file");

		# replace <PLATFORM> with the platform and <CFG> with the configuration

		EditFile("$builddir/$file" , sub { s/<PLATFORM>/$platform/gm;

						   s/<CONFIGURATION>/$configuration/gm;

						   s/<BUILD>/$builddir/gm; });

	}

	# Run makesis/signsis if needed on package files

	#

	$file =~ s/\.pkg//;

	if (    mtime("$builddir/$file.sis") < mtime("$builddir/$file.pkg")

	     || mtime("$builddir/$file.sis") < mtime("$cert_path/swi/test/testexes/certs/default.cer")

	     || mtime("$builddir/$file.sis") < mtime("certs/default.key")

	     || mtime("$builddir/$file.sis") < mtime($makesis)

	     || mtime("$builddir/$file.sis") < mtime($signsis))

	{

		# build sis file

		system("$makesis $builddir\\$file.pkg $builddir\\$file-tmp.sis");

		print ("$makesis $builddir\\$file.pkg $builddir\\$file-tmp.sis\n") if $opt{v};

		system("$signsis -s $builddir\\$file-tmp.sis $builddir\\$file.sis $cert_path\\swi\\test\\testexes\\certs\\default.cer certs\\default.key");

 		print ("$signsis -s $builddir\\$file-tmp.sis $builddir\\$file.sis $cert_path\\swi\\test\\testexes\\certs\\default.cer certs\\default.key\n") if $opt{v};

		print "\n" if $opt{v};

	} else {

		print ("$builddir/$file.sis is up-to-date\n");

	}

	# If the package file contains the string "CREATE_UNSIGNED_SIS"

	# copy the unsigned sis file too. Note that these SIS files are

	# not currently added to the ROM, since we can't change the

	# swipolicy file on the fly on the ROM.

	if (grep(/CREATE_UNSIGNED_SIS/, ReadFile("$builddir/$file.pkg")))

	{

		rename("$builddir/$file-tmp.sis", "$builddir/$file-unsigned.sis");

		AddIby(\*NULL, $builddir, $platform, "$file-unsigned");

	} else {

		unlink("$builddir/$file-tmp.sis");

	}

	if ($add_to_iby eq "yes")

	  {

	    AddIby(\*iby, $builddir, $platform, $file);

	  }

	elsif ($platform =~/winscw/i)

	  {

	    copy("$builddir/$file.sis", "/epoc32/winscw/c/tswi/tsis/data/$file.sis");

	  }

      }

  }

# Find all of the custom sis files for each platform and make sure they are exported

sub AddCustomSisFiles($$)

{

	my ($iby, $platform) = @_;

	my @sisFiles;

	opendir DIR, "custom/sis/$platform";

	@sisFiles = readdir DIR;

	closedir DIR;

	foreach my $sisFile (@sisFiles)

	{

		next unless $sisFile =~ /\.sis$/i;

		$sisFile =~ s/\.sis//g;

		AddIby($iby, "custom\\sis\\$platform", $platform, $sisFile);

	}

	# Special case for testsidcheck_ROM.exe

	# must be placed in \system\bin\ with other executables

	# must have a different filename so comparison is done by SID

	if ($platform =~ /armv5/i)

	{

		print $iby "file = ABI_DIR\\BUILD_DIR\\testsidcheck_ROM.exe	sys\\bin\\testsidcheckROM.exe\n";

	}

	if ($platform =~/winscw/i)

	{

		# copy the testsidcheck_ROM.exe into the Z:\\sys\\bin\\ directory

		copy("/epoc32/release/$platform/$configuration/testsidcheck_ROM.exe",

		     "/epoc32/release/$platform/$configuration/Z/sys/bin/testsidcheckROM.exe");

	}

}

sub AddIby($$$$)

{

	my ($iby, $builddir, $platform, $entry) = @_;

	if ($platform =~/winscw/i)

	{

		copy("$builddir/$entry.sis", "/epoc32/winscw/c/tswi/tsis/data/$entry.sis");

	}

	if ($platform =~ /armv5/i)

	{

		copy("$builddir/$entry.sis", "/epoc32/winscw/c/tswi/tsis/data/armv5/$entry.sis");

		print $iby "data = ZDRIVE\\tswi\\tsis\\data\\armv5\\$entry.sis \\tswi\\tsis\\data\\$entry.sis\n";

	}

}

sub AddIby2($$$)

{

	my ($iby, $platform, $entry) = @_;

	if ($platform =~ /armv5/i)

	{

	print $iby "data = ZDRIVE\\tswi\\tsis\\data\\armv5\\$entry \\tswi\\tsis\\data\\$entry\n";

	}

}

sub AddNormalFiles($)

{

	my ($iby) = @_;

	if ($platform =~ /armv5/i)

	{

	print $iby "#ifdef __SECURITY_NORMAL_SWICERTSTORE__\n";

	}

}

sub EndNormalFiles($)

{

	my ($iby) = @_;

	if ($platform =~ /armv5/i)

	{

	print $iby "#endif\n";

	}

}

# Keep original method names for ease of merging/compatibility

sub SignFile($$$$)  { SignFileLen(1, @_); }

sub SignFile_noiby($$$)  { SignFileLen_noiby(1, @_); }

sub SignFile2($$$$) { SignFileLen(2, @_); }

sub SignFile2_noiby($$$) { SignFileLen_noiby(2, @_); }

sub SignFileLen($$$$$)

{

	my ($len, $infile, $outfile, $signwith, $iby) = @_;

	my $certpath="$ENV{'SECURITYSOURCEDIR'}/installationservices/switestfw/testcertificates/swi/test/tsisfile/data/signedsis/";			

 	my $keypath = "../tsisfile/data/signedsis";

	my $sispath="";

	if ($platform =~ /armv5/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data\\armv5";

		}

	if ($platform =~/winscw/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data";

		}

	my $type="rsa";

	if ($signwith =~ /DSA/i) {

		$type="dsa";

	}

	my $pemfile = "$certpath\\$signwith\\cert_chain_$type\_len$len\\chain_$type\_len$len.cert.pem ";

	my $keyfile = "$keypath\\$signwith\\cert_chain_$type\_len$len\\" . $type .  "$len.key";

	# If infile, keyfile, pemfile or signsis.exe is more recent than

	# outfile, or outfile is non-existent then sign the sis file.

	#

	if (   mtime("$sispath/$outfile") < mtime("$sispath/$infile")

	    || mtime("$sispath/$outfile") < mtime("$signsis")

	    || mtime("$sispath/$outfile") < mtime("$pemfile")

	    || mtime("$sispath/$outfile") < mtime("$keyfile")) {

		printf("\t$infile with $signwith to $outfile $pemfile $keyfile\n");

		my $cmd = "$signsis -s $sispath\\$infile $builddir\\$outfile $pemfile $keyfile";

		system($cmd);

		print "$cmd\n\n" if $opt{v};

		copy("$builddir\\$outfile", "$sispath\\$outfile");

	} else {

		print("$sispath/$outfile is up-to-date\n");

	}

	AddIby2($iby, $platform, $outfile);

}

sub SignFileLen_noiby($$$$)

{

	my ($len, $infile, $outfile, $signwith) = @_;

	my $certpath="$ENV{'SECURITYSOURCEDIR'}/installationservices/switestfw/testcertificates/swi/test/tsisfile/data/signedsis/";

	my $keypath="../tsisfile/data/signedsis";

	my $sispath="";

	if ($platform =~ /armv5/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data\\armv5";

		}

	if ($platform =~/winscw/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data";

		}

	my $type="rsa";

	if ($signwith =~ /DSA/i) {

		$type="dsa";

	}

	my $pemfile = "$certpath\\$signwith\\cert_chain_$type\_len$len\\chain_$type\_len$len.cert.pem ";

	my $keyfile = "$keypath\\$signwith\\cert_chain_$type\_len$len\\" . $type .  "$len.key";

	# If infile, keyfile, pemfile or signsis.exe is more recent than

	# outfile, or outfile is non-existent then sign the sis file.

	#

	if (   mtime("$sispath/$outfile") < mtime("$sispath/$infile")

	    || mtime("$sispath/$outfile") < mtime("$signsis")

	    || mtime("$sispath/$outfile") < mtime("$pemfile")

	    || mtime("$sispath/$outfile") < mtime("$keyfile")) {

		printf("\t$infile with $signwith to $outfile $pemfile $keyfile\n");

		my $cmd = "$signsis -s $sispath\\$infile $builddir\\$outfile $pemfile $keyfile";

		system($cmd);

		print "$cmd\n\n" if $opt{v};

		copy("$builddir\\$outfile", "$sispath\\$outfile");

	} else {

		print("$sispath/$outfile is up-to-date\n");

	}

}

sub SignFileWithSpecifiedCert($$$$$)

{

	my ($infile, $outfile, $signcert, $signkey, $iby) = @_;

	my $certpath="$ENV{'SECURITYSOURCEDIR'}/installationservices/switestfw/testcertificates/swi/test/";

 	my $keypath = "";

 	if ($signkey =~ /.pem$/)

 		{

 		$keypath = "$ENV{'SECURITYSOURCEDIR'}/installationservices/switestfw/testcertificates/swi/test/";

 		}

 	else

 	{

 		$keypath = "../tsisfile/data/signedsis";

 	}

	my $sispath="";

	if ($platform =~ /armv5/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data\\armv5";

		}

	if ($platform =~/winscw/i)

		{

		$sispath="\\epoc32\\winscw\\c\\tswi\\tsis\\data";

		}

	if (   mtime("$sispath/$outfile") < mtime("$sispath/$infile")

	    || mtime("$sispath/$outfile") < mtime("$signsis")

	    || mtime("$sispath/$outfile") < mtime("$keypath/$signkey")

	    || mtime("$sispath/$outfile") < mtime("$certpath/$signcert")) {

		printf("\t$infile with $signcert and $signkey to $outfile\n");

		my $cmd = "$signsis -s $sispath\\$infile $builddir\\$outfile $certpath$signcert $keypath\\$signkey";

		printf($cmd);

		system($cmd);

		print "$cmd\n\n" if $opt{v};

		copy("$builddir\\$outfile", "$sispath\\$outfile");

	} else {

		print("$sispath/$outfile is up-to-date\n");

	}

	AddIby2($iby, $platform, $outfile);

}

# Create SIS files that depend on signed versions of others

sub CreateEmbeddingSisFiles($$$$)

{

	my ($platform, $configuration, $platform, $builddir) = @_;

	my $packagedir = "embed";

	foreach my $file ( getFiles( $packagedir, "\.pkg\$" )) {

	# Copy package files to builddir if not present or package more recent.

	# Some package files are re-written with platform, config and builddir.

	#

	if ( mtime("$packagedir/$file") > mtime("$builddir/$file") )

	{

		print "Copying $packagedir/$file to $builddir/$file and re-writing\n" if $opt{v};

		copy("$packagedir/$file", "$builddir/$file");

		# replace <PLATFORM> with the platform and <CFG> with the configuration

		EditFile("$builddir/$file" , sub { s/<PLATFORM>/$platform/gm;

						   s/<CONFIGURATION>/$configuration/gm;

						   s/<BUILD>/$builddir/gm; });

	}

	# Run makesis/signsis if needed on package files

	#

	$file =~ s/\.pkg//;

	if (    mtime("$builddir/$file.sis") < mtime("$builddir/$file.pkg")

	     || mtime("$builddir/$file.sis") < mtime("$cert_path/swi/test/testexes/certs/default.cer")

	     || mtime("$builddir/$file.sis") < mtime("certs/default.key")

	     || mtime("$builddir/$file.sis") < mtime($makesis)

	     || mtime("$builddir/$file.sis") < mtime($signsis))

	{

		# build sis file

		# because of the way embedded package work, we'll have to change directory

		chdir($builddir);

		system("$makesis $file.pkg $file-tmp.sis");

		print ("$makesis $file.pkg $file-tmp.sis\n") if $opt{v};

		chdir("..");

		system("$signsis -s $builddir\\$file-tmp.sis $builddir\\$file.sis $cert_path\\swi\\test\\testexes\\certs\\default.cer certs\\default.key");

		print ("$signsis -s $builddir\\$file-tmp.sis $builddir\\$file.sis $cert_path\\swi\\test\\testexes\\certs\\default.cer certs\\default.key\n") if $opt{v};

		print "\n" if $opt{v};

	} else {

		print ("$builddir/$file.sis is up-to-date\n");

	}

	AddIby(\*iby, $builddir, $platform, $file);

}

}

#

# Sign the files as necessary for the following tests

#

printf("Signing files...\n");

#Tests:

#

#User:

#

#Do these three with grant user caps dialog response Yes/No

#	tusergrantable unsigned	-	should ask

# N/A

#	tusergrantable signed with SymbianTestDSACA - should ask

SignFile("tswiusergrantable.sis","tswiusergrantable_DSACA.sis","SymbianTestRootCADSA",\*iby);

#	tusergrantable signed with SymbianTestRSACA - should ask

SignFile("tswiusergrantable.sis","tswiusergrantable_RSACA.sis","SymbianTestRootCARSA",\*iby);

#tusergrantable signed with SymbianTestDSACA, SymbianTestRSACA - should pass

SignFile("tswiusergrantable_RSACA.sis","tswiusergrantable_RSACA_DSACA.sis","SymbianTestRootCADSA",\*iby);

#tusergrantable signed with SymbianTestDSACA, SymbianTestRSACA - used for mandatory testing

SignFile("tswiusergrantable_RSACA.sis","tswiusergrantable_RSACA_Root5.sis","Root5CA",\*iby);

#tusergrantable signed with SymbianTestDSACA, SymbianTestRSACA - used for mandatory testing

SignFile("tswiusergrantable_DSACA.sis","tswiusergrantable_DSACA_Root5.sis","Root5CA",\*iby);

#System:

#tswisystemcapability signed with Root5CA	-	Should pass