aura: Sanitize the lifetime of aura::Env instance.
[chromium-blink-merge.git] / url / url_canon_icu.cc
blob8a80d7109d9cc925090ee247ef17253eb53136bb
1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 // ICU integration functions.
7 #include <stdlib.h>
8 #include <string.h>
10 #include "base/lazy_instance.h"
11 #include "base/logging.h"
12 #include "third_party/icu/source/common/unicode/ucnv.h"
13 #include "third_party/icu/source/common/unicode/ucnv_cb.h"
14 #include "third_party/icu/source/common/unicode/uidna.h"
15 #include "url/url_canon_icu.h"
16 #include "url/url_canon_internal.h" // for _itoa_s
18 namespace url {
20 namespace {
22 // Called when converting a character that can not be represented, this will
23 // append an escaped version of the numerical character reference for that code
24 // point. It is of the form "&#1234;" and we will escape the non-digits to
25 // "%26%231234%3B". Why? This is what Netscape did back in the olden days.
26 void appendURLEscapedChar(const void* context,
27 UConverterFromUnicodeArgs* from_args,
28 const UChar* code_units,
29 int32_t length,
30 UChar32 code_point,
31 UConverterCallbackReason reason,
32 UErrorCode* err) {
33 if (reason == UCNV_UNASSIGNED) {
34 *err = U_ZERO_ERROR;
36 const static int prefix_len = 6;
37 const static char prefix[prefix_len + 1] = "%26%23"; // "&#" percent-escaped
38 ucnv_cbFromUWriteBytes(from_args, prefix, prefix_len, 0, err);
40 DCHECK(code_point < 0x110000);
41 char number[8]; // Max Unicode code point is 7 digits.
42 _itoa_s(code_point, number, 10);
43 int number_len = static_cast<int>(strlen(number));
44 ucnv_cbFromUWriteBytes(from_args, number, number_len, 0, err);
46 const static int postfix_len = 3;
47 const static char postfix[postfix_len + 1] = "%3B"; // ";" percent-escaped
48 ucnv_cbFromUWriteBytes(from_args, postfix, postfix_len, 0, err);
52 // A class for scoping the installation of the invalid character callback.
53 class AppendHandlerInstaller {
54 public:
55 // The owner of this object must ensure that the converter is alive for the
56 // duration of this object's lifetime.
57 AppendHandlerInstaller(UConverter* converter) : converter_(converter) {
58 UErrorCode err = U_ZERO_ERROR;
59 ucnv_setFromUCallBack(converter_, appendURLEscapedChar, 0,
60 &old_callback_, &old_context_, &err);
63 ~AppendHandlerInstaller() {
64 UErrorCode err = U_ZERO_ERROR;
65 ucnv_setFromUCallBack(converter_, old_callback_, old_context_, 0, 0, &err);
68 private:
69 UConverter* converter_;
71 UConverterFromUCallback old_callback_;
72 const void* old_context_;
75 // A wrapper to use LazyInstance<>::Leaky with ICU's UIDNA, a C pointer to
76 // a UTS46/IDNA 2008 handling object opened with uidna_openUTS46().
78 // We use UTS46 with BiDiCheck to migrate from IDNA 2003 (with unassigned
79 // code points allowed) to IDNA 2008 with
80 // the backward compatibility in mind. What it does:
82 // 1. Use the up-to-date Unicode data.
83 // 2. Define a case folding/mapping with the up-to-date Unicode data as
84 // in IDNA 2003.
85 // 3. Use transitional mechanism for 4 deviation characters (sharp-s,
86 // final sigma, ZWJ and ZWNJ) for now.
87 // 4. Continue to allow symbols and punctuations.
88 // 5. Apply new BiDi check rules more permissive than the IDNA 2003 BiDI rules.
89 // 6. Do not apply STD3 rules
90 // 7. Do not allow unassigned code points.
92 // It also closely matches what IE 10 does except for the BiDi check (
93 // http://goo.gl/3XBhqw ).
94 // See http://http://unicode.org/reports/tr46/ and references therein
95 // for more details.
96 struct UIDNAWrapper {
97 UIDNAWrapper() {
98 UErrorCode err = U_ZERO_ERROR;
99 // TODO(jungshik): Change options as different parties (browsers,
100 // registrars, search engines) converge toward a consensus.
101 value = uidna_openUTS46(UIDNA_CHECK_BIDI, &err);
102 if (U_FAILURE(err)) {
103 CHECK(false) << "failed to open UTS46 data with error: " << err;
104 value = NULL;
108 UIDNA* value;
111 } // namespace
113 ICUCharsetConverter::ICUCharsetConverter(UConverter* converter)
114 : converter_(converter) {
117 ICUCharsetConverter::~ICUCharsetConverter() {
120 void ICUCharsetConverter::ConvertFromUTF16(const base::char16* input,
121 int input_len,
122 CanonOutput* output) {
123 // Install our error handler. It will be called for character that can not
124 // be represented in the destination character set.
125 AppendHandlerInstaller handler(converter_);
127 int begin_offset = output->length();
128 int dest_capacity = output->capacity() - begin_offset;
129 output->set_length(output->length());
131 do {
132 UErrorCode err = U_ZERO_ERROR;
133 char* dest = &output->data()[begin_offset];
134 int required_capacity = ucnv_fromUChars(converter_, dest, dest_capacity,
135 input, input_len, &err);
136 if (err != U_BUFFER_OVERFLOW_ERROR) {
137 output->set_length(begin_offset + required_capacity);
138 return;
141 // Output didn't fit, expand
142 dest_capacity = required_capacity;
143 output->Resize(begin_offset + dest_capacity);
144 } while (true);
147 static base::LazyInstance<UIDNAWrapper>::Leaky
148 g_uidna = LAZY_INSTANCE_INITIALIZER;
150 // Converts the Unicode input representing a hostname to ASCII using IDN rules.
151 // The output must be ASCII, but is represented as wide characters.
153 // On success, the output will be filled with the ASCII host name and it will
154 // return true. Unlike most other canonicalization functions, this assumes that
155 // the output is empty. The beginning of the host will be at offset 0, and
156 // the length of the output will be set to the length of the new host name.
158 // On error, this will return false. The output in this case is undefined.
159 // TODO(jungshik): use UTF-8/ASCII version of nameToASCII.
160 // Change the function signature and callers accordingly to avoid unnecessary
161 // conversions in our code. In addition, consider using icu::IDNA's UTF-8/ASCII
162 // version with StringByteSink. That way, we can avoid C wrappers and additional
163 // string conversion.
164 bool IDNToASCII(const base::char16* src, int src_len, CanonOutputW* output) {
165 DCHECK(output->length() == 0); // Output buffer is assumed empty.
167 UIDNA* uidna = g_uidna.Get().value;
168 DCHECK(uidna != NULL);
169 while (true) {
170 UErrorCode err = U_ZERO_ERROR;
171 UIDNAInfo info = UIDNA_INFO_INITIALIZER;
172 int output_length = uidna_nameToASCII(uidna, src, src_len, output->data(),
173 output->capacity(), &info, &err);
174 if (U_SUCCESS(err) && info.errors == 0) {
175 output->set_length(output_length);
176 return true;
179 // TODO(jungshik): Look at info.errors to handle them case-by-case basis
180 // if necessary.
181 if (err != U_BUFFER_OVERFLOW_ERROR || info.errors != 0)
182 return false; // Unknown error, give up.
184 // Not enough room in our buffer, expand.
185 output->Resize(output_length);
189 } // namespace url