godot/drivers/windows/file_access_windows.cpp

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

462 lines
13 KiB
C++
Raw Normal View History

2014-02-10 01:10:30 +00:00
/**************************************************************************/
/* file_access_windows.cpp */
/**************************************************************************/
/* This file is part of: */
/* GODOT ENGINE */
/* https://godotengine.org */
/**************************************************************************/
/* Copyright (c) 2014-present Godot Engine contributors (see AUTHORS.md). */
/* Copyright (c) 2007-2014 Juan Linietsky, Ariel Manzur. */
/* */
/* Permission is hereby granted, free of charge, to any person obtaining */
/* a copy of this software and associated documentation files (the */
/* "Software"), to deal in the Software without restriction, including */
/* without limitation the rights to use, copy, modify, merge, publish, */
/* distribute, sublicense, and/or sell copies of the Software, and to */
/* permit persons to whom the Software is furnished to do so, subject to */
/* the following conditions: */
/* */
/* The above copyright notice and this permission notice shall be */
/* included in all copies or substantial portions of the Software. */
/* */
/* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, */
/* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF */
/* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. */
/* IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY */
/* CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, */
/* TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE */
/* SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */
/**************************************************************************/
2014-02-10 01:10:30 +00:00
#ifdef WINDOWS_ENABLED
#include "file_access_windows.h"
#include "core/os/os.h"
#include "core/string/print_string.h"
#include <share.h> // _SH_DENYNO
#include <shlwapi.h>
2021-09-23 06:56:12 +00:00
#define WIN32_LEAN_AND_MEAN
#include <windows.h>
2014-02-10 01:10:30 +00:00
#include <errno.h>
2014-02-10 01:10:30 +00:00
#include <sys/stat.h>
#include <sys/types.h>
#include <tchar.h>
#include <wchar.h>
2014-02-10 01:10:30 +00:00
#ifdef _MSC_VER
#define S_ISREG(m) ((m)&_S_IFREG)
#endif
void FileAccessWindows::check_errors() const {
ERR_FAIL_NULL(f);
2014-02-10 01:10:30 +00:00
if (feof(f)) {
2017-01-14 17:03:38 +00:00
last_error = ERR_FILE_EOF;
2014-02-10 01:10:30 +00:00
}
}
bool FileAccessWindows::is_path_invalid(const String &p_path) {
// Check for invalid operating system file.
String fname = p_path;
int dot = fname.find(".");
if (dot != -1) {
fname = fname.substr(0, dot);
}
fname = fname.to_lower();
return invalid_files.has(fname);
}
String FileAccessWindows::fix_path(const String &p_path) const {
String r_path = FileAccess::fix_path(p_path);
if (r_path.is_absolute_path() && !r_path.is_network_share_path() && r_path.length() > MAX_PATH) {
r_path = "\\\\?\\" + r_path.replace("/", "\\");
}
return r_path;
}
Error FileAccessWindows::open_internal(const String &p_path, int p_mode_flags) {
if (is_path_invalid(p_path)) {
#ifdef DEBUG_ENABLED
if (p_mode_flags != READ) {
WARN_PRINT("The path :" + p_path + " is a reserved Windows system pipe, so it can't be used for creating files.");
}
#endif
return ERR_INVALID_PARAMETER;
}
_close();
path_src = p_path;
path = fix_path(p_path);
2014-02-10 01:10:30 +00:00
const WCHAR *mode_string;
2014-02-10 01:10:30 +00:00
if (p_mode_flags == READ) {
2014-02-10 01:10:30 +00:00
mode_string = L"rb";
} else if (p_mode_flags == WRITE) {
2014-02-10 01:10:30 +00:00
mode_string = L"wb";
} else if (p_mode_flags == READ_WRITE) {
mode_string = L"rb+";
} else if (p_mode_flags == WRITE_READ) {
mode_string = L"wb+";
} else {
2014-02-10 01:10:30 +00:00
return ERR_INVALID_PARAMETER;
}
2014-02-10 01:10:30 +00:00
/* Pretty much every implementation that uses fopen as primary
backend supports utf8 encoding. */
2014-02-10 01:10:30 +00:00
struct _stat st;
if (_wstat((LPCWSTR)(path.utf16().get_data()), &st) == 0) {
if (!S_ISREG(st.st_mode)) {
2014-02-10 01:10:30 +00:00
return ERR_FILE_CANT_OPEN;
}
}
2014-02-10 01:10:30 +00:00
#ifdef TOOLS_ENABLED
// Windows is case insensitive, but all other platforms are sensitive to it
// To ease cross-platform development, we issue a warning if users try to access
// a file using the wrong case (which *works* on Windows, but won't on other
// platforms).
if (p_mode_flags == READ) {
WIN32_FIND_DATAW d;
HANDLE fnd = FindFirstFileW((LPCWSTR)(path.utf16().get_data()), &d);
if (fnd != INVALID_HANDLE_VALUE) {
String fname = String::utf16((const char16_t *)(d.cFileName));
if (!fname.is_empty()) {
String base_file = path.get_file();
if (base_file != fname && base_file.findn(fname) == 0) {
2019-11-07 08:44:15 +00:00
WARN_PRINT("Case mismatch opening requested file '" + base_file + "', stored as '" + fname + "' in the filesystem. This file will not open when exported to other case-sensitive platforms.");
}
}
FindClose(fnd);
}
}
#endif
if (is_backup_save_enabled() && p_mode_flags == WRITE) {
save_path = path;
// Create a temporary file in the same directory as the target file.
WCHAR tmpFileName[MAX_PATH];
if (GetTempFileNameW((LPCWSTR)(path.get_base_dir().utf16().get_data()), (LPCWSTR)(path.get_file().utf16().get_data()), 0, tmpFileName) == 0) {
last_error = ERR_FILE_CANT_OPEN;
return last_error;
}
path = tmpFileName;
2014-02-10 01:10:30 +00:00
}
f = _wfsopen((LPCWSTR)(path.utf16().get_data()), mode_string, is_backup_save_enabled() ? _SH_SECURE : _SH_DENYNO);
2014-02-10 01:10:30 +00:00
2020-04-01 23:20:12 +00:00
if (f == nullptr) {
Fix Windows platform file access This restores Windows platform file handling back to open files non-exlusively by default, as was the case before October 2018. (See https://github.com/godotengine/godot/commit/b902a2f2a7438810cdcb053568ed5c27089b1e8a) Back then, while fixing warnings for MSVC, the function used for opening files was changed from _wfopen() to _wfopen_s() as suggsted by the warning C4996. ("This function may be unsafe, consider using _wfopen_s instead.") This new function 1. did parameter validation and thus avoided some possible security issues due to nil pointers or wrongly terminated strings 2. it also changed the default file sharing for opened files from _SH_DENYNO (which was the implicit default for the previous _wfopen()) to _SH_SECURE. _SH_DENYNO means every opened file could be opened by other calls (like is the default on other operating systems). _SH_SECURE means if the file is opened with READ access, others can still read the same file, but if it is opened with WRITE access, others can't open it at all, not even to read. This led to rarely occuring bugs on Windows, i.e. due to random access by Antivirus processes, or Godot/Windows not closing a file handle fast enough while trying to open it again elsewhere (i.e. project.godot, instead showing the Project manager, or saving shaders/debugging the game). What this PR does it change the file access to a third method, _wfsopen(). This is still secure, doing parameter validation and thus avoids the warning, but it allows us to actually SET the file sharing parameter. And we set it to _SH_DENYNO, as it was implicitely before the change. (And as it currently is on all non-Windows platforms, where file sharing restrictions don't exist by default.) Warning C4996 should really have been pointing this out. It should've been _wfsopen() all along. Let's hope this banishes those annoying, rare errors for all eternity. Fixes #28036.
2021-08-09 09:40:13 +00:00
switch (errno) {
case ENOENT: {
last_error = ERR_FILE_NOT_FOUND;
} break;
default: {
last_error = ERR_FILE_CANT_OPEN;
} break;
}
return last_error;
2014-02-10 01:10:30 +00:00
} else {
last_error = OK;
flags = p_mode_flags;
return OK;
}
}
void FileAccessWindows::_close() {
if (!f) {
2014-02-10 01:10:30 +00:00
return;
}
2014-02-10 01:10:30 +00:00
fclose(f);
2020-04-01 23:20:12 +00:00
f = nullptr;
2014-02-10 01:10:30 +00:00
if (!save_path.is_empty()) {
2023-08-25 16:28:35 +00:00
// This workaround of trying multiple times is added to deal with paranoid Windows
// antiviruses that love reading just written files even if they are not executable, thus
// locking the file and preventing renaming from happening.
bool rename_error = true;
2023-08-25 16:28:35 +00:00
const Char16String &path_utf16 = path.utf16();
const Char16String &save_path_utf16 = save_path.utf16();
for (int i = 0; i < 1000; i++) {
if (ReplaceFileW((LPCWSTR)(save_path_utf16.get_data()), (LPCWSTR)(path_utf16.get_data()), nullptr, REPLACEFILE_IGNORE_MERGE_ERRORS | REPLACEFILE_IGNORE_ACL_ERRORS, nullptr, nullptr)) {
rename_error = false;
} else {
2023-08-25 16:28:35 +00:00
// Either the target exists and is locked (temporarily, hopefully)
// or it doesn't exist; let's assume the latter before re-trying.
rename_error = _wrename((LPCWSTR)(path_utf16.get_data()), (LPCWSTR)(save_path_utf16.get_data())) != 0;
}
2023-08-25 16:28:35 +00:00
if (!rename_error) {
break;
}
2023-08-25 16:28:35 +00:00
OS::get_singleton()->delay_usec(1000);
}
if (rename_error) {
if (close_fail_notify) {
close_fail_notify(save_path);
}
}
save_path = "";
ERR_FAIL_COND_MSG(rename_error, "Safe save failed. This may be a permissions problem, but also may happen because you are running a paranoid antivirus. If this is the case, please switch to Windows Defender or disable the 'safe save' option in editor settings. This makes it work, but increases the risk of file corruption in a crash.");
2014-02-10 01:10:30 +00:00
}
}
String FileAccessWindows::get_path() const {
return path_src;
}
String FileAccessWindows::get_path_absolute() const {
return path;
}
2014-02-10 01:10:30 +00:00
bool FileAccessWindows::is_open() const {
2020-04-01 23:20:12 +00:00
return (f != nullptr);
2014-02-10 01:10:30 +00:00
}
void FileAccessWindows::seek(uint64_t p_position) {
ERR_FAIL_NULL(f);
2014-02-10 01:10:30 +00:00
last_error = OK;
if (_fseeki64(f, p_position, SEEK_SET)) {
2014-02-10 01:10:30 +00:00
check_errors();
}
prev_op = 0;
2014-02-10 01:10:30 +00:00
}
2014-02-10 01:10:30 +00:00
void FileAccessWindows::seek_end(int64_t p_position) {
ERR_FAIL_NULL(f);
if (_fseeki64(f, p_position, SEEK_END)) {
2014-02-10 01:10:30 +00:00
check_errors();
}
prev_op = 0;
2014-02-10 01:10:30 +00:00
}
uint64_t FileAccessWindows::get_position() const {
int64_t aux_position = _ftelli64(f);
if (aux_position < 0) {
2014-02-10 01:10:30 +00:00
check_errors();
}
2014-02-10 01:10:30 +00:00
return aux_position;
}
2021-05-25 06:58:49 +00:00
uint64_t FileAccessWindows::get_length() const {
ERR_FAIL_NULL_V(f, 0);
2014-02-10 01:10:30 +00:00
uint64_t pos = get_position();
_fseeki64(f, 0, SEEK_END);
uint64_t size = get_position();
_fseeki64(f, pos, SEEK_SET);
2014-02-10 01:10:30 +00:00
return size;
}
bool FileAccessWindows::eof_reached() const {
check_errors();
return last_error == ERR_FILE_EOF;
}
uint8_t FileAccessWindows::get_8() const {
ERR_FAIL_NULL_V(f, 0);
if (flags == READ_WRITE || flags == WRITE_READ) {
if (prev_op == WRITE) {
fflush(f);
}
prev_op = READ;
}
2014-02-10 01:10:30 +00:00
uint8_t b;
if (fread(&b, 1, 1, f) == 0) {
check_errors();
b = '\0';
}
2014-02-10 01:10:30 +00:00
return b;
}
uint64_t FileAccessWindows::get_buffer(uint8_t *p_dst, uint64_t p_length) const {
ERR_FAIL_COND_V(!p_dst && p_length > 0, -1);
ERR_FAIL_NULL_V(f, -1);
if (flags == READ_WRITE || flags == WRITE_READ) {
if (prev_op == WRITE) {
fflush(f);
}
prev_op = READ;
}
uint64_t read = fread(p_dst, 1, p_length, f);
2014-02-10 01:10:30 +00:00
check_errors();
return read;
}
2014-02-10 01:10:30 +00:00
Error FileAccessWindows::get_error() const {
return last_error;
}
void FileAccessWindows::flush() {
ERR_FAIL_NULL(f);
fflush(f);
if (prev_op == WRITE) {
prev_op = 0;
}
}
2014-02-10 01:10:30 +00:00
void FileAccessWindows::store_8(uint8_t p_dest) {
ERR_FAIL_NULL(f);
if (flags == READ_WRITE || flags == WRITE_READ) {
if (prev_op == READ) {
if (last_error != ERR_FILE_EOF) {
fseek(f, 0, SEEK_CUR);
}
}
prev_op = WRITE;
}
2014-02-10 01:10:30 +00:00
fwrite(&p_dest, 1, 1, f);
}
void FileAccessWindows::store_buffer(const uint8_t *p_src, uint64_t p_length) {
ERR_FAIL_NULL(f);
ERR_FAIL_COND(!p_src && p_length > 0);
if (flags == READ_WRITE || flags == WRITE_READ) {
if (prev_op == READ) {
if (last_error != ERR_FILE_EOF) {
fseek(f, 0, SEEK_CUR);
}
}
prev_op = WRITE;
}
ERR_FAIL_COND(fwrite(p_src, 1, p_length, f) != (size_t)p_length);
}
2014-02-10 01:10:30 +00:00
bool FileAccessWindows::file_exists(const String &p_name) {
if (is_path_invalid(p_name)) {
return false;
}
2014-02-10 01:10:30 +00:00
String filename = fix_path(p_name);
Fix Windows platform file access This restores Windows platform file handling back to open files non-exlusively by default, as was the case before October 2018. (See https://github.com/godotengine/godot/commit/b902a2f2a7438810cdcb053568ed5c27089b1e8a) Back then, while fixing warnings for MSVC, the function used for opening files was changed from _wfopen() to _wfopen_s() as suggsted by the warning C4996. ("This function may be unsafe, consider using _wfopen_s instead.") This new function 1. did parameter validation and thus avoided some possible security issues due to nil pointers or wrongly terminated strings 2. it also changed the default file sharing for opened files from _SH_DENYNO (which was the implicit default for the previous _wfopen()) to _SH_SECURE. _SH_DENYNO means every opened file could be opened by other calls (like is the default on other operating systems). _SH_SECURE means if the file is opened with READ access, others can still read the same file, but if it is opened with WRITE access, others can't open it at all, not even to read. This led to rarely occuring bugs on Windows, i.e. due to random access by Antivirus processes, or Godot/Windows not closing a file handle fast enough while trying to open it again elsewhere (i.e. project.godot, instead showing the Project manager, or saving shaders/debugging the game). What this PR does it change the file access to a third method, _wfsopen(). This is still secure, doing parameter validation and thus avoids the warning, but it allows us to actually SET the file sharing parameter. And we set it to _SH_DENYNO, as it was implicitely before the change. (And as it currently is on all non-Windows platforms, where file sharing restrictions don't exist by default.) Warning C4996 should really have been pointing this out. It should've been _wfsopen() all along. Let's hope this banishes those annoying, rare errors for all eternity. Fixes #28036.
2021-08-09 09:40:13 +00:00
FILE *g = _wfsopen((LPCWSTR)(filename.utf16().get_data()), L"rb", _SH_DENYNO);
2020-04-01 23:20:12 +00:00
if (g == nullptr) {
2014-02-10 01:10:30 +00:00
return false;
} else {
fclose(g);
return true;
}
}
uint64_t FileAccessWindows::_get_modified_time(const String &p_file) {
if (is_path_invalid(p_file)) {
return 0;
}
2014-02-10 01:10:30 +00:00
String file = fix_path(p_file);
if (file.ends_with("/") && file != "/") {
2014-02-10 01:10:30 +00:00
file = file.substr(0, file.length() - 1);
}
2014-02-10 01:10:30 +00:00
struct _stat st;
int rv = _wstat((LPCWSTR)(file.utf16().get_data()), &st);
2014-02-10 01:10:30 +00:00
if (rv == 0) {
return st.st_mtime;
} else {
print_verbose("Failed to get modified time for: " + p_file + "");
return 0;
2014-02-10 01:10:30 +00:00
}
}
2014-02-10 01:10:30 +00:00
BitField<FileAccess::UnixPermissionFlags> FileAccessWindows::_get_unix_permissions(const String &p_file) {
return 0;
}
Error FileAccessWindows::_set_unix_permissions(const String &p_file, BitField<FileAccess::UnixPermissionFlags> p_permissions) {
return ERR_UNAVAILABLE;
}
bool FileAccessWindows::_get_hidden_attribute(const String &p_file) {
String file = fix_path(p_file);
DWORD attrib = GetFileAttributesW((LPCWSTR)file.utf16().get_data());
ERR_FAIL_COND_V_MSG(attrib == INVALID_FILE_ATTRIBUTES, false, "Failed to get attributes for: " + p_file);
return (attrib & FILE_ATTRIBUTE_HIDDEN);
}
Error FileAccessWindows::_set_hidden_attribute(const String &p_file, bool p_hidden) {
String file = fix_path(p_file);
DWORD attrib = GetFileAttributesW((LPCWSTR)file.utf16().get_data());
ERR_FAIL_COND_V_MSG(attrib == INVALID_FILE_ATTRIBUTES, FAILED, "Failed to get attributes for: " + p_file);
BOOL ok;
if (p_hidden) {
ok = SetFileAttributesW((LPCWSTR)file.utf16().get_data(), attrib | FILE_ATTRIBUTE_HIDDEN);
} else {
ok = SetFileAttributesW((LPCWSTR)file.utf16().get_data(), attrib & ~FILE_ATTRIBUTE_HIDDEN);
}
ERR_FAIL_COND_V_MSG(!ok, FAILED, "Failed to set attributes for: " + p_file);
return OK;
}
bool FileAccessWindows::_get_read_only_attribute(const String &p_file) {
String file = fix_path(p_file);
DWORD attrib = GetFileAttributesW((LPCWSTR)file.utf16().get_data());
ERR_FAIL_COND_V_MSG(attrib == INVALID_FILE_ATTRIBUTES, false, "Failed to get attributes for: " + p_file);
return (attrib & FILE_ATTRIBUTE_READONLY);
}
Error FileAccessWindows::_set_read_only_attribute(const String &p_file, bool p_ro) {
String file = fix_path(p_file);
DWORD attrib = GetFileAttributesW((LPCWSTR)file.utf16().get_data());
ERR_FAIL_COND_V_MSG(attrib == INVALID_FILE_ATTRIBUTES, FAILED, "Failed to get attributes for: " + p_file);
BOOL ok;
if (p_ro) {
ok = SetFileAttributesW((LPCWSTR)file.utf16().get_data(), attrib | FILE_ATTRIBUTE_READONLY);
} else {
ok = SetFileAttributesW((LPCWSTR)file.utf16().get_data(), attrib & ~FILE_ATTRIBUTE_READONLY);
}
ERR_FAIL_COND_V_MSG(!ok, FAILED, "Failed to set attributes for: " + p_file);
return OK;
}
2023-02-16 13:25:32 +00:00
void FileAccessWindows::close() {
_close();
}
2014-02-10 01:10:30 +00:00
FileAccessWindows::~FileAccessWindows() {
_close();
2014-02-10 01:10:30 +00:00
}
HashSet<String> FileAccessWindows::invalid_files;
void FileAccessWindows::initialize() {
static const char *reserved_files[]{
"con", "prn", "aux", "nul", "com0", "com1", "com2", "com3", "com4", "com5", "com6", "com7", "com8", "com9", "lpt0", "lpt1", "lpt2", "lpt3", "lpt4", "lpt5", "lpt6", "lpt7", "lpt8", "lpt9", nullptr
};
int reserved_file_index = 0;
while (reserved_files[reserved_file_index] != nullptr) {
invalid_files.insert(reserved_files[reserved_file_index]);
reserved_file_index++;
}
}
2023-02-16 13:25:32 +00:00
void FileAccessWindows::finalize() {
invalid_files.clear();
}
#endif // WINDOWS_ENABLED