win32stm.cpp

#ifdef _WIN_ALL
// StreamName must include the leading ':'.
static bool IsNtfsProhibitedStream(const std::wstring &StreamName)
{
  // 2024.03.14: We replaced the predefined names check with simpler
  // "no more than a single colon" check. Second colon could be used to
  // define the type of alternate stream, but RAR archives work only with
  // data streams and do not store :$DATA type in archive. It is assumed.
  // So there is no legitimate use for stream type inside of archive,
  // but it can be abused to hide the actual file data in file::$DATA
  // or hide the actual MOTW data in Zone.Identifier:$DATA.
  uint ColonCount=0;
  for (wchar Ch:StreamName)
    if (Ch==':' && ++ColonCount>1)
      return true;
  return false;
/*
  const wchar *Reserved[]{
    L"::$ATTRIBUTE_LIST",L"::$BITMAP",L"::$DATA",L"::$EA",L"::$EA_INFORMATION",
    L"::$FILE_NAME",L"::$INDEX_ALLOCATION",L":$I30:$INDEX_ALLOCATION",
    L"::$INDEX_ROOT",L"::$LOGGED_UTILITY_STREAM",L":$EFS:$LOGGED_UTILITY_STREAM",
    L":$TXF_DATA:$LOGGED_UTILITY_STREAM",L"::$OBJECT_ID",L"::$REPARSE_POINT"
  };
  for (const wchar *Name : Reserved)
    if (wcsicomp(StreamName,Name)==0)
      return true;
  return false;
*/
}
#endif


#if !defined(SFX_MODULE) && defined(_WIN_ALL)
void ExtractStreams20(Archive &Arc,const std::wstring &FileName)
{
  if (Arc.BrokenHeader)
  {
    uiMsg(UIERROR_STREAMBROKEN,Arc.FileName,FileName);
    ErrHandler.SetErrorCode(RARX_CRC);
    return;
  }

  if (Arc.StreamHead.Method<0x31 || Arc.StreamHead.Method>0x35 || Arc.StreamHead.UnpVer>VER_PACK)
  {
    uiMsg(UIERROR_STREAMUNKNOWN,Arc.FileName,FileName);
    ErrHandler.SetErrorCode(RARX_WARNING);
    return;
  }

  std::wstring StreamName;
  CharToWide(Arc.StreamHead.StreamName,StreamName);

  if (StreamName[0]!=':')
  {
    uiMsg(UIERROR_STREAMBROKEN,Arc.FileName,FileName);
    ErrHandler.SetErrorCode(RARX_CRC);
    return;
  }

  // Convert single character names like f:stream to .\f:stream to
  // resolve the ambiguity with drive letters.
  std::wstring FullName=FileName.size()==1 ? L".\\"+FileName:FileName;
  FullName+=StreamName;

#ifdef PROPAGATE_MOTW
  // 2022.10.31: Can't easily read RAR 2.0 stream data here, so if we already
  // propagated the archive Zone.Identifier stream, also known as Mark of
  // the Web, to extracted file, we do not overwrite it here.
  if (Arc.Motw.IsNameConflicting(StreamName))
    return;

  // 2024.02.03: Prevent using Zone.Identifier:$DATA to overwrite Zone.Identifier
  // according to ZDI-CAN-23156 Trend Micro report.
  // 2024.03.14: Not needed after adding check for 2+ ':' in IsNtfsProhibitedStream(().
  // if (wcsnicomp(StreamName,L":Zone.Identifier:",17)==0)
  //  return;
#endif

  if (IsNtfsProhibitedStream(StreamName))
    return;

  FindData FD;
  bool HostFound=FindFile::FastFind(FileName,&FD);

  if ((FD.FileAttr & FILE_ATTRIBUTE_READONLY)!=0)
    SetFileAttr(FileName,FD.FileAttr & ~FILE_ATTRIBUTE_READONLY);

  File CurFile;
  if (CurFile.WCreate(FullName))
  {
    ComprDataIO DataIO;
    Unpack Unpack(&DataIO);
    Unpack.Init(0x10000,false);

    DataIO.SetPackedSizeToRead(Arc.StreamHead.DataSize);
    DataIO.EnableShowProgress(false);
    DataIO.SetFiles(&Arc,&CurFile);
    DataIO.UnpHash.Init(HASH_CRC32,1);
    Unpack.SetDestSize(Arc.StreamHead.UnpSize);
    Unpack.DoUnpack(Arc.StreamHead.UnpVer,false);

    if (Arc.StreamHead.StreamCRC!=DataIO.UnpHash.GetCRC32())
    {
      uiMsg(UIERROR_STREAMBROKEN,Arc.FileName,StreamName);
      ErrHandler.SetErrorCode(RARX_CRC);
    }
    else
      CurFile.Close();
  }

  // Restoring original file timestamps.
  File HostFile;
  if (HostFound && HostFile.Open(FileName,FMF_OPENSHARED|FMF_UPDATE))
    SetFileTime(HostFile.GetHandle(),&FD.ftCreationTime,&FD.ftLastAccessTime,
                &FD.ftLastWriteTime);

  // Restoring original file attributes.
  // Important if file was read only or did not have "Archive" attribute.
  if ((FD.FileAttr & FILE_ATTRIBUTE_READONLY)!=0)
    SetFileAttr(FileName,FD.FileAttr);
}
#endif


#ifdef _WIN_ALL
void ExtractStreams(Archive &Arc,const std::wstring &FileName,bool TestMode)
{
  std::wstring StreamName=GetStreamNameNTFS(Arc);
  if (StreamName[0]!=':')
  {
    uiMsg(UIERROR_STREAMBROKEN,Arc.FileName,FileName);
    ErrHandler.SetErrorCode(RARX_CRC);
    return;
  }

  if (TestMode)
  {
    File CurFile;
    Arc.ReadSubData(nullptr,&CurFile,true);
    return;
  }

  // Convert single character names like f:stream to .\f:stream to
  // resolve the ambiguity with drive letters.
  std::wstring FullName=FileName.size()==1 ? L".\\"+FileName:FileName;
  FullName+=StreamName;

#ifdef PROPAGATE_MOTW
  // 2022.10.31: If we already propagated the archive Zone.Identifier stream,
  // also known as Mark of the Web, to extracted file, we overwrite it here
  // only if file zone is stricter. Received a user request for such behavior.

  std::string ParsedMotw;
  if (Arc.Motw.IsNameConflicting(StreamName))
  {
    // Do not worry about excessive memory allocation, ReadSubData prevents it.
    std::vector<byte> FileMotw;
    if (!Arc.ReadSubData(&FileMotw,nullptr,false))
      return;
    ParsedMotw.assign(FileMotw.begin(),FileMotw.end());

    // We already set the archive stream. If file stream value isn't more
    // restricted, we do not want to write it over the existing archive stream.
    if (!Arc.Motw.IsFileStreamMoreSecure(ParsedMotw))
      return;
  }

  // 2024.02.03: Prevent using :Zone.Identifier:$DATA to overwrite :Zone.Identifier
  // according to ZDI-CAN-23156 Trend Micro report.
  // 2024.03.14: Not needed after adding check for 2+ ':' in IsNtfsProhibitedStream(().
  // if (wcsnicomp(StreamName,L":Zone.Identifier:",17)==0)
  //  return;
#endif

  if (IsNtfsProhibitedStream(StreamName))
    return;

  FindData FD;
  bool HostFound=FindFile::FastFind(FileName,&FD);

  if ((FD.FileAttr & FILE_ATTRIBUTE_READONLY)!=0)
    SetFileAttr(FileName,FD.FileAttr & ~FILE_ATTRIBUTE_READONLY);
  File CurFile;

  if (CurFile.WCreate(FullName))
  {
#ifdef PROPAGATE_MOTW
    if (!ParsedMotw.empty())
    {
      // The archive propagated security zone is either missing
      // or less strict than file one. Write the file security zone here.
      CurFile.Write(ParsedMotw.data(),ParsedMotw.size());
      CurFile.Close();
    }
    else
#endif
    if (Arc.ReadSubData(nullptr,&CurFile,false))
      CurFile.Close();
  }

  // Restoring original file timestamps.
  File HostFile;
  if (HostFound && HostFile.Open(FileName,FMF_OPENSHARED|FMF_UPDATE))
    SetFileTime(HostFile.GetHandle(),&FD.ftCreationTime,&FD.ftLastAccessTime,
                &FD.ftLastWriteTime);

  // Restoring original file attributes.
  // Important if file was read only or did not have "Archive" attribute.
  if ((FD.FileAttr & FILE_ATTRIBUTE_READONLY)!=0)
    SetFileAttr(FileName,FD.FileAttr);
}
#endif


std::wstring GetStreamNameNTFS(Archive &Arc)
{
  std::wstring Dest;
  if (Arc.Format==RARFMT15)
    Dest=RawToWide(Arc.SubHead.SubData);
  else
  {
    std::string Src(Arc.SubHead.SubData.begin(),Arc.SubHead.SubData.end());
    UtfToWide(Src.data(),Dest);
  }
  return Dest;
}