/*

 * Copyright 2022 Richard Hughes <richard@hughsie.com>

 *

 * SPDX-License-Identifier: LGPL-2.1-or-later

 */

#define G_LOG_DOMAIN "FuSecurityAttr"

#include "config.h"

#include "fwupd-security-attr-private.h"

#include "fu-security-attr.h"

#include "fu-version-common.h"

typedef struct {

  FuContext *ctx;

} FuSecurityAttrPrivate;

G_DEFINE_TYPE_WITH_PRIVATE(FuSecurityAttr, fu_security_attr, FWUPD_TYPE_SECURITY_ATTR)

#define GET_PRIVATE(o) (fu_security_attr_get_instance_private(o))

/**

 * fu_security_attr_check_fwupd_version:

 * @self: a #FuSecurityAttr

 * @fwupd_version: a fwupd version, e.g. `2.0.7`

 *

 * Checks if this attribute was available in a given fwupd release.

 *

 * If @fwupd_version is %NULL then expect %TRUE.

 *

 * Returns: %TRUE if the fwupd release contained this attribute

 *

 * Since: 2.0.7

 **/

gboolean

fu_security_attr_check_fwupd_version(FuSecurityAttr *self, const gchar *fwupd_version)

{

  g_return_val_if_fail(FU_IS_SECURITY_ATTR(self), FALSE);

  if (fwupd_version == NULL)

    return TRUE;

  if (fu_security_attr_get_fwupd_version(self) == NULL)

    return TRUE;

  return fu_version_compare(fwupd_version,

          fu_security_attr_get_fwupd_version(self),

          FWUPD_VERSION_FORMAT_UNKNOWN) >= 0;

}

/**

 * fu_security_attr_add_bios_target_value:

 * @self: a #FuSecurityAttr

 * @id: a #FwupdBiosSetting ID or name

 * @needle: The substring of a target value

 *

 * Checks all configured possible values of an enumeration attribute and

 * if any match @needle then set as the target value.

 *

 * Since: 1.8.4

 **/

void

fu_security_attr_add_bios_target_value(FuSecurityAttr *self, const gchar *id, const gchar *needle)

{

  FuSecurityAttrPrivate *priv = GET_PRIVATE(self);

  FwupdBiosSetting *bios_setting;

  GPtrArray *values;

  const gchar *current;

  bios_setting = fu_context_get_bios_setting(priv->ctx, id);

  if (bios_setting == NULL)

    return;

  current = fwupd_bios_setting_get_current_value(bios_setting);

  fu_security_attr_set_bios_setting_id(self, fwupd_bios_setting_get_id(bios_setting));

  fu_security_attr_set_bios_setting_current_value(self, current);

  if (fwupd_bios_setting_get_kind(bios_setting) != FWUPD_BIOS_SETTING_KIND_ENUMERATION)

    return;

  if (fwupd_bios_setting_get_read_only(bios_setting))

    return;

  values = fwupd_bios_setting_get_possible_values(bios_setting);

  for (guint i = 0; i < values->len; i++) {

    const gchar *possible = g_ptr_array_index(values, i);

    g_autofree gchar *lower = g_utf8_strdown(possible, -1);

    if (g_strrstr(lower, needle)) {

      fu_security_attr_set_bios_setting_target_value(self, possible);

      /* this is built-in to the engine */

      if (g_strcmp0(possible, current) != 0) {

        fu_security_attr_add_flag(self, FWUPD_SECURITY_ATTR_FLAG_CAN_FIX);

        fu_security_attr_add_flag(self, FWUPD_SECURITY_ATTR_FLAG_CAN_UNDO);

      }

      return;

    }

  }

}

static FuContext *

fu_security_attr_get_context(FuSecurityAttr *self)

{

  FuSecurityAttrPrivate *priv = GET_PRIVATE(self);

  g_return_val_if_fail(FU_IS_SECURITY_ATTR(self), NULL);

  return priv->ctx;

}

static void

fu_security_attr_set_context(FuSecurityAttr *self, FuContext *ctx)

{

  FuSecurityAttrPrivate *priv = GET_PRIVATE(self);

  g_return_if_fail(FU_IS_SECURITY_ATTR(self));

  g_return_if_fail(FU_IS_CONTEXT(ctx));

  g_set_object(&priv->ctx, ctx);

}

/**

 * fu_security_attr_copy:

 * @donor: a #FuSecurityAttr

 *

 * Makes a full (deep) copy of a security attribute.

 *

 * Returns: (transfer full): a #FuSecurityAttr

 *

 * Since: 2.1.8

 **/

FuSecurityAttr *

fu_security_attr_copy(FuSecurityAttr *donor)

{

  g_autoptr(FuSecurityAttr) self = g_object_new(FU_TYPE_SECURITY_ATTR, NULL);

  fu_security_attr_set_context(self, fu_security_attr_get_context(donor));

  fwupd_security_attr_incorporate(FWUPD_SECURITY_ATTR(self), FWUPD_SECURITY_ATTR(donor));

  fwupd_security_attr_set_created(

      FWUPD_SECURITY_ATTR(self),

      fwupd_security_attr_get_created(FWUPD_SECURITY_ATTR(donor)));

  return g_steal_pointer(&self);

}

static void

fu_security_attr_init(FuSecurityAttr *self)

{

}

static void

fu_security_attr_dispose(GObject *object)

{

  FuSecurityAttr *self = FU_SECURITY_ATTR(object);

  FuSecurityAttrPrivate *priv = GET_PRIVATE(self);

  g_clear_object(&priv->ctx);

  G_OBJECT_CLASS(fu_security_attr_parent_class)->dispose(object);

}

static void

fu_security_attr_class_init(FuSecurityAttrClass *klass)

{

  GObjectClass *object_class = G_OBJECT_CLASS(klass);

  object_class->dispose = fu_security_attr_dispose;

}

/**

 * fu_security_attr_new:

 * @ctx: a #FuContext

 * @appstream_id: (nullable): the AppStream component ID, e.g. `com.intel.BiosGuard`

 *

 * Creates a new #FuSecurityAttr with context set.

 *

 * Returns: (transfer full): a #FuSecurityAttr

 *

 * Since: 1.8.4

 **/

FuSecurityAttr *

fu_security_attr_new(FuContext *ctx, const gchar *appstream_id)

{

  g_autoptr(FuSecurityAttr) self = g_object_new(FU_TYPE_SECURITY_ATTR, NULL);

  g_return_val_if_fail(FU_IS_CONTEXT(ctx), NULL);

  if (appstream_id != NULL)

    fu_security_attr_set_appstream_id(FWUPD_SECURITY_ATTR(self), appstream_id);

  fu_security_attr_set_context(self, ctx);

  return g_steal_pointer(&self);

}