Check gradle-wrapper.jar

Signed-off-by: Snjezana Peco <snjezana.peco@redhat.com>

Author: snjeza

org.eclipse.jdt.ls.core/META-INF/MANIFEST.MF

@@ -37,7 +37,6 @@ Export-Package: org.eclipse.jdt.ls.core.internal;x-friends:="org.eclipse.jdt.ls.
  org.eclipse.jdt.ls.core.internal.commands;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.contentassist;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.corext.codemanipulation;x-friends:="org.eclipse.jdt.ls.tests",
- org.eclipse.jdt.ls.core.internal.corext.template.java;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.corext.dom;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corext.refactoring;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corext.refactoring.changes;x-internal:=true,
@@ -46,6 +45,7 @@ Export-Package: org.eclipse.jdt.ls.core.internal;x-friends:="org.eclipse.jdt.ls.
  org.eclipse.jdt.ls.core.internal.corext.refactoring.reorg;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corext.refactoring.tagging;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corext.refactoring.util;x-internal:=true,
+ org.eclipse.jdt.ls.core.internal.corext.template.java;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.corext.util;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corrections;x-internal:=true,
  org.eclipse.jdt.ls.core.internal.corrections.proposals;x-internal:=true,
@@ -56,9 +56,10 @@ Export-Package: org.eclipse.jdt.ls.core.internal;x-friends:="org.eclipse.jdt.ls.
  org.eclipse.jdt.ls.core.internal.lsp;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.managers;x-friends:="org.eclipse.jdt.ls.tests,org.eclipse.jdt.ls.tests.syntaxserver",
  org.eclipse.jdt.ls.core.internal.preferences;x-friends:="org.eclipse.jdt.ls.tests,org.eclipse.jdt.ls.tests.syntaxserver",
+ org.eclipse.jdt.ls.core.internal.semantictokens;x-friends:="org.eclipse.jdt.ls.tests",
  org.eclipse.jdt.ls.core.internal.syntaxserver;x-friends:="org.eclipse.jdt.ls.tests.syntaxserver",
  org.eclipse.jdt.ls.core.internal.text.correction;x-friends:="org.eclipse.jdt.ls.tests",
- org.eclipse.jdt.ls.core.internal.semantictokens;x-friends:="org.eclipse.jdt.ls.tests"
+ org.eclipse.jdt.ls.internal.gradle.checksums;x-friends:="org.eclipse.jdt.ls.tests"
 Bundle-ClassPath: lib/jsoup-1.9.2.jar,
  lib/remark-1.2.0.jar,
  .

org.eclipse.jdt.ls.core/src/org/eclipse/jdt/ls/core/internal/managers/GradleProjectImporter.java

@@ -14,8 +14,10 @@
 
 import java.io.File;
 import java.io.FilenameFilter;
+import java.io.IOException;
 import java.nio.file.Files;
 import java.nio.file.Path;
+import java.security.NoSuchAlgorithmException;
 import java.util.ArrayList;
 import java.util.Collection;
 import java.util.List;
@@ -39,6 +41,7 @@
 import org.eclipse.jdt.ls.core.internal.JavaLanguageServerPlugin;
 import org.eclipse.jdt.ls.core.internal.ProjectUtils;
 import org.eclipse.jdt.ls.core.internal.preferences.PreferenceManager;
+import org.eclipse.jdt.ls.internal.gradle.checksums.WrapperValidator;
 
 /**
  * @author Fred Bricon
@@ -105,7 +108,18 @@ private void importDir(Path rootFolder, IProgressMonitor monitor) {
 
 	public static GradleDistribution getGradleDistribution(Path rootFolder) {
 		if (JavaLanguageServerPlugin.getPreferencesManager() != null && JavaLanguageServerPlugin.getPreferencesManager().getPreferences().isGradleWrapperEnabled() && Files.exists(rootFolder.resolve("gradlew"))) {
-			return GradleDistribution.fromBuild();
+			WrapperValidator validator = new WrapperValidator();
+			try {
+				String result = validator.checkWrapper(rootFolder.toFile().getAbsolutePath());
+				if (result == null) {
+					WrapperGradleDistribution gradleDistribution = GradleDistribution.fromBuild();
+					return gradleDistribution;
+				} else {
+					JavaLanguageServerPlugin.logInfo(result);
+				}
+			} catch (NoSuchAlgorithmException | IOException e) {
+				JavaLanguageServerPlugin.logException(e.getMessage(), e);
+			}
 		}
 		if (JavaLanguageServerPlugin.getPreferencesManager() != null && JavaLanguageServerPlugin.getPreferencesManager().getPreferences().getGradleVersion() != null) {
 			List<GradleVersion> versions = CorePlugin.publishedGradleVersions().getVersions();

org.eclipse.jdt.ls.core/src/org/eclipse/jdt/ls/internal/gradle/checksums/HashProvider.java

@@ -0,0 +1,50 @@
+/*******************************************************************************
+ * Copyright (c) 2020 Red Hat Inc. and others.
+ * All rights reserved. This program and the accompanying materials
+ * are made available under the terms of the Eclipse Public License 2.0
+ * which accompanies this distribution, and is available at
+ * https://www.eclipse.org/legal/epl-2.0/
+ *
+ * SPDX-License-Identifier: EPL-2.0
+ *
+ * Contributors:
+ *     Red Hat Inc. - initial API and implementation
+ *******************************************************************************/
+package org.eclipse.jdt.ls.internal.gradle.checksums;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.security.DigestInputStream;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+
+public class HashProvider {
+
+	private final String algorithm;
+
+	public HashProvider() {
+		this("SHA-256");
+	}
+
+	public HashProvider(String algorithm) {
+		this.algorithm = algorithm;
+	}
+
+	public String getChecksum(File file) throws IOException, NoSuchAlgorithmException {
+		MessageDigest messageDigest = MessageDigest.getInstance(algorithm);
+		try (DigestInputStream dis = new DigestInputStream(new FileInputStream(file), messageDigest)) {
+			byte[] bytes = new byte[32768];
+			while (dis.read(bytes) != -1) {
+				;
+			}
+			messageDigest = dis.getMessageDigest();
+		}
+		StringBuilder result = new StringBuilder();
+		for (byte b : messageDigest.digest()) {
+			result.append(String.format("%02x", b));
+		}
+		return result.toString();
+	}
+
+}

org.eclipse.jdt.ls.core/src/org/eclipse/jdt/ls/internal/gradle/checksums/WrapperValidator.java

@@ -0,0 +1,97 @@
+/*******************************************************************************
+ * Copyright (c) 2020 Red Hat Inc. and others.
+ * All rights reserved. This program and the accompanying materials
+ * are made available under the terms of the Eclipse Public License 2.0
+ * which accompanies this distribution, and is available at
+ * https://www.eclipse.org/legal/epl-2.0/
+ *
+ * SPDX-License-Identifier: EPL-2.0
+ *
+ * Contributors:
+ *     Red Hat Inc. - initial API and implementation
+ *******************************************************************************/
+package org.eclipse.jdt.ls.internal.gradle.checksums;
+
+import java.io.BufferedReader;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.InputStreamReader;
+import java.net.URL;
+import java.net.URLConnection;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.security.NoSuchAlgorithmException;
+import java.util.Properties;
+import java.util.concurrent.TimeUnit;
+
+import org.eclipse.jdt.ls.core.internal.JavaLanguageServerPlugin;
+
+import com.google.common.cache.Cache;
+import com.google.common.cache.CacheBuilder;
+
+public class WrapperValidator {
+
+	private static final String DISTRIBUTION_URL = "distributionUrl";
+	private static final String GRADLE_WRAPPER_PROPERTIES = "gradle/wrapper/gradle-wrapper.properties";
+	private static final String GRADLE_WRAPPER_JAR = "gradle/wrapper/gradle-wrapper.jar";
+	private final boolean DISABLED = Boolean.getBoolean("gradle.wrapper.check.disabled");
+	private HashProvider hashProvider;
+	protected static Cache<String, String> downloadRequestsCache = CacheBuilder.newBuilder().maximumSize(100).expireAfterWrite(1, TimeUnit.HOURS).build();
+
+
+	public WrapperValidator() {
+		this(new HashProvider());
+	}
+
+	public WrapperValidator(HashProvider hashProvider) {
+		this.hashProvider = hashProvider;
+	}
+
+	public String checkWrapper(String baseDir) throws IOException, NoSuchAlgorithmException {
+		if (DISABLED) {
+			return null;
+		}
+		Path wrapperJar = Paths.get(baseDir, GRADLE_WRAPPER_JAR);
+		if (!wrapperJar.toFile().exists()) {
+			return wrapperJar.toString() + " doesn't exist.";
+		}
+		Path wrapperProperties = Paths.get(baseDir, GRADLE_WRAPPER_PROPERTIES);
+		if (!wrapperProperties.toFile().exists()) {
+			return wrapperProperties.toString() + " doesn't exist.";
+		}
+		try (InputStream is = new FileInputStream(wrapperProperties.toFile())) {
+			Properties props = new Properties();
+			props.load(is);
+			String distributionUrl = props.getProperty(DISTRIBUTION_URL);
+			if (distributionUrl == null) {
+				return "Invalid the distributionUrl property";
+			}
+			String sha256Url = distributionUrl.replace("-bin.zip","").replace("-all.zip", "") + "-wrapper.jar.sha256";
+			String checksum = hashProvider.getChecksum(wrapperJar.toFile());
+			String remoteChecksum = downloadRequestsCache.getIfPresent(sha256Url);
+			if (remoteChecksum == null) {
+				URL url = new URL(sha256Url);
+				BufferedReader in = null;
+				try {
+					URLConnection urlConnection = url.openConnection();
+					in = new BufferedReader(new InputStreamReader(urlConnection.getInputStream()));
+					remoteChecksum = in.readLine();
+					downloadRequestsCache.put(sha256Url, remoteChecksum);
+				} catch (IOException e) {
+					JavaLanguageServerPlugin.logException("sha256url='" + sha256Url + "'. You can try to add '-Dgradle.wrapper.check.disabled=true' to 'java.jdt.ls.vmargs'", e);
+				} finally {
+					if (in != null) {
+						in.close();
+					}
+				}
+			}
+			if (remoteChecksum != null && remoteChecksum.equals(checksum)) {
+				return null;
+			} else {
+				return "Invalid wrapper checksum: local=" + checksum + ",remote=" + remoteChecksum;
+			}
+		}
+	}
+
+}

org.eclipse.jdt.ls.tests/projects/gradle/gradle-11/gradle/wrapper/gradle-wrapper.jar

@@ -50,6 +50,7 @@
 import org.eclipse.jdt.ls.core.internal.WorkspaceHelper;
 import org.eclipse.jdt.ls.core.internal.managers.ProjectsManager.CHANGE_TYPE;
 import org.eclipse.jdt.ls.core.internal.preferences.Preferences.FeatureStatus;
+import org.eclipse.jdt.ls.internal.gradle.checksums.WrapperValidator;
 import org.junit.After;
 import org.junit.Test;
 import org.junit.runner.RunWith;
@@ -158,6 +159,14 @@ public void testDisableGradleWrapper() throws Exception {
 		}
 	}
 
+	@Test
+	public void testGradleWrapper() throws Exception {
+		File file = new File(getSourceProjectDirectory(), "gradle/simple-gradle");
+		assertTrue(file.isDirectory());
+		String result = new WrapperValidator().checkWrapper(file.getAbsolutePath());
+		assertNull(result);
+	}
+
 	@Test
 	public void testGradleUserHome() throws Exception {
 		String gradleUserHomePreference = JavaLanguageServerPlugin.getPreferencesManager().getPreferences().getGradleUserHome();