1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318
//! An Office VBA project parser written in 100% safe Rust. //! //! This is a (partial) implementation of the [\[MS-OVBA\]: Office VBA File Format //! Structure][MS-OVBA] protocol (Revision 9.1, published 2020-02-19). //! //! The main entry point into the API is the [`Project`] type, returned by the //! [`open_project`] function. //! //! # Usage //! //! Opening a project: //! //! ```rust,no_run //! let data = std::fs::read("vbaProject.bin")?; //! let project = ovba::open_project(data)?; //! # Ok::<(), ovba::Error>(()) //! ``` //! //! Listing all CFB entries: //! //! ```rust,no_run //! let data = std::fs::read("vbaProject.bin")?; //! let project = ovba::open_project(data)?; //! for (name, path) in &project.list()? { //! println!(r#"Name: "{}"; Path: "{}""#, name, path); //! } //! # Ok::<(), ovba::Error>(()) //! ``` //! //! A more complete example that dumps an entire VBA project's source code: //! //! ```rust,no_run //! let data = std::fs::read("vbaProject.bin")?; //! let project = ovba::open_project(data)?; //! //! for module in &project.modules { //! let path = format!("/VBA\\{}", &module.stream_name); //! let offset = module.text_offset; //! let src_code = project.decompress_stream_from(&path, offset)?; //! std::fs::write("./out/".to_string() + &module.name, src_code)?; //! } //! # Ok::<(), ovba::Error>(()) //! ``` //! //! [MS-OVBA]: https://docs.microsoft.com/en-us/openspecs/office_file_formats/ms-ovba/575462ba-bf67-4190-9fac-c275523c75fc #![forbid(unsafe_code)] #![warn(rust_2018_idioms, missing_docs)] mod error; pub use crate::error::{Error, Result}; mod parser; use cfb::CompoundFile; use std::{ cell::RefCell, io::{Cursor, Read}, path::Path, }; /// Represents a VBA project. /// /// This type serves as the entry point into this crate's functionality and exposes the /// public API surface. pub struct Project { /// Specifies version-independent information for the VBA project. pub information: Information, /// Specifies the external references of the VBA project. pub references: Vec<Reference>, /// Specifies the modules in the project. pub modules: Vec<Module>, // TODO: Figure out how to make this generic (attempts have failed with // trait bound violations). This would allow [`open_project`] to // accept a wider range of input types. container: RefCell<CompoundFile<Cursor<Vec<u8>>>>, } /// Specifies the platform for which the VBA project is created. #[derive(Debug)] pub enum SysKind { /// For 16-bit Windows Platforms. Win16, /// For 32-bit Windows Platforms. Win32, /// For Macintosh Platforms. MacOs, /// For 64-bit Windows Platforms. Win64, } /// Specifies a reference to a twiddled type library and its extended type library. #[derive(Debug)] pub struct ReferenceControl { /// (Optional) Name entry name: Option<String>, libid_original: Option<String>, libid_twiddled: String, name_extended: Option<String>, libid_extended: String, guid: Vec<u8>, // Should be an `[u8; 16]`, though I'm not sure how to convert &[u8] returned by the parser into an array. /// MUST be Unique for each `ReferenceControl` in the VBA projectwith the same /// libid_original. cookie: u32, } /// Specifies the identifier of the Automation type library the containing /// [`ReferenceControl`]'s twiddled type library was generated from. #[derive(Debug)] pub struct ReferenceOriginal { /// (Optional) Name entry name: Option<String>, libid_original: String, } /// Specifies a reference to an Automation type library. #[derive(Debug)] pub struct ReferenceRegistered { name: Option<String>, libid: String, } /// Specifies a reference to an external VBA project. #[derive(Debug)] pub struct ReferenceProject { name: Option<String>, libid_absolute: String, libid_relative: String, major_version: u32, minor_version: u16, } /// Specifies a reference to an Automation type library or VBA project. #[derive(Debug)] pub enum Reference { /// The `Reference` is a [`ReferenceControl`]. Control(ReferenceControl), /// The `Reference` is a [`ReferenceOriginal`]. Original(ReferenceOriginal), /// The `Reference` is a [`ReferenceRegistered`]. Registered(ReferenceRegistered), /// The `Reference` is a [`ReferenceProject`]. Project(ReferenceProject), } /// Specifies version-independent information for the VBA project. #[derive(Debug)] pub struct Information { /// Specifies the platform for which the VBA project is created. pub sys_kind: SysKind, lcid: u32, lcid_invoke: u32, code_page: u16, name: String, doc_string: String, help_file_1: String, help_context: u32, lib_flags: u32, version_major: u32, version_minor: u16, constants: String, } /// Specifies the containing module's type. #[derive(Debug)] pub enum ModuleType { /// Specifies a procedural module. /// /// A procedural module is a collection of subroutines and functions. Procedural, /// Specifies a document module, class module, or designer module. /// /// A document module is a type of VBA project item that specifies a module for /// embedded macros and programmatic access operations that are associated with a /// document. /// /// A class module is a module that contains the definition for a new object. Each /// instance of a class creates a new object, and procedures that are defined in the /// module become properties and methods of the object. /// /// A designer module is a VBA module that extends the methods and properties of an /// ActiveX control that has been registered with the project. /// /// The file format specification doesn't distinguish between these three module /// types and encodes them using a single umbrella type ID. DocClsDesigner, } /// Specifies data for a module. #[derive(Debug)] pub struct Module { /// Specifies a VBA identifier as the name of the containing `Module`. pub name: String, /// Specifies the stream name in the VBA storage corresponding to the containing /// `Module`. pub stream_name: String, /// Specifies the description for the containing `Module`. pub doc_string: String, /// Specifies the location of the source code within the stream that corresponds to /// the containing `Module`. pub text_offset: usize, /// Specifies the Help topic identifier for the containing `Module`. pub help_context: u32, /// Specifies whether the containing `Module` is a procedural module, document /// module, class module, or designer module. pub module_type: ModuleType, /// Specifies that the containing `Module` is read-only. pub read_only: bool, /// Specifies that the containing `Module` is only usable from within the current VBA /// project. pub private: bool, } impl Project { // TODO: This should probably live someplace else. It exposes information internal to // the CFB implementation, that's not *immediately* useful or related to this // library's primary responsibility. /// Returns a list of entries (storages and streams) in the raw binary data. Each /// entry is represented as a tuple of two `String`s, where the first element /// contains the entry's name and the second element the entry's path inside the /// CFB. /// /// The raw binary data is encoded as a [Compound File Binary][MS-CFB] /// /// [MS-CFB]: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cfb/53989ce4-7b05-4f8d-829b-d08d6148375b pub fn list(&self) -> Result<Vec<(String, String)>> { let mut result = Vec::new(); for entry in self .container .borrow() .walk_storage("/") .map_err(Error::Cfb)? { result.push(( entry.name().to_owned(), entry.path().to_str().unwrap_or_default().to_owned(), )); } Ok(result) } /// Returns a stream's contents. /// /// This is a convenience function operating on the CFB data. pub fn read_stream<P>(&self, stream_path: P) -> Result<Vec<u8>> where P: AsRef<Path>, { let mut buffer = Vec::new(); self.container .borrow_mut() .open_stream(stream_path) .map_err(Error::Cfb)? .read_to_end(&mut buffer) .map_err(Error::Cfb)?; Ok(buffer) } /// Returns a stream's decompressed data. /// /// This function reads a stream referenced by `stream_path` and passes the data /// starting at `offset` into the RLE decompressor. /// /// The primary use case for this function is to extract source code from VBA /// [`Module`]s. The respective `offset` is reported by [`Module::text_offset`]. // TODO: Code example pub fn decompress_stream_from<P>(&self, stream_path: P, offset: usize) -> Result<Vec<u8>> where P: AsRef<Path>, { let data = self.read_stream(stream_path)?; let data = parser::decompress(&data[offset..]) .map_err(|_| Error::Decompressor)? .1; Ok(data) } } /// Opens a VBA project. /// /// This function consumes `raw` and returns a [`Project`] struct on success, populated /// with data from the parsed binary input. pub fn open_project(raw: Vec<u8>) -> Result<Project> { let cursor = Cursor::new(raw); let mut container = CompoundFile::open(cursor).map_err(Error::Cfb)?; // Read *dir* stream const DIR_STREAM_PATH: &str = r#"/VBA\dir"#; let mut buffer = Vec::new(); container .open_stream(DIR_STREAM_PATH) .map_err(Error::Cfb)? .read_to_end(&mut buffer) .map_err(Error::Cfb)?; // Decompress stream let (remainder, buffer) = parser::decompress(&buffer).map_err(|_| Error::Decompressor)?; debug_assert!(remainder.is_empty()); // Parse binary data let (remainder, information) = parser::parse_project_information(&buffer).map_err(|_| Error::Parser)?; debug_assert_eq!(remainder.len(), 0, "Stream not fully consumed"); Ok(Project { information: information.information, references: information.references, modules: information.modules, container: RefCell::new(container), }) } #[cfg(test)] mod tests;