verifyos-cli 0.2.1

A pure Rust CLI tool to scan Apple app bundles for App Store rejection risks before submission.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

use crate::parsers::plist_reader::InfoPlist;
use std::path::Path;

#[derive(Debug, thiserror::Error, miette::Diagnostic)]
pub enum ProvisioningError {
    #[error("Failed to read provisioning profile: {0}")]
    Io(#[from] std::io::Error),
    #[error("Failed to parse provisioning profile plist: {0}")]
    Plist(#[from] crate::parsers::plist_reader::PlistError),
    #[error("Provisioning profile plist not found in CMS blob")]
    PlistNotFound,
    #[error("Provisioning profile missing Entitlements dictionary")]
    MissingEntitlements,
}

pub struct ProvisioningProfile {
    pub entitlements: InfoPlist,
}

impl ProvisioningProfile {
    pub fn from_embedded_file<P: AsRef<Path>>(path: P) -> Result<Self, ProvisioningError> {
        let bytes = std::fs::read(path)?;
        let plist_bytes = extract_plist_bytes(&bytes)?;
        let profile_plist = InfoPlist::from_bytes(&plist_bytes)?;
        let entitlements_dict = profile_plist
            .get_dictionary("Entitlements")
            .ok_or(ProvisioningError::MissingEntitlements)?;

        Ok(Self {
            entitlements: InfoPlist::from_dictionary(entitlements_dict.clone()),
        })
    }
}

fn extract_plist_bytes(data: &[u8]) -> Result<Vec<u8>, ProvisioningError> {
    let start = find_subslice(data, b"<?xml").or_else(|| find_subslice(data, b"<plist"));
    let end = find_subslice(data, b"</plist>").map(|i| i + b"</plist>".len());

    match (start, end) {
        (Some(s), Some(e)) if e > s => Ok(data[s..e].to_vec()),
        _ => Err(ProvisioningError::PlistNotFound),
    }
}

fn find_subslice(haystack: &[u8], needle: &[u8]) -> Option<usize> {
    haystack
        .windows(needle.len())
        .position(|window| window == needle)
}