From f9cf2dedc39bf76b2bfc7220fb06ec66d35c7c6c Mon Sep 17 00:00:00 2001
From: Michele Locati <michele@locati.it>
Date: Tue, 28 Sep 2021 11:44:47 +0200
Subject: [PATCH] Add support for SourceGuardian Loader (#442)

---
 data/supported-extensions    |  1 +
 install-php-extensions       | 49 +++++++++++++++++++++++++++++++++---
 scripts/tests/sourceguardian | 30 ++++++++++++++++++++++
 3 files changed, 76 insertions(+), 4 deletions(-)
 create mode 100755 scripts/tests/sourceguardian

diff --git a/data/supported-extensions b/data/supported-extensions
index c18271a..739d623 100644
--- a/data/supported-extensions
+++ b/data/supported-extensions
@@ -82,6 +82,7 @@ snuffleupagus 7.0 7.1 7.2 7.3 7.4 8.0 8.1
 soap 5.5 5.6 7.0 7.1 7.2 7.3 7.4 8.0 8.1
 sockets 5.5 5.6 7.0 7.1 7.2 7.3 7.4 8.0 8.1
 solr 5.5 5.6 7.0 7.1 7.2 7.3 7.4 8.0 8.1
+sourceguardian 5.5 5.6 7.0 7.1 7.2 7.3 7.4 8.0
 spx 5.6 7.0 7.1 7.2 7.3 7.4 8.0
 sqlsrv 7.0 7.1 7.2 7.3 7.4 8.0 8.1
 ssh2 5.5 5.6 7.0 7.1 7.2 7.3 7.4 8.0 8.1
diff --git a/install-php-extensions b/install-php-extensions
index 23828a1..d38fe37 100755
--- a/install-php-extensions
+++ b/install-php-extensions
@@ -70,11 +70,16 @@ setDistro() {
 
 # Set:
 # - PHP_MAJMIN_VERSION: Major-Minor version, format MMmm (example 800 for PHP 8.0.1)
+# - PHP_MAJDOTMIN_VERSION: Major-Minor version, format M.m (example 8.0 for PHP 8.0.1)
 # - PHP_MAJMINPAT_VERSION: Major-Minor-Patch version, format MMmmpp (example 80001 for PHP 8.0.1) variables containing integers value
+# - PHP_MAJDOTMINDOTPAT_VERSION: Major-Minor-Patch version, format M.m.p (example 8.0.1 for PHP 8.0.1)
+# - PHP_THREADSAFE: 1 if PHP is thread-safe (TS), 0 if not thread-safe (NTS)
 setPHPVersionVariables() {
-	setPHPVersionVariables_textual="$(php-config --version)"
-	PHP_MAJMIN_VERSION=$(printf '%s' "$setPHPVersionVariables_textual" | awk -F. '{print $1*100+$2}')
-	PHP_MAJMINPAT_VERSION=$(printf '%s' "$setPHPVersionVariables_textual" | awk -F. '{print $1*10000+$2*100+$3}')
+	PHP_MAJDOTMINDOTPAT_VERSION="$(php-config --version)"
+	PHP_MAJMIN_VERSION=$(printf '%s' "$PHP_MAJDOTMINDOTPAT_VERSION" | awk -F. '{print $1*100+$2}')
+	PHP_MAJDOTMIN_VERSION=$(printf '%s' "$PHP_MAJDOTMINDOTPAT_VERSION" | cut -d. -f1-2)
+	PHP_MAJMINPAT_VERSION=$(printf '%s' "$PHP_MAJDOTMINDOTPAT_VERSION" | awk -F. '{print $1*10000+$2*100+$3}')
+	PHP_THREADSAFE=$(php -r 'echo ZEND_THREAD_SAFE ? 1 : 0;')
 }
 
 # Fix apt-get being very slow on Debian Jessie
@@ -1452,6 +1457,38 @@ actuallyInstallComposer() {
 	rm -- "$actuallyInstallComposer_installer"
 }
 
+# Install SourceGuardian Loader
+installSourceGuardian() {
+	case $(uname -m) in
+		i386 | i686 | x86)
+			installSourceGuardian_url=https://www.sourceguardian.com/loaders/download/loaders.linux-i386.tar.gz
+			;;
+		aarch64 | arm64 | armv8)
+			installSourceGuardian_url=https://www.sourceguardian.com/loaders/download/loaders.linux-aarch64.tar.gz
+			;;
+		*)
+			installSourceGuardian_url=https://www.sourceguardian.com/loaders/download/loaders.linux-x86_64.tar.gz
+			;;
+	esac
+	printf 'Downloading SourceGuardian... '
+	installSourceGuardian_dir="$(getPackageSource $installSourceGuardian_url)"
+	printf 'done (version: %s)\n' "$(cat "$installSourceGuardian_dir/version")"
+	for installSourceGuardian_phpv in $PHP_MAJDOTMINDOTPAT_VERSION $PHP_MAJDOTMIN_VERSION; do
+		installSourceGuardian_file="$installSourceGuardian_dir/ixed.$PHP_MAJDOTMIN_VERSION"
+		if test $PHP_THREADSAFE -eq 1; then
+			installSourceGuardian_file="${installSourceGuardian_file}ts"
+		fi
+		installSourceGuardian_file="${installSourceGuardian_file}.lin"
+		if test -f "$installSourceGuardian_file"; then
+			mv "$installSourceGuardian_file" "$(getPHPExtensionsDir)/sourceguardian.so"
+			return
+		fi
+	done
+	printf 'Unable to find a SourceGuardian compatible with PHP %s or PHP %s.\nAvailable SourceGuardian versions:\n' "$PHP_MAJDOTMINDOTPAT_VERSION" "$PHP_MAJDOTMIN_VERSION" >&2
+	ls -1 "$installSourceGuardian_dir" | grep -E '^ixed\..*\.lin$' | sed -E 's/^[^0-9]+([0-9]+(\.[0-9]+)*).*$/\1/' | sort | uniq >&2
+	exit 1
+}
+
 # Install a bundled PHP module given its handle
 #
 # Arguments:
@@ -2185,6 +2222,10 @@ installRemoteModule() {
 				fi
 			fi
 			;;
+		sourceguardian)
+			installSourceGuardian
+			installRemoteModule_manuallyInstalled=1
+			;;
 		spx)
 			if test -z "$installRemoteModule_version"; then
 				installRemoteModule_version=1367cbc70194d18888ec9cfe9b06c0a5b4426dff
@@ -2581,7 +2622,7 @@ installRemoteModule() {
 			# event must be loaded after sockets
 			docker-php-ext-enable --ini-name "xx-php-ext-$installRemoteModule_module.ini" "$installRemoteModule_module"
 			;;
-		ioncube_loader)
+		ioncube_loader | sourceguardian)
 			# On PHP 5.5, docker-php-ext-enable fails to detect that ionCube Loader is a Zend Extension
 			if test $PHP_MAJMIN_VERSION -le 505; then
 				printf 'zend_extension=%s/%s.so\n' "$(getPHPExtensionsDir)" "$installRemoteModule_module" >"$PHP_INI_DIR/conf.d/docker-php-ext-$installRemoteModule_module.ini"
diff --git a/scripts/tests/sourceguardian b/scripts/tests/sourceguardian
new file mode 100755
index 0000000..73e1161
--- /dev/null
+++ b/scripts/tests/sourceguardian
@@ -0,0 +1,30 @@
+#!/usr/bin/env php
+<?php
+
+set_error_handler(
+    static function ($errno, $errstr, $errfile, $errline) {
+        $msg = "Error {$errno}: {$errstr}\n";
+        if ($errfile) {
+            $msg .= "File: {$errfile}\n";
+            if ($errline) {
+                $msg .= "Line: {$errline}\n";
+            }
+        }
+        fwrite(STDERR, $msg);
+        exit(1);
+    },
+    -1
+);
+
+$rc = 0;
+foreach ([false => 'PHP module', true => 'Zend extension'] as $type => $typeName) {
+    $extensions = get_loaded_extensions($type);
+    $extensionsLowerCase = array_map('strtolower', $extensions);
+    if (in_array('sourceguardian', $extensionsLowerCase, true)) {
+        fwrite(STDOUT, "The SourceGuardian {$typeName} is loaded.\n");
+    } else {
+        fwrite(STDERR, "The SourceGuardian {$typeName} is not loaded.\nLoaded extensions are: \n- " . implode("\n- ", $extensions));
+        $rc = 1;
+    }
+}
+exit($rc);