U
|
X ±d: ã @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
|
Z
|
ddl m Z ddl mZ ddlmZ e e¡Zdd Zdd Zd
|
d Zd d Zdd Zdd Zdd Ze e dddZ dd Z dd Z dd Z!G d d d e"Z#G d d d e"Z$d!d" Z%d#d$ Z&d,d%d&Z'd'd( Z(d-d*d+Z)dS ).z
|
Utils for Mac OS platform.
|
é N)ÚLC_BUILD_VERSIONÚLC_CODE_SIGNATUREÚ LC_SEGMENT_64Ú LC_SYMTABÚLC_VERSION_MIN_MACOSX)ÚMachO)Ú base_prefixc C s t } | rt | ¡rdS dS )z
|
Check if Python interpreter was installed via Homebrew command 'brew'.
|
|
:return: True if Homebrew else otherwise.
|
TF)Úget_homebrew_prefixr Ú
|
startswith©Z
|
env_prefix© r úLd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\PyInstaller/utils/osx.pyÚis_homebrew_env s r c C s t } | rt | ¡rdS dS )z
|
Check if Python interpreter was installed via Macports command 'port'.
|
|
:return: True if Macports else otherwise.
|
TF)Úget_macports_prefixr r
|
r r r r Úis_macports_env* s r c C s" t d¡} tj tj | ¡¡} | S )z9
|
:return: Root path of the Homebrew environment.
|
Zbrew©ÚshutilÚwhichÚosÚpathÚdirname©Úprefixr r r r 7 s
|
r c C s" t d¡} tj tj | ¡¡} | S )z9
|
:return: Root path of the Macports environment.
|
Úportr r r r r r A s
|
r c C s, dd | j D }t|dks$td|d S )zJ
|
Helper that finds the version command in the given MachO header.
|
c S s" g | ]}|d j tthkr|qS ©r )Úcmdr r ©Ú.0r r r r Ú
|
<listcomp>Q s z%_find_version_cmd.<locals>.<listcomp>é zGExpected exactly one LC_BUILD_VERSION or LC_VERSION_MIN_MACOSX command!r )ÚcommandsÚlenÚAssertionError)ÚheaderÚ version_cmdr r r Ú_find_version_cmdK s r% c C s( t | }|jd }t|}t|d jS )zÙ
|
Obtain the version of macOS SDK against which the given binary was built.
|
|
NOTE: currently, version is retrieved only from the first arch slice in the binary.
|
|
:return: (major, minor, revision) tuple
|
r r )r Úheadersr% Ú _hex_tripletÚsdk)ÚfilenameÚbinaryr# r$ r r r Úget_macos_sdk_versionV s
|
r+ c C s* | d@ d? }| d@ d? }| d@ }|||fS )Ni ÿ é i ÿ é éÿ r )ÚversionÚmajorÚminorÚrevisionr r r r' e s r' )r) Úreturnc C sZ g }t | jD ]<}t|}|d jtkr:| |d j¡ q| |d j¡ qtt t
|
|S )z}
|
Get the -macosx-version-min used to compile a macOS binary.
|
|
For fat binaries, the minimum version is selected.
|
r r ) r r& r% r r Úappendr/ ZminosÚminÚmapr' )r) Úversionsr# r r r r Úmacosx_version_minm s r8 c C s´ d| krdks n t dd| kr2dks<n t dd| krPdksZn t dt| }|jd }t|}|d> |d> B |B |d _t|jd }| |¡ W 5 Q R X d
|
S ) zª
|
Overwrite the macOS SDK version declared in the given binary with the specified version.
|
|
NOTE: currently, only version in the first arch slice is modified.
|
r r. z Invalid major version value!z Invalid minor version value!zInvalid revision value!r, r- r úrb+N)r" r r& r% r( Úopenr) Úwrite)r) r0 r1 r2 r* r# r$ Úfpr r r Úset_macos_sdk_version s
|
r= c sð t j | ¡}t| }|jd }dd |jD }t|dksBtdd fdd|jD }t|dksntd |d d }d
|
d |jD }t|dkstd |d d }||j|j |_
|
||j|j |_ t |j d ¡râd nd}t |j | ¡| |_t| d| ¡ W 5 Q R X |jrìddlm}m} mmm}
|
t| d|
|
¡} | j |kr~fddt | j D } n&| j | kr¤fddt | j D } | d } || j | _ !d¡ | "¡ | D ]} | "¡ qÐW 5 Q R X dS )a
|
Fixes the Mach-O headers to make code signing possible.
|
|
Code signing on Mac OS does not work out of the box with embedding .pkg archive into the executable.
|
|
The fix is done this way:
|
- Make the embedded .pkg archive part of the Mach-O 'String Table'. 'String Table' is at end of the Mac OS exe file,
|
so just change the size of the table to cover the end of the file.
|
- Fix the size of the __LINKEDIT segment.
|
|
Note: the above fix works only if the single-arch thin executable or the last arch slice in a multi-arch fat
|
executable is not signed, because LC_CODE_SIGNATURE comes after LC_SYMTAB, and because modification of headers
|
invalidates the code signature. On modern arm64 macOS, code signature is mandatory, and therefore compilers
|
create a dummy signature when executable is built. In such cases, that signature needs to be removed before this
|
function is called.
|
|
Mach-O format specification: http://developer.apple.com/documentation/Darwin/Reference/ManPages/man5/Mach-O.5.html
|
éÿÿÿÿc S s g | ]}|d j tkr|qS r )r r r r r r r ² s z,fix_exe_for_code_signing.<locals>.<listcomp>r z#Executable contains code signature!s __LINKEDIT c s, g | ]$}|d j tkr|d j kr|qS )r r )r r Zsegnamer )Ú__LINKEDIT_NAMEr r r · s r z(Expected exactly one __LINKEDIT segment!c S s g | ]}|d j tkr|qS r )r r r r r r r » s z$Expected exactly one SYMTAB section!Úarm64i @ i r9 )Ú FAT_MAGICÚ FAT_MAGIC_64Úfat_archÚ
|
fat_arch64Ú
|
fat_headerc s g | ]} ¡qS r ©Ú from_fileobj©r Úi)rC r< r r r å s c s g | ]} ¡qS r rF rH )rD r< r r r ç s N)#r r Úgetsizer r& r r! r" ÚoffsetZstroffZstrsizeZfileoffÚfilesizeÚ_get_arch_stringr# r
|
ÚmathÚceilZvmsizer: r; ÚfatÚmacholib.mach_orA rB rC rD rE rG ÚmagicÚrangeZ nfat_archÚsizeÚseekZ
|
to_fileobj)r) Ú file_sizeÚ
|
executabler# Zsign_secZ linkedit_segZ
|
symtab_secZ page_sizerA rB rE rP ÚarchsÚarchr )r? rC rD r< r Úfix_exe_for_code_signing s@
|
|
|
|
rZ c C s` | j }| jd@ }|dkr*|dkr$dS dS n&|dkrD|dkr>dS d S n |d
|
krPd S d s\td dS )z¹
|
Converts cputype and cpusubtype from mach_o.mach_header_64 into arch string comparible with lipo/codesign.
|
The list of supported architectures can be found in man(1) arch.
|
iÿÿÿi r- Zx86_64hÚx86_64i é Zarm64er@ é Úi386FzUnhandled architecture!N)ÚcputypeÚ
|
cpusubtyper" )r# r_ r` r r r rM ò s
|
rM c @ s e Zd ZdZdS )ÚInvalidBinaryErroru_
|
Exception raised by Ëget_binary_architecturesË when it is passed an invalid binary.
|
N©Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__r r r r ra s ra c @ s e Zd ZdZdS )ÚIncompatibleBinaryArchErrorzq
|
Exception raised by `binary_to_target_arch` when the passed binary fails the strict architecture check.
|
Nrb r r r r rg s rg c
|
C sT z t | }W n, tk
|
r8 } ztd|W 5 d}~X Y nX t|jdd |jD fS )zÅ
|
Inspects the given binary and returns tuple (is_fat, archs), where is_fat is boolean indicating fat/thin binary,
|
and arch is list of architectures with lipo/codesign compatible names.
|
zInvalid Mach-O binary!Nc S s g | ]}t |jqS r )rM r# )r Úhdrr r r r s z,get_binary_architectures.<locals>.<listcomp>)r Ú
|
ValueErrorra ÚboolrP r& )r) rW Úer r r Úget_binary_architectures s
|
rl c C sN dd|| d| g}t j|t jt jdd}|jrJtd| d|j d|j d S )
|
z\
|
Convert the given fat binary into thin one with the specified target architecture.
|
Zlipoz-thinz-outputT©ÚstdoutÚstderrÚuniversal_newlineszlipo command (ú) failed with error code ú
|
!
|
output: N)Ú
|
subprocessÚrunÚPIPEÚSTDOUTÚ
|
returncodeÚ SystemErrorrn )r) Z thin_archÚcmd_argsÚpr r r Úconvert_binary_to_thin_arch# s r{ c C s |s| }t | \}}|dkr0|st| dnb|rl||krPt| d| dt d| ||¡ t| | n&||krt| d| d|d d d
|
S ) z
|
Check that the given binary contains required architecture slice(s) and convert the fat binary into thin one,
|
if necessary.
|
Z
|
universal2z is not a fat binary!z does not contain slice for ú!z1Converting fat binary %s (%s) to thin binary (%s)z" is incompatible with target arch z (has arch: r z)!N)rl rg ÚloggerÚdebugr{ )r) Z target_archZ display_nameZis_fatrX r r r Úbinary_to_target_arch- s ÿr c C sV t d| ¡ ddd| g}tj|tjtjdd}|jrRtd| d|j d |j d
|
S ) zp
|
Remove the signature from all architecture slices of the given binary file using the codesign utility.
|
z Removing signature from file %rÚcodesignz--removeú--all-architecturesTrm úcodesign command (rq rr N) r} r~ rs rt ru rv rw rx rn )r) ry rz r r r Ú remove_signature_from_binaryI s
|
r Fc C s g }|sd}n
|
| d¡ |r0| d¡ | |¡ |r>| d¡ t d| ¡ dd|dd d
|
f|| f}tj|tjtjd d }|jrtd | d|j d|j dS )zj
|
Sign the binary using codesign utility. If no identity is provided, ad-hoc signing is performed.
|
ú-z--options=runtimez--entitlementsz--deepzSigning file %rr z-sz--forcer z --timestampTrm r rq rr N)
|
r4 r} r~ rs rt ru rv rw rx rn )r) ÚidentityZentitlements_fileÚdeepÚ
|
extra_argsry rz r r r Ú sign_binaryT s
|
|
|
|
r )N)NNF)*rf rN r rs r rQ r r r r r Zmacholib.MachOr ZPyInstaller.logÚlogÚloggingZPyInstaller.compatr Ú getLoggerrc r} r r r r r% r+ r' ÚstrÚtupler8 r= rZ rM Ú Exceptionra rg rl r{ r r r r r r r Ú<module> s6
|
|
|
]
|
|
|
