// SPDX-FileCopyrightText: Copyright 2026 Eden Emulator Project // SPDX-License-Identifier: GPL-3.0-or-later // SPDX-FileCopyrightText: Copyright 2018 yuzu Emulator Project // SPDX-License-Identifier: GPL-2.0-or-later #include #include #include #include #include "common/assert.h" #include "common/common_types.h" #include "common/logging.h" #include "common/swap.h" #include "core/core.h" #include "core/file_sys/content_archive.h" #include "core/file_sys/nca_metadata.h" #include "core/file_sys/registered_cache.h" #include "core/file_sys/romfs.h" #include "core/file_sys/system_archive/system_archive.h" #include "core/hle/kernel/k_shared_memory.h" #include "core/hle/kernel/kernel.h" #include "core/hle/service/cmif_serialization.h" #include "common/alignment.h" #include "core/hle/service/filesystem/filesystem.h" #include "core/hle/service/ipc_helpers.h" #include "core/hle/service/ns/platform_service_manager.h" namespace Service::NS { struct FontRegion { u32 offset; u32 size; }; // The below data is specific to shared font data dumped from Switch on f/w 2.2 // Virtual address and offsets/sizes likely will vary by dump [[maybe_unused]] constexpr VAddr SHARED_FONT_MEM_VADDR{0x00000009d3016000ULL}; constexpr u32 EXPECTED_RESULT{0x7f9a0218}; // What we expect the decrypted bfttf first 4 bytes to be constexpr u32 EXPECTED_MAGIC{0x36f81a1e}; // What we expect the encrypted bfttf first 4 bytes to be constexpr u64 SHARED_FONT_MEM_SIZE{0x1100000}; constexpr FontRegion EMPTY_REGION{0, 0}; static void DecryptSharedFont(const std::span input, std::span output, std::size_t& offset) { ASSERT(offset + (input.size() * sizeof(u32)) < SHARED_FONT_MEM_SIZE && "Shared fonts exceeds 17mb!"); ASSERT(input[0] == EXPECTED_MAGIC && "Failed to derive key, unexpected magic number"); const u32 KEY = input[0] ^ EXPECTED_RESULT; // Derive key using an inverse xor std::vector transformed_font(input.size()); // TODO(ogniK): Figure out a better way to do this std::transform(input.begin(), input.end(), transformed_font.begin(), [&KEY](u32 font_data) { return Common::swap32(font_data ^ KEY); }); transformed_font[1] = Common::swap32(transformed_font[1]) ^ KEY; // "re-encrypt" the size std::memcpy(output.data() + offset, transformed_font.data(), transformed_font.size() * sizeof(u32)); offset += transformed_font.size() * sizeof(u32); } void DecryptSharedFontToTTF(const std::vector& input, std::vector& output) { ASSERT_MSG(input[0] == EXPECTED_MAGIC, "Failed to derive key, unexpected magic number"); if (input.size() < 2) { LOG_ERROR(Service_NS, "Input font is empty"); return; } const u32 KEY = input[0] ^ EXPECTED_RESULT; // Derive key using an inverse xor std::vector transformed_font(input.size()); // TODO(ogniK): Figure out a better way to do this std::transform(input.begin(), input.end(), transformed_font.begin(), [&KEY](u32 font_data) { return Common::swap32(font_data ^ KEY); }); std::memcpy(output.data(), transformed_font.data() + 2, (transformed_font.size() - 2) * sizeof(u32)); } void EncryptSharedFont(const std::vector& input, std::vector& output, std::size_t& offset) { ASSERT(offset + (input.size() * sizeof(u32)) < SHARED_FONT_MEM_SIZE && "Shared fonts exceeds 17mb!"); const auto key = Common::swap32(EXPECTED_RESULT ^ EXPECTED_MAGIC); std::vector transformed_font(input.size() + 2); transformed_font[0] = Common::swap32(EXPECTED_MAGIC); transformed_font[1] = Common::swap32(static_cast(input.size() * sizeof(u32))) ^ key; std::transform(input.begin(), input.end(), transformed_font.begin() + 2, [key](u32 in) { return in ^ key; }); std::memcpy(output.data() + offset, transformed_font.data(), transformed_font.size() * sizeof(u32)); offset += transformed_font.size() * sizeof(u32); } struct IPlatformServiceManager::Impl { const FontRegion& GetSharedFontRegion(std::size_t index) const { return index < shared_font_regions.size() ? shared_font_regions[index] : EMPTY_REGION; } // Automatically populated based on shared_fonts dump or system archives. // 6 builtin fonts + extra 2 for whatever may come after boost::container::static_vector shared_font_regions; /// Where Switch 2 GetBuiltInFontData finds the same fonts as plain TTF data: page-aligned /// copies in builtin_font_memory (the Switch 1 font memory is full with the system fonts). boost::container::static_vector builtin_font_regions; u32 builtin_font_memory_size{}; /// Made by the first GetBuiltInFontSharedMemory (Switch 2 titles only). Kernel::KSharedMemory* builtin_font_memory{}; /// Backing memory for the shared font data std::array shared_font; }; IPlatformServiceManager::IPlatformServiceManager(Core::System& system_, const char* service_name_) : ServiceFramework{system_, service_name_}, impl{std::make_unique()} { // clang-format off static const FunctionInfo functions[] = { {0, D<&IPlatformServiceManager::RequestLoad>, "RequestLoad"}, {1, D<&IPlatformServiceManager::GetLoadState>, "GetLoadState"}, {2, D<&IPlatformServiceManager::GetSize>, "GetSize"}, {3, D<&IPlatformServiceManager::GetSharedMemoryAddressOffset>, "GetSharedMemoryAddressOffset"}, {4, D<&IPlatformServiceManager::GetSharedMemoryNativeHandle>, "GetSharedMemoryNativeHandle"}, {5, D<&IPlatformServiceManager::GetSharedFontInOrderOfPriority>, "GetSharedFontInOrderOfPriority"}, {6, D<&IPlatformServiceManager::GetSharedFontInOrderOfPriority>, "GetSharedFontInOrderOfPriorityForSystem"}, {100, nullptr, "RequestApplicationFunctionAuthorization"}, {101, nullptr, "RequestApplicationFunctionAuthorizationByProcessId"}, {102, nullptr, "RequestApplicationFunctionAuthorizationByApplicationId"}, {103, nullptr, "RefreshApplicationFunctionBlackListDebugRecord"}, {104, nullptr, "RequestApplicationFunctionAuthorizationByProgramId"}, {105, nullptr, "GetFunctionBlackListSystemVersionToAuthorize"}, {106, nullptr, "GetFunctionBlackListVersion"}, {1000, nullptr, "LoadNgWordDataForPlatformRegionChina"}, {1001, nullptr, "GetNgWordDataSizeForPlatformRegionChina"}, {2000, &IPlatformServiceManager::GetBuiltInFontSharedMemory, "GetBuiltInFontSharedMemory (Switch 2)"}, {2010, &IPlatformServiceManager::GetBuiltInFontData, "GetBuiltInFontData (Switch 2)"}, }; // clang-format on RegisterHandlers(functions); auto& fsc = system.GetFileSystemController(); // Attempt to load shared font data from disk const auto* nand = fsc.GetSystemNANDContents(); std::size_t offset = 0; // Rebuild shared fonts from data ncas or synthesize for (auto& font : SHARED_FONTS) { FileSys::VirtualFile romfs; const auto nca = nand->GetEntry(static_cast(font.first), FileSys::ContentRecordType::Data); if (nca) { romfs = nca->GetRomFS(); } if (!romfs) { romfs = FileSys::SystemArchive::SynthesizeSystemArchive(static_cast(font.first)); } if (!romfs) { LOG_ERROR(Service_NS, "Failed to find or synthesize {:016X}! Skipping", font.first); continue; } const auto extracted_romfs = FileSys::ExtractRomFS(romfs); if (!extracted_romfs) { LOG_ERROR(Service_NS, "Failed to extract RomFS for {:016X}! Skipping", font.first); continue; } const auto font_fp = extracted_romfs->GetFile(font.second); if (!font_fp) { LOG_ERROR(Service_NS, "{:016X} has no file \"{}\"! Skipping", font.first, font.second); continue; } std::vector font_data_u32(font_fp->GetSize() / sizeof(u32)); font_fp->ReadBytes(font_data_u32.data(), font_fp->GetSize()); // We need to be BigEndian as u32s for the xor encryption std::transform(font_data_u32.begin(), font_data_u32.end(), font_data_u32.begin(), Common::swap32); // Font offset and size do not account for the header const FontRegion region{u32(offset + 8), u32((font_data_u32.size() * sizeof(u32)) - 8)}; DecryptSharedFont(font_data_u32, impl->shared_font, offset); impl->shared_font_regions.push_back(region); } // The data after each BFTTF header is the plain font: GetBuiltInFontSharedMemory copies it. u32 builtin_offset = 0; for (const auto& region : impl->shared_font_regions) { impl->builtin_font_regions.push_back({builtin_offset, region.size}); builtin_offset = Common::AlignUp(builtin_offset + region.size, 0x1000); } impl->builtin_font_memory_size = std::max(builtin_offset, 0x1000); } // Switch 2: the shared memory GetBuiltInFontData offsets point into (copy handle, u32 size); the // SDK maps it read-only. It holds plain copies of the fonts, apart from the Switch 1 font memory. void IPlatformServiceManager::GetBuiltInFontSharedMemory(HLERequestContext& ctx) { LOG_WARNING(Service_NS, "(STUBBED) Switch 2 GetBuiltInFontSharedMemory, {:#x} bytes", impl->builtin_font_memory_size); if (impl->builtin_font_memory == nullptr) { auto* const memory = Kernel::KSharedMemory::Create(kernel); if (const Result result = memory->Initialize(kernel, system.DeviceMemory(), nullptr, Kernel::Svc::MemoryPermission::None, Kernel::Svc::MemoryPermission::Read, impl->builtin_font_memory_size); result.IsError()) { LOG_ERROR(Service_NS, "Failed to make {:#x} bytes of built-in font memory: {:#x}", impl->builtin_font_memory_size, result.raw); memory->Close(kernel); IPC::ResponseBuilder rb{ctx, 2}; rb.Push(result); return; } Kernel::KSharedMemory::Register(kernel, memory); u8* const data = memory->GetPointer(); std::memset(data, 0, impl->builtin_font_memory_size); for (size_t i = 0; i < impl->builtin_font_regions.size(); ++i) { std::memcpy(data + impl->builtin_font_regions[i].offset, impl->shared_font.data() + impl->shared_font_regions[i].offset, impl->builtin_font_regions[i].size); } impl->builtin_font_memory = memory; } IPC::ResponseBuilder rb{ctx, 3, 1}; rb.Push(ResultSuccess); rb.Push(impl->builtin_font_memory_size); rb.PushCopyObjects(ctx, *impl->builtin_font_memory); } // nn::pl::GetBuiltInFontData(BuiltInFontDataOunce*, BuiltInFontTypeOunce, bool): returns a 16-byte // bool that says whether the font exists and a 16-byte descriptor (u8 flags, u8 flag bit, u16, // u32 offset into the font shared memory, u32 size, u32). The client expects plain TrueType/OpenType data // there. The type numbering is unknown, so types map onto Eden's shared fonts in order. void IPlatformServiceManager::GetBuiltInFontData(HLERequestContext& ctx) { IPC::RequestParser rp{ctx}; const u32 type = rp.Pop(); const bool flag = rp.Pop() != 0; const auto& regions = impl->builtin_font_regions; const bool found = !regions.empty(); const FontRegion region = found ? regions[std::min(type, regions.size() - 1)] : EMPTY_REGION; LOG_WARNING(Service_NS, "(STUBBED) Switch 2 GetBuiltInFontData type={} flag={} -> offset={:#x} size={:#x}", type, flag, region.offset, region.size); // Raw reply: the bool at offset 0, the descriptor at offset 8. IPC::ResponseBuilder rb{ctx, 2 + 6}; rb.Push(ResultSuccess); rb.Push(found ? 1 : 0); rb.Push(0); rb.Push(0); rb.Push(region.offset); rb.Push(region.size); rb.Push(0); } IPlatformServiceManager::~IPlatformServiceManager() { if (impl->builtin_font_memory != nullptr) { impl->builtin_font_memory->Close(kernel); } } Result IPlatformServiceManager::RequestLoad(SharedFontType type) { // Games don't call this so all fonts should be loaded LOG_DEBUG(Service_NS, "called, shared_font_type={}", type); R_SUCCEED(); } Result IPlatformServiceManager::GetLoadState(Out out_load_state, SharedFontType type) { LOG_DEBUG(Service_NS, "called, shared_font_type={}", type); *out_load_state = LoadState::Loaded; R_SUCCEED(); } Result IPlatformServiceManager::GetSize(Out out_size, SharedFontType type) { LOG_DEBUG(Service_NS, "called, shared_font_type={}", type); *out_size = impl->GetSharedFontRegion(static_cast(type)).size; R_SUCCEED(); } Result IPlatformServiceManager::GetSharedMemoryAddressOffset(Out out_shared_memory_offset, SharedFontType type) { LOG_DEBUG(Service_NS, "called, shared_font_type={}", type); *out_shared_memory_offset = impl->GetSharedFontRegion(static_cast(type)).offset; R_SUCCEED(); } Result IPlatformServiceManager::GetSharedMemoryNativeHandle(OutCopyHandle out_shared_memory_native_handle) { // Map backing memory for the font data LOG_DEBUG(Service_NS, "called"); // Create shared font memory object std::memcpy(kernel.GetFontSharedMem().GetPointer(), impl->shared_font.data(), impl->shared_font.size()); // FIXME: this shouldn't belong to the kernel *out_shared_memory_native_handle = &kernel.GetFontSharedMem(); R_SUCCEED(); } Result IPlatformServiceManager::GetSharedFontInOrderOfPriority( OutArray out_font_codes, OutArray out_font_offsets, OutArray out_font_sizes, Out out_fonts_are_loaded, Out out_font_count, Set::LanguageCode language_code) { LOG_DEBUG(Service_NS, "called, language_code={:#x}", language_code); // The maximum number of elements that can be returned is 6. Regardless of the available fonts // or buffer size. constexpr size_t MaxElementCount = 6; // TODO(ogniK): Have actual priority order const auto max_size = (std::min)({MaxElementCount, out_font_codes.size(), out_font_offsets.size(), out_font_sizes.size(), impl->shared_font_regions.size()}); for (size_t i = 0; i < max_size; i++) { auto& region = impl->GetSharedFontRegion(i); out_font_codes[i] = static_cast(i); out_font_offsets[i] = region.offset; out_font_sizes[i] = region.size; } *out_fonts_are_loaded = true; *out_font_count = static_cast(max_size); R_SUCCEED(); } } // namespace Service::NS