RDK-59367: Sync up xdialserver changes from RDKE

[yuvaramachandran-gurusamy]

RDK-59367: Sync up xdialserver changes from RDKE

Signed-off-by: yuvaramachandran_gurusamy [yuvaramachandran_gurusamy@comcast.com]

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

6 out of 7 committers have signed the CLA.
✅ (scthunderbolt)[https://github.com/scthunderbolt]
✅ (sbarre01)[https://github.com/sbarre01]
✅ (yuvaramachandran-gurusamy)[https://github.com/yuvaramachandran-gurusamy]
✅ (hgfell683)[https://github.com/hgfell683]
✅ (mukesh972)[https://github.com/mukesh972]
✅ (agampa263)[https://github.com/agampa263]
❌ @srinibas15
_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

In general, the problem is fixed by explicitly setting the least-privilege permissions for the GITHUB_TOKEN, either at the workflow root (applies to all jobs) or per job (applies only to that job). For a simple build job that only checks out code and runs shell scripts, contents: read is usually sufficient.

The best fix here, without changing existing functionality, is to add a minimal permissions block to the build-entservices-on-pr job. This ensures the GITHUB_TOKEN (if used implicitly by any actions in the job) has only read access to repo contents. Since the job uses only actions/checkout@v3 and shell commands, contents: read is enough and will not break existing behavior. Concretely, in .github/workflows/native_full_build.yml, under jobs: build-entservices-on-pr:, add:

    permissions:
      contents: read

indented to align with runs-on and container. No additional imports or definitions are required, and no other files need to be changed.

[Copilot]

Pull request overview

This PR syncs xdialserver changes from RDKE, adding several significant features and fixes including security token support, manufacturer/model name configuration, UUID-based application routing, and comprehensive build/CI infrastructure.

Changes:

• Added security token authentication support with conditional compilation flag
• Implemented dynamic manufacturer and model name configuration via new callback mechanisms
• Introduced UUID-based application routing and per-boot persistent UUID generation
• Added mutex protection for SSDP operations to prevent race conditions
• Improved error handling, logging consistency, and memory management throughout

Reviewed changes

Copilot reviewed 32 out of 32 changed files in this pull request and generated 20 comments.

Show a summary per file

File	Description
stubs/securityagent/SecurityTokenUtil.h	New header defining security token retrieval interface
stubs/securityagent/SecurityTokenUtil.cpp	Stub implementation for security token (contains critical bugs)
stubs/iarm_stubs.cpp	IARM bus stub implementations for testing
server/plat/gdialappcache.hpp	Initialize observer pointer to nullptr
server/plat/gdialappcache.cpp	Add null pointer checks and fix logging format
server/plat/gdial_app_registry.c	Add UUID generation and persistence for app URIs
server/plat/gdial.hpp	Add manufacturer/model name callback typedefs
server/plat/gdial.cpp	Extensive changes: move semantics, new callbacks, security token integration
server/plat/gdial-plat-util.c	Fix format specifier for thread ID logging
server/plat/gdial-plat-dev.c	Remove manufacturer/model getter functions
server/plat/gdial-plat-app.c	Add manufacturer/model name callback registration
server/plat/gdial-os-app.h	Declare new manufacturer/model update functions
server/plat/CMakeLists.txt	Add DISABLE_SECURITY_TOKEN build option and uuid library
server/include/gdialserviceimpl.h	Add manufacturer/model events, remove onStopped
server/include/gdialservicecommon.h	Remove onStopped from interface (breaking change)
server/include/gdialservice.h	Add manufacturer/model setter methods
server/include/gdial_app_registry.h	Add app_uri field for UUID-based routing
server/include/gdial-plat-dev.h	Remove manufacturer/model getter declarations
server/include/gdial-plat-app.h	Add manufacturer/model callback typedefs and registration
server/include/gdial-config.h	Fix header guard naming convention
server/gdialservice.cpp	Implement manufacturer/model handlers, improve initialization
server/gdialserver_ut.cpp	Update unit tests for interface changes
server/gdial-ssdp.h	Add manufacturer/model setter function declarations
server/gdial-ssdp.c	Add mutex protection and manufacturer/model support
server/gdial-rest.h	Update additional_data_url signature for UUID support
server/gdial-rest.c	Implement UUID-based routing, fix typo, add null checks
server/CMakeLists.txt	Add libsoup-3.0 detection and fallback
cov_build.sh	New coverage build script
build_dependencies.sh	Comprehensive dependency installation script
Makefile	Add DISABLE_SECURITY_TOKEN flag support
.github/workflows/native_full_build.yml	GitHub Actions workflow for native builds
.github/CODEOWNERS	Define code ownership

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The memcpy return value check is incorrect. memcpy always returns the destination pointer (buffer), which will be non-null, making the condition always false. Additionally, the function should return the length of the token on success (as documented in the header), not 0. The correct implementation should return len on success.

[Copilot]

Missing buffer size validation. The function should check if maxLength is sufficient to hold the token before calling memcpy to prevent buffer overflow. According to the function contract, if the buffer is too small, it should return a negative value indicating the required length.

[Copilot]

Inconsistent bracing style. The condition blocks starting at lines 239, 243, and 265 use braces, while others don't. For consistency and to prevent future errors when adding code, all if-statement blocks should use braces.

Suggested change

	if (nullptr!=appName){
	applicationName = appName;
	}
	if (nullptr!=argPayload){
	payLoad = argPayload;
	}
	if (nullptr!=argQueryString){
	queryString = argQueryString;
	}
	if (nullptr!=argAdditionalDataUrl){
	if (nullptr!=appName)
	{
	applicationName = appName;
	}
	if (nullptr!=argPayload)
	{
	payLoad = argPayload;
	}
	if (nullptr!=argQueryString)
	{
	queryString = argQueryString;
	}
	if (nullptr!=argAdditionalDataUrl)
	{

[Copilot]

Hardcoded GitHub token usage. The script uses $GITHUB_TOKEN for cloning a private repository at line 41, but there's no validation that this environment variable is set. The script should check if GITHUB_TOKEN is defined before attempting to use it, or provide a clear error message if it's missing.

Suggested change

	git clone https://$GITHUB_TOKEN@github.com/rdkcentral/entservices-testframework.git
	if [ -z "${GITHUB_TOKEN:-}" ]; then
	echo "Error: GITHUB_TOKEN environment variable is not set. Cannot clone entservices-testframework." >&2
	exit 1
	fi
	git clone https://${GITHUB_TOKEN}@github.com/rdkcentral/entservices-testframework.git

[Copilot]

The file handle is not closed if the second fopen fails. This creates a file descriptor leak. The error path should also close the file handle opened for reading before returning.

[Copilot]

The function comment incorrectly refers to the parameter as "Id" when the actual parameter name is "buffer". This inconsistency makes the documentation misleading.

[Copilot]

Using a hardcoded path template in /tmp with predictable filenames creates a security risk. An attacker could create symlinks or race conditions (TOCTOU) to manipulate these files. Consider using mkstemp or a more secure temporary file creation mechanism, or store these in a protected directory with appropriate permissions.

Suggested change

	#define UUID_FILE_TEMPLATE "/tmp/.dial_%s_uuid.txt"
	#define UUID_FILE_TEMPLATE "/var/lib/gdial/.dial_%s_uuid.txt"

[Copilot]

The typedef at line 55 has an inconsistent name. It's defined as "gdial_modelname_cb" but uses "gdial_manufacturername_cb" as the parameter type. While this may be intentional (same signature), it's confusing. The parameter type should be "gdial_modelname_cb" for clarity.

Suggested change

	void gdial_register_modelname_cb(gdial_manufacturername_cb cb);
	void gdial_register_modelname_cb(gdial_modelname_cb cb);

[Copilot]

The mutex initialization error handling returns EXIT_FAILURE which is typically 1, but the function signature returns int and other parts return 0 or -1. For consistency with the rest of the function's error handling pattern, this should return -1 instead of EXIT_FAILURE.

Suggested change

	return EXIT_FAILURE;
	return -1;

[Copilot]

Missing null check for app_random_uuid. The variable app_random_uuid is used in g_strdup_printf at line 130 without verifying it's not NULL. If this variable is NULL, it could lead to undefined behavior or produce an incorrect URL string.

Suggested change

	gchar *application_url_str = g_strdup_printf("http://%s:%d/%s/", iface_ipv4_address, GDIAL_REST_HTTP_PORT,app_random_uuid);
	const gchar *app_uuid = app_random_uuid;
	if (app_uuid == NULL) {
	GDIAL_LOGERROR("app_random_uuid is NULL, cannot construct Application-URL");
	soup_message_set_status(msg, SOUP_STATUS_INTERNAL_SERVER_ERROR);
	pthread_mutex_unlock(&ssdpServerEventSync);
	return;
	}
	gchar *application_url_str = g_strdup_printf("http://%s:%d/%s/", iface_ipv4_address, GDIAL_REST_HTTP_PORT, app_uuid);