Chrome Frame: Add explicit object security attributes to the Chrome Frame ver...

chrome_frame/module_utils.h

Index: chrome_frame/module_utils.h
===================================================================
--- chrome_frame/module_utils.h	(revision 65236)
+++ chrome_frame/module_utils.h	(working copy)
@@ -14,6 +14,9 @@
 #include "base/singleton.h"
 
 // Forward
+namespace ATL {
+class CSecurityAttributes;
+}
 class Version;
 
 // A singleton class that provides a facility to register the version of the
@@ -67,6 +70,14 @@
   // actually have a valid version and not e.g. ..\..\..\..\MyEvilFolder\.
   virtual HMODULE LoadVersionedModule(Version* version);
 
+  // Builds the necessary SECURITY_ATTRIBUTES to allow low integrity access
+  // to an object. Returns true on success, false otherwise.
+  virtual bool GetLockSecurityAttributes(ATL::CSecurityAttributes* sec_attr);
+
+  // Attempts to change the permissions on the given file mapping to read only.
+  // Returns true on success, false otherwise.
+  virtual bool SetFileMappingToReadOnly(base::SharedMemoryHandle mapping);
+
   // Shared memory segment that contains the version beacon.
   scoped_ptr<base::SharedMemory> shared_memory_;