Security restrictions for P2P UDP Sockets.

content/browser/renderer_host/p2p_socket_host_udp.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_RENDERER_HOST_P2P_SOCKET_HOST_UDP_H_
 #define CONTENT_BROWSER_RENDERER_HOST_P2P_SOCKET_HOST_UDP_H_
 
-#include "content/common/p2p_sockets.h"
+#include <map>

[Alpha Left Google, 2011/04/09 00:44:32]

#include <set> ?

[Sergey Ulanov, 2011/04/09 00:52:36]

Done.

 
 #include "base/message_loop.h"
 #include "content/browser/renderer_host/p2p_socket_host.h"
+#include "content/common/p2p_sockets.h"
+#include "net/base/ip_endpoint.h"
 #include "net/udp/udp_server_socket.h"
 
 class P2PSocketHostUdp : public P2PSocketHost {
  public:
-  P2PSocketHostUdp(P2PSocketsHost* host, int routing_id, int id);
+  P2PSocketHostUdp(IPC::Message::Sender* message_sender,
+                   int routing_id, int id);

[Alpha Left Google, 2011/04/09 00:44:32]

nit: indentation.

[Sergey Ulanov, 2011/04/09 00:52:36]

Looks correct to me

   virtual ~P2PSocketHostUdp();
 
   // P2PSocketHost overrides.
   virtual bool Init(const net::IPEndPoint& local_address) OVERRIDE;
-  virtual void Send(const net::IPEndPoint& socket_address,
+  virtual void Send(const net::IPEndPoint& to,
                     const std::vector<char>& data) OVERRIDE;
 
  private:
+  friend class P2PSocketHostUdpTest;
+
   enum State {
     STATE_UNINITIALIZED,
     STATE_OPEN,
     STATE_ERROR,
   };
 
+  typedef std::set<net::IPEndPoint> AuthorizedPeerSet;
+
   void OnError();
   void DoRead();
   void DidCompleteRead(int result);
 
   // Callbacks for RecvFrom() and SendTo().
   void OnRecv(int result);
   void OnSend(int result);
 
   State state_;
   scoped_ptr<net::DatagramServerSocket> socket_;
   scoped_refptr<net::IOBuffer> recv_buffer_;
   net::IPEndPoint recv_address_;
   bool send_pending_;
 
+  // Set of peer for which we have received STUN binding request or
+  // response.
+  AuthorizedPeerSet authorized_peers_;
+
   net::CompletionCallbackImpl<P2PSocketHostUdp> recv_callback_;
   net::CompletionCallbackImpl<P2PSocketHostUdp> send_callback_;
 
   DISALLOW_COPY_AND_ASSIGN(P2PSocketHostUdp);
 };
 
 #endif  // CONTENT_BROWSER_RENDERER_HOST_P2P_SOCKET_HOST_UDP_H_