Security restrictions for P2P UDP Sockets.

content/browser/renderer_host/p2p_socket_host.h

Index: content/browser/renderer_host/p2p_socket_host.h
diff --git a/content/browser/renderer_host/p2p_socket_host.h b/content/browser/renderer_host/p2p_socket_host.h
index 55af872e301619998fc575ea4057b5a5fe51f298..0248b577104f070f3905df66fba2ea5a8ced88dd 100644
--- a/content/browser/renderer_host/p2p_socket_host.h
+++ b/content/browser/renderer_host/p2p_socket_host.h
@@ -7,30 +7,50 @@
 
 #include "content/common/p2p_sockets.h"
 
+#include "ipc/ipc_message.h"
 #include "net/base/ip_endpoint.h"
 
-class P2PSocketsHost;
-
 // Base class for P2P sockets used by P2PSocketsHost.
 class P2PSocketHost {
  public:
   // Creates P2PSocketHost of the specific type.
-  static P2PSocketHost* Create(P2PSocketsHost* host, int routing_id, int id,
-                               P2PSocketType type);
+  static P2PSocketHost* Create(IPC::Message::Sender* message_sender,
+                               int routing_id, int id, P2PSocketType type);
 
   virtual ~P2PSocketHost();
 
   // Initalizes the socket. Returns false when initiazations fails.
   virtual bool Init(const net::IPEndPoint& local_address) = 0;
 
-  // Sends |data| on the socket to |socket_address|.
-  virtual void Send(const net::IPEndPoint& socket_address,
+  // Sends |data| on the socket to |to|.
+  virtual void Send(const net::IPEndPoint& to,
                     const std::vector<char>& data) = 0;
 
  protected:
-  P2PSocketHost(P2PSocketsHost* host, int routing_id, int id);
-
-  P2PSocketsHost* host_;
+  enum StunMessageType {
+    STUN_BINDING_REQUEST = 0x0001,
+    STUN_BINDING_RESPONSE = 0x0101,
+    STUN_BINDING_ERROR_RESPONSE = 0x0111,
+    STUN_SHARED_SECRET_REQUEST = 0x0002,
+    STUN_SHARED_SECRET_RESPONSE = 0x0102,
+    STUN_SHARED_SECRET_ERROR_RESPONSE = 0x0112,
+    STUN_ALLOCATE_REQUEST = 0x0003,
+    STUN_ALLOCATE_RESPONSE = 0x0103,
+    STUN_ALLOCATE_ERROR_RESPONSE = 0x0113,
+    STUN_SEND_REQUEST = 0x0004,
+    STUN_SEND_RESPONSE = 0x0104,
+    STUN_SEND_ERROR_RESPONSE = 0x0114,
+    STUN_DATA_INDICATION = 0x0115
+  };
+
+  P2PSocketHost(IPC::Message::Sender* message_sender, int routing_id, int id);
+
+  // Verifies that the packet |data| has a valid STUN header. In case
+  // of success stores type of the message in |type|.
+  bool GetStunPacketType(const char* data, int data_size,
+                         StunMessageType* type);
+
+  IPC::Message::Sender* message_sender_;
   int routing_id_;
   int id_;