Make sandboxed Flash work under UIPI

content/browser/plugin_process_host.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/plugin_process_host.h"
 
 #if defined(OS_WIN)
 #include <windows.h>
 #elif defined(OS_POSIX)
 #include <utility>  // for pair<>
@@ skipping 28 matching lines @@
 #include "ui/gfx/gtk_native_view_id_manager.h"
 #endif
 
 #if defined(OS_MACOSX)
 #include "base/mac/mac_util.h"
 #include "content/common/plugin_carbon_interpose_constants_mac.h"
 #include "ui/gfx/rect.h"
 #endif
 
 #if defined(OS_WIN)
+#include "webkit/plugins/npapi/webplugin_delegate_impl.h"
+
 void PluginProcessHost::OnPluginWindowDestroyed(HWND window, HWND parent) {
   // The window is destroyed at this point, we just care about its parent, which
   // is the intermediate window we created.
   std::set<HWND>::iterator window_index =
       plugin_parent_windows_set_.find(parent);
   if (window_index == plugin_parent_windows_set_.end())
     return;
 
   plugin_parent_windows_set_.erase(window_index);
   PostMessage(parent, WM_CLOSE, 0, 0);
 }
 
 void PluginProcessHost::AddWindow(HWND window) {
   plugin_parent_windows_set_.insert(window);
 }
 
+void PluginProcessHost::OnReparentPluginWindow(HWND window, HWND parent) {
+  // Reparent only to our process.
+  DWORD process_id = 0;
+  ::GetWindowThreadProcessId(parent, &process_id);
+  if (::IsWindow(window) && process_id != ::GetCurrentProcessId())
+    return;
+

[cpu_(ooo_6.6-7.5), 2011/06/07 01:03:36]

If IsWindow() returns false you continue?

+  if (webkit::npapi::WebPluginDelegateImpl::IsDummyActivationWindow(window)) {
+    ::SetWindowLongPtr(window, GWL_STYLE, WS_CHILD);
+  } else {
+    ::SetWindowLongPtr(window, GWL_STYLE, WS_CHILD | WS_CLIPCHILDREN |
+                       WS_CLIPSIBLINGS);
+  }
+  ::SetParent(window, parent);
+}
 #endif  // defined(OS_WIN)
 
 #if defined(TOOLKIT_USES_GTK)
 void PluginProcessHost::OnMapNativeViewId(gfx::NativeViewId id,
                                           gfx::PluginWindowHandle* output) {
   *output = 0;
   GtkNativeViewManager::GetInstance()->GetXIDForId(output, id);
 }
 #endif  // defined(TOOLKIT_USES_GTK)
 
@@ skipping 163 matching lines @@
   BrowserChildProcessHost::ForceShutdown();
 }
 
 bool PluginProcessHost::OnMessageReceived(const IPC::Message& msg) {
   bool handled = true;
   IPC_BEGIN_MESSAGE_MAP(PluginProcessHost, msg)
     IPC_MESSAGE_HANDLER(PluginProcessHostMsg_ChannelCreated, OnChannelCreated)
 #if defined(OS_WIN)
     IPC_MESSAGE_HANDLER(PluginProcessHostMsg_PluginWindowDestroyed,
                         OnPluginWindowDestroyed)
+    IPC_MESSAGE_HANDLER(PluginProcessHostMsg_ReparentPluginWindow,
+                        OnReparentPluginWindow)
 #endif
 #if defined(TOOLKIT_USES_GTK)
     IPC_MESSAGE_HANDLER(PluginProcessHostMsg_MapNativeViewId,
                         OnMapNativeViewId)
 #endif
 #if defined(OS_MACOSX)
     IPC_MESSAGE_HANDLER(PluginProcessHostMsg_PluginSelectWindow,
                         OnPluginSelectWindow)
     IPC_MESSAGE_HANDLER(PluginProcessHostMsg_PluginShowWindow,
                         OnPluginShowWindow)
@@ skipping 68 matching lines @@
   }
 }
 
 void PluginProcessHost::OnChannelCreated(
     const IPC::ChannelHandle& channel_handle) {
   Client* client = sent_requests_.front();
 
   client->OnChannelOpened(channel_handle);
   sent_requests_.pop();
 }