| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // A mini-zygote specifically for Native Client. | 5 // A mini-zygote specifically for Native Client. |
| 6 | 6 |
| 7 #include "chrome/common/nacl_helper_linux.h" | 7 #include "chrome/common/nacl_helper_linux.h" |
| 8 | 8 |
| 9 #include <errno.h> | 9 #include <errno.h> |
| 10 #include <stdlib.h> | 10 #include <stdlib.h> |
| 11 #include <sys/socket.h> | 11 #include <sys/socket.h> |
| 12 #include <sys/types.h> | 12 #include <sys/types.h> |
| 13 | 13 |
| 14 #include <string> | 14 #include <string> |
| 15 #include <vector> | 15 #include <vector> |
| 16 | 16 |
| 17 #include "base/at_exit.h" | 17 #include "base/at_exit.h" |
| 18 #include "base/eintr_wrapper.h" | 18 #include "base/eintr_wrapper.h" |
| 19 #include "base/logging.h" | 19 #include "base/logging.h" |
| 20 #include "base/message_loop.h" | 20 #include "base/message_loop.h" |
| 21 #include "base/rand_util.h" | 21 #include "base/rand_util.h" |
| 22 #include "chrome/nacl/nacl_listener.h" | 22 #include "chrome/nacl/nacl_listener.h" |
| 23 #include "content/common/main_function_params.h" | 23 #include "content/common/main_function_params.h" |
| 24 #include "content/common/unix_domain_socket_posix.h" | 24 #include "content/common/unix_domain_socket_posix.h" |
| 25 #include "ipc/ipc_switches.h" | 25 #include "ipc/ipc_switches.h" |
| 26 #include "native_client/src/trusted/service_runtime/sel_memory.h" | |
| 27 | 26 |
| 28 namespace { | 27 namespace { |
| 29 | 28 |
| 30 bool g_suid_sandbox_active; | 29 bool g_suid_sandbox_active; |
| 31 | 30 |
| 32 // The child must mimic the behavior of zygote_main_linux.cc on the child | 31 // The child must mimic the behavior of zygote_main_linux.cc on the child |
| 33 // side of the fork. See zygote_main_linux.cc:HandleForkRequest from | 32 // side of the fork. See zygote_main_linux.cc:HandleForkRequest from |
| 34 // if (!child) { | 33 // if (!child) { |
| 35 // Note: this code doesn't attempt to support SELINUX or the SECCOMP sandbox. | 34 // Note: this code doesn't attempt to support SELINUX or the SECCOMP sandbox. |
| 36 void BecomeNaClLoader(const std::vector<int>& child_fds) { | 35 void BecomeNaClLoader(const std::vector<int>& child_fds) { |
| (...skipping 73 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 110 // Now tell childpid to the Chrome zygote. | 109 // Now tell childpid to the Chrome zygote. |
| 111 if (HANDLE_EINTR(send(kNaClZygoteDescriptor, | 110 if (HANDLE_EINTR(send(kNaClZygoteDescriptor, |
| 112 &childpid, sizeof(childpid), MSG_EOR)) | 111 &childpid, sizeof(childpid), MSG_EOR)) |
| 113 != sizeof(childpid)) { | 112 != sizeof(childpid)) { |
| 114 LOG(ERROR) << "*** send() to zygote failed"; | 113 LOG(ERROR) << "*** send() to zygote failed"; |
| 115 } | 114 } |
| 116 } | 115 } |
| 117 | 116 |
| 118 } // namespace | 117 } // namespace |
| 119 | 118 |
| 120 static const char kNaClHelperAtZero[] = "at-zero"; | 119 static const void* g_nacl_reserved_space = NULL; |
| 120 extern "C" __attribute__((visibility("default"))) |
| 121 const void* nacl_helper_get_1G_address() { |
| 122 return g_nacl_reserved_space; |
| 123 } |
| 121 | 124 |
| 122 int main(int argc, char *argv[]) { | 125 // nacl_helper_init does the real work of this module. It is invoked as |
| 126 // a static constructor and never returns, preventing main() from the |
| 127 // nacl_helper_bootstrap program from being called. |
| 128 // |
| 129 // NOTE This routine must not return. |
| 130 extern "C" __attribute__((visibility("default"))) |
| 131 void nacl_helper_init(int argc, char *argv[], |
| 132 const char *nacl_reserved_space) { |
| 123 CommandLine::Init(argc, argv); | 133 CommandLine::Init(argc, argv); |
| 124 base::AtExitManager exit_manager; | 134 base::AtExitManager exit_manager; |
| 125 base::RandUint64(); // acquire /dev/urandom fd before sandbox is raised | 135 base::RandUint64(); // acquire /dev/urandom fd before sandbox is raised |
| 126 std::vector<int> empty; // for SendMsg() calls | 136 std::vector<int> empty; // for SendMsg() calls |
| 127 | 137 |
| 128 g_suid_sandbox_active = (NULL != getenv("SBX_D")); | 138 g_suid_sandbox_active = (NULL != getenv("SBX_D")); |
| 129 | 139 g_nacl_reserved_space = nacl_reserved_space; |
| 130 if (CommandLine::ForCurrentProcess()->HasSwitch(kNaClHelperAtZero)) { | 140 if (!nacl_reserved_space) { |
| 131 g_nacl_prereserved_sandbox_addr = (void *) (uintptr_t) 0x10000; | 141 VLOG(1) << "nacl_reserved_space is NULL"; |
| 142 } else { |
| 143 VLOG(1) << "nacl_reserved_space is at " |
| 144 << (void *)nacl_reserved_space; |
| 132 } | 145 } |
| 133 | |
| 134 // Send the zygote a message to let it know we are ready to help | 146 // Send the zygote a message to let it know we are ready to help |
| 135 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, | 147 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, |
| 136 kNaClHelperStartupAck, | 148 kNaClHelperStartupAck, |
| 137 sizeof(kNaClHelperStartupAck), empty)) { | 149 sizeof(kNaClHelperStartupAck), empty)) { |
| 138 LOG(ERROR) << "*** send() to zygote failed"; | 150 LOG(ERROR) << "*** send() to zygote failed"; |
| 139 } | 151 } |
| 140 | 152 |
| 141 while (true) { | 153 while (true) { |
| 142 int badpid = -1; | 154 int badpid = -1; |
| 143 std::vector<int> fds; | 155 std::vector<int> fds; |
| (...skipping 21 matching lines...) Expand all Loading... |
| 165 } | 177 } |
| 166 } | 178 } |
| 167 // if fork fails, send PID=-1 to zygote | 179 // if fork fails, send PID=-1 to zygote |
| 168 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, &badpid, | 180 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, &badpid, |
| 169 sizeof(badpid), empty)) { | 181 sizeof(badpid), empty)) { |
| 170 LOG(ERROR) << "*** send() to zygote failed"; | 182 LOG(ERROR) << "*** send() to zygote failed"; |
| 171 } | 183 } |
| 172 } | 184 } |
| 173 CHECK(false); // This routine must not return | 185 CHECK(false); // This routine must not return |
| 174 } | 186 } |
| OLD | NEW |