| OLD | NEW |
| (Empty) | |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "content/common/handle_enumerator.h" |
| 6 |
| 7 #include <windows.h> |
| 8 #include <map> |
| 9 |
| 10 #include "base/command_line.h" |
| 11 #include "base/logging.h" |
| 12 #include "base/process.h" |
| 13 #include "base/process_util.h" |
| 14 #include "base/utf_string_conversions.h" |
| 15 #include "base/win/windows_version.h" |
| 16 #include "content/common/content_switches.h" |
| 17 #include "content/common/result_codes.h" |
| 18 #include "sandbox/src/handle_table.h" |
| 19 |
| 20 namespace { |
| 21 |
| 22 typedef std::map<const string16, content::HandleType> HandleTypeMap; |
| 23 |
| 24 HandleTypeMap& MakeHandleTypeMap() { |
| 25 HandleTypeMap& handle_types = *(new HandleTypeMap()); |
| 26 handle_types[sandbox::HandleTable::kTypeProcess] = content::ProcessHandle; |
| 27 handle_types[sandbox::HandleTable::kTypeThread] = content::ThreadHandle; |
| 28 handle_types[sandbox::HandleTable::kTypeFile] = content::FileHandle; |
| 29 handle_types[sandbox::HandleTable::kTypeDirectory] = |
| 30 content::DirectoryHandle; |
| 31 handle_types[sandbox::HandleTable::kTypeKey] = content::KeyHandle; |
| 32 handle_types[sandbox::HandleTable::kTypeWindowStation] = |
| 33 content::WindowStationHandle; |
| 34 handle_types[sandbox::HandleTable::kTypeDesktop] = content::DesktopHandle; |
| 35 handle_types[sandbox::HandleTable::kTypeService] = content::ServiceHandle; |
| 36 handle_types[sandbox::HandleTable::kTypeMutex] = content::MutexHandle; |
| 37 handle_types[sandbox::HandleTable::kTypeSemaphore] = |
| 38 content::SemaphoreHandle; |
| 39 handle_types[sandbox::HandleTable::kTypeEvent] = content::EventHandle; |
| 40 handle_types[sandbox::HandleTable::kTypeTimer] = content::TimerHandle; |
| 41 handle_types[sandbox::HandleTable::kTypeNamedPipe] = |
| 42 content::NamedPipeHandle; |
| 43 handle_types[sandbox::HandleTable::kTypeJobObject] = content::JobHandle; |
| 44 handle_types[sandbox::HandleTable::kTypeFileMap] = content::FileMapHandle; |
| 45 handle_types[sandbox::HandleTable::kTypeAlpcPort] = |
| 46 content::AlpcPortHandle; |
| 47 |
| 48 return handle_types; |
| 49 } |
| 50 |
| 51 } // namespace |
| 52 |
| 53 namespace content { |
| 54 |
| 55 const size_t kMaxHandleNameLength = 1024; |
| 56 |
| 57 void HandleEnumerator::EnumerateHandles() { |
| 58 sandbox::HandleTable handles; |
| 59 std::string process_type = |
| 60 CommandLine::ForCurrentProcess()->GetSwitchValueASCII( |
| 61 switches::kProcessType); |
| 62 string16 output = ASCIIToUTF16(process_type); |
| 63 output.append(ASCIIToUTF16(" process - Handles at shutdown:\n")); |
| 64 for (sandbox::HandleTable::Iterator sys_handle |
| 65 = handles.HandlesForProcess(::GetCurrentProcessId()); |
| 66 sys_handle != handles.end(); ++sys_handle) { |
| 67 HandleType current_type = StringToHandleType(sys_handle->Type()); |
| 68 if (!all_handles_ && (current_type != ProcessHandle && |
| 69 current_type != FileHandle && |
| 70 current_type != DirectoryHandle && |
| 71 current_type != KeyHandle && |
| 72 current_type != WindowStationHandle && |
| 73 current_type != DesktopHandle && |
| 74 current_type != ServiceHandle)) |
| 75 continue; |
| 76 |
| 77 output += ASCIIToUTF16("["); |
| 78 output += sys_handle->Type(); |
| 79 output += ASCIIToUTF16("] ("); |
| 80 output += sys_handle->Name(); |
| 81 output += ASCIIToUTF16(")\n"); |
| 82 output += GetAccessString(current_type, |
| 83 sys_handle->handle_entry()->GrantedAccess); |
| 84 } |
| 85 LOG(INFO) << output; |
| 86 } |
| 87 |
| 88 HandleType StringToHandleType(const string16& type) { |
| 89 static HandleTypeMap handle_types = MakeHandleTypeMap(); |
| 90 HandleTypeMap::iterator result = handle_types.find(type); |
| 91 return result != handle_types.end() ? result->second : OtherHandle; |
| 92 } |
| 93 |
| 94 string16 GetAccessString(HandleType handle_type, |
| 95 ACCESS_MASK access) { |
| 96 string16 output; |
| 97 if (access & GENERIC_READ) |
| 98 output.append(ASCIIToUTF16("\tGENERIC_READ\n")); |
| 99 if (access & GENERIC_WRITE) |
| 100 output.append(ASCIIToUTF16("\tGENERIC_WRITE\n")); |
| 101 if (access & GENERIC_EXECUTE) |
| 102 output.append(ASCIIToUTF16("\tGENERIC_EXECUTE\n")); |
| 103 if (access & GENERIC_ALL) |
| 104 output.append(ASCIIToUTF16("\tGENERIC_ALL\n")); |
| 105 if (access & DELETE) |
| 106 output.append(ASCIIToUTF16("\tDELETE\n")); |
| 107 if (access & READ_CONTROL) |
| 108 output.append(ASCIIToUTF16("\tREAD_CONTROL\n")); |
| 109 if (access & WRITE_DAC) |
| 110 output.append(ASCIIToUTF16("\tWRITE_DAC\n")); |
| 111 if (access & WRITE_OWNER) |
| 112 output.append(ASCIIToUTF16("\tWRITE_OWNER\n")); |
| 113 if (access & SYNCHRONIZE) |
| 114 output.append(ASCIIToUTF16("\tSYNCHRONIZE\n")); |
| 115 |
| 116 switch (handle_type) { |
| 117 case ProcessHandle: |
| 118 if (access & PROCESS_CREATE_PROCESS) |
| 119 output.append(ASCIIToUTF16("\tPROCESS_CREATE_PROCESS\n")); |
| 120 if (access & PROCESS_CREATE_THREAD) |
| 121 output.append(ASCIIToUTF16("\tPROCESS_CREATE_THREAD\n")); |
| 122 if (access & PROCESS_DUP_HANDLE) |
| 123 output.append(ASCIIToUTF16("\tPROCESS_DUP_HANDLE\n")); |
| 124 if (access & PROCESS_QUERY_INFORMATION) |
| 125 output.append(ASCIIToUTF16("\tPROCESS_QUERY_INFORMATION\n")); |
| 126 if (access & PROCESS_QUERY_LIMITED_INFORMATION) |
| 127 output.append(ASCIIToUTF16("\tPROCESS_QUERY_LIMITED_INFORMATION\n")); |
| 128 if (access & PROCESS_SET_INFORMATION) |
| 129 output.append(ASCIIToUTF16("\tPROCESS_SET_INFORMATION\n")); |
| 130 if (access & PROCESS_SET_QUOTA) |
| 131 output.append(ASCIIToUTF16("\tPROCESS_SET_QUOTA\n")); |
| 132 if (access & PROCESS_SUSPEND_RESUME) |
| 133 output.append(ASCIIToUTF16("\tPROCESS_SUSPEND_RESUME\n")); |
| 134 if (access & PROCESS_TERMINATE) |
| 135 output.append(ASCIIToUTF16("\tPROCESS_TERMINATE\n")); |
| 136 if (access & PROCESS_VM_OPERATION) |
| 137 output.append(ASCIIToUTF16("\tPROCESS_VM_OPERATION\n")); |
| 138 if (access & PROCESS_VM_READ) |
| 139 output.append(ASCIIToUTF16("\tPROCESS_VM_READ\n")); |
| 140 if (access & PROCESS_VM_WRITE) |
| 141 output.append(ASCIIToUTF16("\tPROCESS_VM_WRITE\n")); |
| 142 break; |
| 143 case ThreadHandle: |
| 144 if (access & THREAD_DIRECT_IMPERSONATION) |
| 145 output.append(ASCIIToUTF16("\tTHREAD_DIRECT_IMPERSONATION\n")); |
| 146 if (access & THREAD_GET_CONTEXT) |
| 147 output.append(ASCIIToUTF16("\tTHREAD_GET_CONTEXT\n")); |
| 148 if (access & THREAD_IMPERSONATE) |
| 149 output.append(ASCIIToUTF16("\tTHREAD_IMPERSONATE\n")); |
| 150 if (access & THREAD_QUERY_INFORMATION ) |
| 151 output.append(ASCIIToUTF16("\tTHREAD_QUERY_INFORMATION\n")); |
| 152 if (access & THREAD_QUERY_LIMITED_INFORMATION) |
| 153 output.append(ASCIIToUTF16("\tTHREAD_QUERY_LIMITED_INFORMATION\n")); |
| 154 if (access & THREAD_SET_CONTEXT) |
| 155 output.append(ASCIIToUTF16("\tTHREAD_SET_CONTEXT\n")); |
| 156 if (access & THREAD_SET_INFORMATION) |
| 157 output.append(ASCIIToUTF16("\tTHREAD_SET_INFORMATION\n")); |
| 158 if (access & THREAD_SET_LIMITED_INFORMATION) |
| 159 output.append(ASCIIToUTF16("\tTHREAD_SET_LIMITED_INFORMATION\n")); |
| 160 if (access & THREAD_SET_THREAD_TOKEN) |
| 161 output.append(ASCIIToUTF16("\tTHREAD_SET_THREAD_TOKEN\n")); |
| 162 if (access & THREAD_SUSPEND_RESUME) |
| 163 output.append(ASCIIToUTF16("\tTHREAD_SUSPEND_RESUME\n")); |
| 164 if (access & THREAD_TERMINATE) |
| 165 output.append(ASCIIToUTF16("\tTHREAD_TERMINATE\n")); |
| 166 break; |
| 167 case FileHandle: |
| 168 if (access & FILE_APPEND_DATA) |
| 169 output.append(ASCIIToUTF16("\tFILE_APPEND_DATA\n")); |
| 170 if (access & FILE_EXECUTE) |
| 171 output.append(ASCIIToUTF16("\tFILE_EXECUTE\n")); |
| 172 if (access & FILE_READ_ATTRIBUTES) |
| 173 output.append(ASCIIToUTF16("\tFILE_READ_ATTRIBUTES\n")); |
| 174 if (access & FILE_READ_DATA) |
| 175 output.append(ASCIIToUTF16("\tFILE_READ_DATA\n")); |
| 176 if (access & FILE_READ_EA) |
| 177 output.append(ASCIIToUTF16("\tFILE_READ_EA\n")); |
| 178 if (access & FILE_WRITE_ATTRIBUTES) |
| 179 output.append(ASCIIToUTF16("\tFILE_WRITE_ATTRIBUTES\n")); |
| 180 if (access & FILE_WRITE_DATA) |
| 181 output.append(ASCIIToUTF16("\tFILE_WRITE_DATA\n")); |
| 182 if (access & FILE_WRITE_EA) |
| 183 output.append(ASCIIToUTF16("\tFILE_WRITE_EA\n")); |
| 184 if (access & FILE_WRITE_EA) |
| 185 output.append(ASCIIToUTF16("\tFILE_WRITE_EA\n")); |
| 186 break; |
| 187 case DirectoryHandle: |
| 188 if (access & FILE_ADD_FILE) |
| 189 output.append(ASCIIToUTF16("\tFILE_ADD_FILE\n")); |
| 190 if (access & FILE_ADD_SUBDIRECTORY) |
| 191 output.append(ASCIIToUTF16("\tFILE_ADD_SUBDIRECTORY\n")); |
| 192 if (access & FILE_APPEND_DATA) |
| 193 output.append(ASCIIToUTF16("\tFILE_APPEND_DATA\n")); |
| 194 if (access & FILE_DELETE_CHILD) |
| 195 output.append(ASCIIToUTF16("\tFILE_DELETE_CHILD\n")); |
| 196 if (access & FILE_LIST_DIRECTORY) |
| 197 output.append(ASCIIToUTF16("\tFILE_LIST_DIRECTORY\n")); |
| 198 if (access & FILE_READ_DATA) |
| 199 output.append(ASCIIToUTF16("\tFILE_READ_DATA\n")); |
| 200 if (access & FILE_TRAVERSE) |
| 201 output.append(ASCIIToUTF16("\tFILE_TRAVERSE\n")); |
| 202 if (access & FILE_WRITE_DATA) |
| 203 output.append(ASCIIToUTF16("\tFILE_WRITE_DATA\n")); |
| 204 break; |
| 205 case KeyHandle: |
| 206 if (access & KEY_CREATE_LINK) |
| 207 output.append(ASCIIToUTF16("\tKEY_CREATE_LINK\n")); |
| 208 if (access & KEY_CREATE_SUB_KEY) |
| 209 output.append(ASCIIToUTF16("\tKEY_CREATE_SUB_KEY\n")); |
| 210 if (access & KEY_ENUMERATE_SUB_KEYS) |
| 211 output.append(ASCIIToUTF16("\tKEY_ENUMERATE_SUB_KEYS\n")); |
| 212 if (access & KEY_EXECUTE) |
| 213 output.append(ASCIIToUTF16("\tKEY_EXECUTE\n")); |
| 214 if (access & KEY_NOTIFY) |
| 215 output.append(ASCIIToUTF16("\tKEY_NOTIFY\n")); |
| 216 if (access & KEY_QUERY_VALUE) |
| 217 output.append(ASCIIToUTF16("\tKEY_QUERY_VALUE\n")); |
| 218 if (access & KEY_READ) |
| 219 output.append(ASCIIToUTF16("\tKEY_READ\n")); |
| 220 if (access & KEY_SET_VALUE) |
| 221 output.append(ASCIIToUTF16("\tKEY_SET_VALUE\n")); |
| 222 if (access & KEY_WOW64_32KEY) |
| 223 output.append(ASCIIToUTF16("\tKEY_WOW64_32KEY\n")); |
| 224 if (access & KEY_WOW64_64KEY) |
| 225 output.append(ASCIIToUTF16("\tKEY_WOW64_64KEY\n")); |
| 226 break; |
| 227 case WindowStationHandle: |
| 228 if (access & WINSTA_ACCESSCLIPBOARD) |
| 229 output.append(ASCIIToUTF16("\tWINSTA_ACCESSCLIPBOARD\n")); |
| 230 if (access & WINSTA_ACCESSGLOBALATOMS) |
| 231 output.append(ASCIIToUTF16("\tWINSTA_ACCESSGLOBALATOMS\n")); |
| 232 if (access & WINSTA_CREATEDESKTOP) |
| 233 output.append(ASCIIToUTF16("\tWINSTA_CREATEDESKTOP\n")); |
| 234 if (access & WINSTA_ENUMDESKTOPS) |
| 235 output.append(ASCIIToUTF16("\tWINSTA_ENUMDESKTOPS\n")); |
| 236 if (access & WINSTA_ENUMERATE) |
| 237 output.append(ASCIIToUTF16("\tWINSTA_ENUMERATE\n")); |
| 238 if (access & WINSTA_EXITWINDOWS) |
| 239 output.append(ASCIIToUTF16("\tWINSTA_EXITWINDOWS\n")); |
| 240 if (access & WINSTA_READATTRIBUTES) |
| 241 output.append(ASCIIToUTF16("\tWINSTA_READATTRIBUTES\n")); |
| 242 if (access & WINSTA_READSCREEN) |
| 243 output.append(ASCIIToUTF16("\tWINSTA_READSCREEN\n")); |
| 244 if (access & WINSTA_WRITEATTRIBUTES) |
| 245 output.append(ASCIIToUTF16("\tWINSTA_WRITEATTRIBUTES\n")); |
| 246 break; |
| 247 case DesktopHandle: |
| 248 if (access & DESKTOP_CREATEMENU) |
| 249 output.append(ASCIIToUTF16("\tDESKTOP_CREATEMENU\n")); |
| 250 if (access & DESKTOP_CREATEWINDOW) |
| 251 output.append(ASCIIToUTF16("\tDESKTOP_CREATEWINDOW\n")); |
| 252 if (access & DESKTOP_ENUMERATE) |
| 253 output.append(ASCIIToUTF16("\tDESKTOP_ENUMERATE\n")); |
| 254 if (access & DESKTOP_HOOKCONTROL) |
| 255 output.append(ASCIIToUTF16("\tDESKTOP_HOOKCONTROL\n")); |
| 256 if (access & DESKTOP_JOURNALPLAYBACK) |
| 257 output.append(ASCIIToUTF16("\tDESKTOP_JOURNALPLAYBACK\n")); |
| 258 if (access & DESKTOP_JOURNALRECORD) |
| 259 output.append(ASCIIToUTF16("\tDESKTOP_JOURNALRECORD\n")); |
| 260 if (access & DESKTOP_READOBJECTS) |
| 261 output.append(ASCIIToUTF16("\tDESKTOP_READOBJECTS\n")); |
| 262 if (access & DESKTOP_SWITCHDESKTOP) |
| 263 output.append(ASCIIToUTF16("\tDESKTOP_SWITCHDESKTOP\n")); |
| 264 if (access & DESKTOP_WRITEOBJECTS) |
| 265 output.append(ASCIIToUTF16("\tDESKTOP_WRITEOBJECTS\n")); |
| 266 break; |
| 267 case ServiceHandle: |
| 268 if (access & SC_MANAGER_CREATE_SERVICE) |
| 269 output.append(ASCIIToUTF16("\tSC_MANAGER_CREATE_SERVICE\n")); |
| 270 if (access & SC_MANAGER_CONNECT) |
| 271 output.append(ASCIIToUTF16("\tSC_MANAGER_CONNECT\n")); |
| 272 if (access & SC_MANAGER_ENUMERATE_SERVICE ) |
| 273 output.append(ASCIIToUTF16("\tSC_MANAGER_ENUMERATE_SERVICE\n")); |
| 274 if (access & SC_MANAGER_LOCK) |
| 275 output.append(ASCIIToUTF16("\tSC_MANAGER_LOCK\n")); |
| 276 if (access & SC_MANAGER_MODIFY_BOOT_CONFIG ) |
| 277 output.append(ASCIIToUTF16("\tSC_MANAGER_MODIFY_BOOT_CONFIG\n")); |
| 278 if (access & SC_MANAGER_QUERY_LOCK_STATUS ) |
| 279 output.append(ASCIIToUTF16("\tSC_MANAGER_QUERY_LOCK_STATUS\n")); |
| 280 break; |
| 281 case EventHandle: |
| 282 if (access & EVENT_MODIFY_STATE) |
| 283 output.append(ASCIIToUTF16("\tEVENT_MODIFY_STATE\n")); |
| 284 break; |
| 285 case MutexHandle: |
| 286 if (access & MUTEX_MODIFY_STATE) |
| 287 output.append(ASCIIToUTF16("\tMUTEX_MODIFY_STATE\n")); |
| 288 break; |
| 289 case SemaphoreHandle: |
| 290 if (access & SEMAPHORE_MODIFY_STATE) |
| 291 output.append(ASCIIToUTF16("\tSEMAPHORE_MODIFY_STATE\n")); |
| 292 break; |
| 293 case TimerHandle: |
| 294 if (access & TIMER_MODIFY_STATE) |
| 295 output.append(ASCIIToUTF16("\tTIMER_MODIFY_STATE\n")); |
| 296 if (access & TIMER_QUERY_STATE) |
| 297 output.append(ASCIIToUTF16("\tTIMER_QUERY_STATE\n")); |
| 298 break; |
| 299 case NamedPipeHandle: |
| 300 if (access & PIPE_ACCESS_INBOUND) |
| 301 output.append(ASCIIToUTF16("\tPIPE_ACCESS_INBOUND\n")); |
| 302 if (access & PIPE_ACCESS_OUTBOUND) |
| 303 output.append(ASCIIToUTF16("\tPIPE_ACCESS_OUTBOUND\n")); |
| 304 break; |
| 305 case JobHandle: |
| 306 if (access & JOB_OBJECT_ASSIGN_PROCESS) |
| 307 output.append(ASCIIToUTF16("\tJOB_OBJECT_ASSIGN_PROCESS\n")); |
| 308 if (access & JOB_OBJECT_QUERY) |
| 309 output.append(ASCIIToUTF16("\tJOB_OBJECT_QUERY\n")); |
| 310 if (access & JOB_OBJECT_SET_ATTRIBUTES) |
| 311 output.append(ASCIIToUTF16("\tJOB_OBJECT_SET_ATTRIBUTES\n")); |
| 312 if (access & JOB_OBJECT_SET_SECURITY_ATTRIBUTES) |
| 313 output.append(ASCIIToUTF16("\tJOB_OBJECT_SET_SECURITY_ATTRIBUTES\n")); |
| 314 if (access & JOB_OBJECT_TERMINATE) |
| 315 output.append(ASCIIToUTF16("\tJOB_OBJECT_TERMINATE\n")); |
| 316 break; |
| 317 case FileMapHandle: |
| 318 if (access & FILE_MAP_EXECUTE) |
| 319 output.append(ASCIIToUTF16("\tFILE_MAP_EXECUTE\n")); |
| 320 if (access & FILE_MAP_READ) |
| 321 output.append(ASCIIToUTF16("\tFILE_MAP_READ\n")); |
| 322 if (access & FILE_MAP_WRITE) |
| 323 output.append(ASCIIToUTF16("\tFILE_MAP_WRITE\n")); |
| 324 break; |
| 325 } |
| 326 return output; |
| 327 } |
| 328 |
| 329 } // namespace content |
| 330 |
| OLD | NEW |