| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/common/sandbox_policy.h" | 5 #include "content/common/sandbox_policy.h" |
| 6 | 6 |
| 7 #include <string> | 7 #include <string> |
| 8 | 8 |
| 9 #include "base/command_line.h" | 9 #include "base/command_line.h" |
| 10 #include "base/debug/debugger.h" | 10 #include "base/debug/debugger.h" |
| 11 #include "base/debug/trace_event.h" | 11 #include "base/debug/trace_event.h" |
| 12 #include "base/file_util.h" | 12 #include "base/file_util.h" |
| 13 #include "base/logging.h" | 13 #include "base/logging.h" |
| 14 #include "base/path_service.h" | 14 #include "base/path_service.h" |
| 15 #include "base/process_util.h" | 15 #include "base/process_util.h" |
| 16 #include "base/stringprintf.h" | 16 #include "base/stringprintf.h" |
| 17 #include "base/string_util.h" | 17 #include "base/string_util.h" |
| 18 #include "base/win/windows_version.h" | 18 #include "base/win/windows_version.h" |
| 19 #include "content/common/child_process_info.h" | |
| 20 #include "content/common/debug_flags.h" | 19 #include "content/common/debug_flags.h" |
| 21 #include "content/public/common/content_client.h" | 20 #include "content/public/common/content_client.h" |
| 22 #include "content/public/common/content_switches.h" | 21 #include "content/public/common/content_switches.h" |
| 22 #include "content/public/common/process_type.h" |
| 23 #include "sandbox/src/sandbox.h" | 23 #include "sandbox/src/sandbox.h" |
| 24 #include "ui/gfx/gl/gl_switches.h" | 24 #include "ui/gfx/gl/gl_switches.h" |
| 25 | 25 |
| 26 static sandbox::BrokerServices* g_broker_services = NULL; | 26 static sandbox::BrokerServices* g_broker_services = NULL; |
| 27 | 27 |
| 28 namespace { | 28 namespace { |
| 29 | 29 |
| 30 // The DLLs listed here are known (or under strong suspicion) of causing crashes | 30 // The DLLs listed here are known (or under strong suspicion) of causing crashes |
| 31 // when they are loaded in the renderer. Note: at runtime we generate short | 31 // when they are loaded in the renderer. Note: at runtime we generate short |
| 32 // versions of the dll name only if the dll has an extension. | 32 // versions of the dll name only if the dll has an extension. |
| (...skipping 344 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 377 DCHECK(broker_services); | 377 DCHECK(broker_services); |
| 378 DCHECK(!g_broker_services); | 378 DCHECK(!g_broker_services); |
| 379 broker_services->Init(); | 379 broker_services->Init(); |
| 380 g_broker_services = broker_services; | 380 g_broker_services = broker_services; |
| 381 } | 381 } |
| 382 | 382 |
| 383 base::ProcessHandle StartProcessWithAccess(CommandLine* cmd_line, | 383 base::ProcessHandle StartProcessWithAccess(CommandLine* cmd_line, |
| 384 const FilePath& exposed_dir) { | 384 const FilePath& exposed_dir) { |
| 385 base::ProcessHandle process = 0; | 385 base::ProcessHandle process = 0; |
| 386 const CommandLine& browser_command_line = *CommandLine::ForCurrentProcess(); | 386 const CommandLine& browser_command_line = *CommandLine::ForCurrentProcess(); |
| 387 ChildProcessInfo::ProcessType type; | 387 content::ProcessType type; |
| 388 std::string type_str = cmd_line->GetSwitchValueASCII(switches::kProcessType); | 388 std::string type_str = cmd_line->GetSwitchValueASCII(switches::kProcessType); |
| 389 if (type_str == switches::kRendererProcess) { | 389 if (type_str == switches::kRendererProcess) { |
| 390 type = ChildProcessInfo::RENDER_PROCESS; | 390 type = content::PROCESS_TYPE_RENDERER; |
| 391 } else if (type_str == switches::kPluginProcess) { | 391 } else if (type_str == switches::kPluginProcess) { |
| 392 type = ChildProcessInfo::PLUGIN_PROCESS; | 392 type = content::PROCESS_TYPE_PLUGIN; |
| 393 } else if (type_str == switches::kWorkerProcess) { | 393 } else if (type_str == switches::kWorkerProcess) { |
| 394 type = ChildProcessInfo::WORKER_PROCESS; | 394 type = content::PROCESS_TYPE_WORKER; |
| 395 } else if (type_str == switches::kNaClLoaderProcess) { | 395 } else if (type_str == switches::kNaClLoaderProcess) { |
| 396 type = ChildProcessInfo::NACL_LOADER_PROCESS; | 396 type = content::PROCESS_TYPE_NACL_LOADER; |
| 397 } else if (type_str == switches::kUtilityProcess) { | 397 } else if (type_str == switches::kUtilityProcess) { |
| 398 type = ChildProcessInfo::UTILITY_PROCESS; | 398 type = content::PROCESS_TYPE_UTILITY; |
| 399 } else if (type_str == switches::kNaClBrokerProcess) { | 399 } else if (type_str == switches::kNaClBrokerProcess) { |
| 400 type = ChildProcessInfo::NACL_BROKER_PROCESS; | 400 type = content::PROCESS_TYPE_NACL_BROKER; |
| 401 } else if (type_str == switches::kGpuProcess) { | 401 } else if (type_str == switches::kGpuProcess) { |
| 402 type = ChildProcessInfo::GPU_PROCESS; | 402 type = content::PROCESS_TYPE_GPU; |
| 403 } else if (type_str == switches::kPpapiPluginProcess) { | 403 } else if (type_str == switches::kPpapiPluginProcess) { |
| 404 type = ChildProcessInfo::PPAPI_PLUGIN_PROCESS; | 404 type = content::PROCESS_TYPE_PPAPI_PLUGIN; |
| 405 } else if (type_str == switches::kPpapiBrokerProcess) { | 405 } else if (type_str == switches::kPpapiBrokerProcess) { |
| 406 type = ChildProcessInfo::PPAPI_BROKER_PROCESS; | 406 type = content::PROCESS_TYPE_PPAPI_BROKER; |
| 407 } else { | 407 } else { |
| 408 NOTREACHED(); | 408 NOTREACHED(); |
| 409 return 0; | 409 return 0; |
| 410 } | 410 } |
| 411 | 411 |
| 412 TRACE_EVENT_BEGIN_ETW("StartProcessWithAccess", 0, type_str); | 412 TRACE_EVENT_BEGIN_ETW("StartProcessWithAccess", 0, type_str); |
| 413 | 413 |
| 414 // To decide if the process is going to be sandboxed we have two cases. | 414 // To decide if the process is going to be sandboxed we have two cases. |
| 415 // First case: all process types except the nacl broker, and the plugin | 415 // First case: all process types except the nacl broker, and the plugin |
| 416 // process are sandboxed by default. | 416 // process are sandboxed by default. |
| 417 bool in_sandbox = | 417 bool in_sandbox = |
| 418 (type != ChildProcessInfo::NACL_BROKER_PROCESS) && | 418 (type != content::PROCESS_TYPE_NACL_BROKER) && |
| 419 (type != ChildProcessInfo::PLUGIN_PROCESS) && | 419 (type != content::PROCESS_TYPE_PLUGIN) && |
| 420 (type != ChildProcessInfo::PPAPI_BROKER_PROCESS); | 420 (type != content::PROCESS_TYPE_PPAPI_BROKER); |
| 421 | 421 |
| 422 // If it is the GPU process then it can be disabled by a command line flag. | 422 // If it is the GPU process then it can be disabled by a command line flag. |
| 423 if ((type == ChildProcessInfo::GPU_PROCESS) && | 423 if ((type == content::PROCESS_TYPE_GPU) && |
| 424 (browser_command_line.HasSwitch(switches::kDisableGpuSandbox))) { | 424 (browser_command_line.HasSwitch(switches::kDisableGpuSandbox))) { |
| 425 in_sandbox = false; | 425 in_sandbox = false; |
| 426 DVLOG(1) << "GPU sandbox is disabled"; | 426 DVLOG(1) << "GPU sandbox is disabled"; |
| 427 } | 427 } |
| 428 | 428 |
| 429 if (browser_command_line.HasSwitch(switches::kNoSandbox) || | 429 if (browser_command_line.HasSwitch(switches::kNoSandbox) || |
| 430 cmd_line->HasSwitch(switches::kNoSandbox)) { | 430 cmd_line->HasSwitch(switches::kNoSandbox)) { |
| 431 // The user or the caller has explicity opted-out from all sandboxing. | 431 // The user or the caller has explicity opted-out from all sandboxing. |
| 432 in_sandbox = false; | 432 in_sandbox = false; |
| 433 } | 433 } |
| (...skipping 24 matching lines...) Expand all Loading... |
| 458 // Prefetch hints on windows: | 458 // Prefetch hints on windows: |
| 459 // Using a different prefetch profile per process type will allow Windows | 459 // Using a different prefetch profile per process type will allow Windows |
| 460 // to create separate pretetch settings for browser, renderer etc. | 460 // to create separate pretetch settings for browser, renderer etc. |
| 461 cmd_line->AppendArg(base::StringPrintf("/prefetch:%d", type)); | 461 cmd_line->AppendArg(base::StringPrintf("/prefetch:%d", type)); |
| 462 | 462 |
| 463 sandbox::ResultCode result; | 463 sandbox::ResultCode result; |
| 464 PROCESS_INFORMATION target = {0}; | 464 PROCESS_INFORMATION target = {0}; |
| 465 sandbox::TargetPolicy* policy = g_broker_services->CreatePolicy(); | 465 sandbox::TargetPolicy* policy = g_broker_services->CreatePolicy(); |
| 466 | 466 |
| 467 #if !defined(NACL_WIN64) // We don't need this code on win nacl64. | 467 #if !defined(NACL_WIN64) // We don't need this code on win nacl64. |
| 468 if (type == ChildProcessInfo::PLUGIN_PROCESS && | 468 if (type == content::PROCESS_TYPE_PLUGIN && |
| 469 !browser_command_line.HasSwitch(switches::kNoSandbox) && | 469 !browser_command_line.HasSwitch(switches::kNoSandbox) && |
| 470 content::GetContentClient()->SandboxPlugin(cmd_line, policy)) { | 470 content::GetContentClient()->SandboxPlugin(cmd_line, policy)) { |
| 471 in_sandbox = true; | 471 in_sandbox = true; |
| 472 } | 472 } |
| 473 #endif | 473 #endif |
| 474 | 474 |
| 475 if (!in_sandbox) { | 475 if (!in_sandbox) { |
| 476 policy->Release(); | 476 policy->Release(); |
| 477 base::LaunchProcess(*cmd_line, base::LaunchOptions(), &process); | 477 base::LaunchProcess(*cmd_line, base::LaunchOptions(), &process); |
| 478 return process; | 478 return process; |
| 479 } | 479 } |
| 480 | 480 |
| 481 if (type == ChildProcessInfo::PLUGIN_PROCESS) { | 481 if (type == content::PROCESS_TYPE_PLUGIN) { |
| 482 AddGenericDllEvictionPolicy(policy); | 482 AddGenericDllEvictionPolicy(policy); |
| 483 AddPluginDllEvictionPolicy(policy); | 483 AddPluginDllEvictionPolicy(policy); |
| 484 } else if (type == ChildProcessInfo::GPU_PROCESS) { | 484 } else if (type == content::PROCESS_TYPE_GPU) { |
| 485 if (!AddPolicyForGPU(cmd_line, policy)) | 485 if (!AddPolicyForGPU(cmd_line, policy)) |
| 486 return 0; | 486 return 0; |
| 487 } else if (type == ChildProcessInfo::PPAPI_PLUGIN_PROCESS) { | 487 } else if (type == content::PROCESS_TYPE_PPAPI_PLUGIN) { |
| 488 if (!AddPolicyForPepperPlugin(policy)) | 488 if (!AddPolicyForPepperPlugin(policy)) |
| 489 return 0; | 489 return 0; |
| 490 } else { | 490 } else { |
| 491 AddPolicyForRenderer(policy); | 491 AddPolicyForRenderer(policy); |
| 492 // TODO(jschuh): Need get these restrictions applied to NaCl and Pepper. | 492 // TODO(jschuh): Need get these restrictions applied to NaCl and Pepper. |
| 493 // Just have to figure out what needs to be warmed up first. | 493 // Just have to figure out what needs to be warmed up first. |
| 494 if (type == ChildProcessInfo::RENDER_PROCESS || | 494 if (type == content::PROCESS_TYPE_RENDERER || |
| 495 type == ChildProcessInfo::WORKER_PROCESS) { | 495 type == content::PROCESS_TYPE_WORKER) { |
| 496 AddBaseHandleClosePolicy(policy); | 496 AddBaseHandleClosePolicy(policy); |
| 497 } | 497 } |
| 498 | 498 |
| 499 if (type_str != switches::kRendererProcess) { | 499 if (type_str != switches::kRendererProcess) { |
| 500 // Hack for Google Desktop crash. Trick GD into not injecting its DLL into | 500 // Hack for Google Desktop crash. Trick GD into not injecting its DLL into |
| 501 // this subprocess. See | 501 // this subprocess. See |
| 502 // http://code.google.com/p/chromium/issues/detail?id=25580 | 502 // http://code.google.com/p/chromium/issues/detail?id=25580 |
| 503 cmd_line->AppendSwitchASCII("ignored", " --type=renderer "); | 503 cmd_line->AppendSwitchASCII("ignored", " --type=renderer "); |
| 504 } | 504 } |
| 505 } | 505 } |
| (...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 538 DLOG(ERROR) << "Failed to launch process. Error: " << result; | 538 DLOG(ERROR) << "Failed to launch process. Error: " << result; |
| 539 return 0; | 539 return 0; |
| 540 } | 540 } |
| 541 | 541 |
| 542 // For Native Client sel_ldr processes on 32-bit Windows, reserve 1 GB of | 542 // For Native Client sel_ldr processes on 32-bit Windows, reserve 1 GB of |
| 543 // address space to prevent later failure due to address space fragmentation | 543 // address space to prevent later failure due to address space fragmentation |
| 544 // from .dll loading. The NaCl process will attempt to locate this space by | 544 // from .dll loading. The NaCl process will attempt to locate this space by |
| 545 // scanning the address space using VirtualQuery. | 545 // scanning the address space using VirtualQuery. |
| 546 // TODO(bbudge) Handle the --no-sandbox case. | 546 // TODO(bbudge) Handle the --no-sandbox case. |
| 547 // http://code.google.com/p/nativeclient/issues/detail?id=2131 | 547 // http://code.google.com/p/nativeclient/issues/detail?id=2131 |
| 548 if (type == ChildProcessInfo::NACL_LOADER_PROCESS && | 548 if (type == content::PROCESS_TYPE_NACL_LOADER && |
| 549 (base::win::OSInfo::GetInstance()->wow64_status() == | 549 (base::win::OSInfo::GetInstance()->wow64_status() == |
| 550 base::win::OSInfo::WOW64_DISABLED)) { | 550 base::win::OSInfo::WOW64_DISABLED)) { |
| 551 const SIZE_T kOneGigabyte = 1 << 30; | 551 const SIZE_T kOneGigabyte = 1 << 30; |
| 552 void *nacl_mem = VirtualAllocEx(target.hProcess, | 552 void *nacl_mem = VirtualAllocEx(target.hProcess, |
| 553 NULL, | 553 NULL, |
| 554 kOneGigabyte, | 554 kOneGigabyte, |
| 555 MEM_RESERVE, | 555 MEM_RESERVE, |
| 556 PAGE_NOACCESS); | 556 PAGE_NOACCESS); |
| 557 if (!nacl_mem) { | 557 if (!nacl_mem) { |
| 558 DLOG(WARNING) << "Failed to reserve address space for Native Client"; | 558 DLOG(WARNING) << "Failed to reserve address space for Native Client"; |
| 559 } | 559 } |
| 560 } | 560 } |
| 561 | 561 |
| 562 ResumeThread(target.hThread); | 562 ResumeThread(target.hThread); |
| 563 CloseHandle(target.hThread); | 563 CloseHandle(target.hThread); |
| 564 process = target.hProcess; | 564 process = target.hProcess; |
| 565 | 565 |
| 566 // Help the process a little. It can't start the debugger by itself if | 566 // Help the process a little. It can't start the debugger by itself if |
| 567 // the process is in a sandbox. | 567 // the process is in a sandbox. |
| 568 if (child_needs_help) | 568 if (child_needs_help) |
| 569 base::debug::SpawnDebuggerOnProcess(target.dwProcessId); | 569 base::debug::SpawnDebuggerOnProcess(target.dwProcessId); |
| 570 | 570 |
| 571 return process; | 571 return process; |
| 572 } | 572 } |
| 573 | 573 |
| 574 } // namespace sandbox | 574 } // namespace sandbox |
| OLD | NEW |