Handle-passing: Allow a handle-passing function to be supplied by Chromium

src/shared/imc/nacl_imc_c.h

 /*
  * Copyright (c) 2012 The Native Client Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 
 /*
  * Nacl inter-module communication primitives.
  * Primitive NaCl socket and shared memory functions which provide a portable
@@ skipping 218 matching lines @@
  *         kInvalidHandle on failure.
  */
 typedef NaClHandle (*NaClCreateMemoryObjectFunc)(size_t length, int executable);
 
 /*
  * This allows an alternative implementation of NaClCreateMemoryObject()
  * to be provided that works in an outer sandbox.
  */
 void NaClSetCreateMemoryObjectFunc(NaClCreateMemoryObjectFunc func);
 
+#if NACL_WINDOWS
+/*
+ * Type of function supplied to NaClSetBrokerDuplicateHandleFunc().
+ * Such a function copies a Windows handle into the target process
+ * with the given process ID.  This is a more restricted version of
+ * Windows' DuplicateHandle() that can send handles but not retrieve
+ * them.
+ */
+typedef int (*NaClBrokerDuplicateHandleFunc)(NaClHandle source_handle,
+                                             uint32_t process_id,

[sehr (please use chromium), 2012/04/10 21:27:35]

perhaps "target_process_id" just for emphasis.

[Mark Seaborn, 2012/04/10 21:47:23]

Done.

+                                             NaClHandle *target_handle,
+                                             uint32_t desired_access,
+                                             uint32_t options);
+
+/*
+ * This allows a replacement for Windows' DuplicateHandle() to be
+ * provided that works in an outer sandbox.
+ */
+void NaClSetBrokerDuplicateHandleFunc(NaClBrokerDuplicateHandleFunc func);
+#endif
+
 /*
  * Creates a memory object of length bytes.
  *
  * NaClCreateMemoryObject() returns a handle of the newly created
  * memory object on success, and NACL_INVALID_HANDLE on failure.
  * length must be a multiple of allocation granularity given by
  * NACL_MAP_PAGESIZE in nacl_config.h.
  *
  * executable: Whether the memory object needs to be mappable as
  * executable.  (This is significant only on Mac OS X.)
@@ skipping 34 matching lines @@
  *
  * NaClUnmap() returns 0 on success, and -1 on failure.
  */
 int NaClUnmap(void* start, size_t length);
 
 #ifdef __cplusplus
 }
 #endif  /* __cplusplus */
 
 #endif  /* NATIVE_CLIENT_SRC_SHARED_IMC_NACL_IMC_C_H_ */