Track which NativeViewIds each render process is allowed to interact with.

chrome/browser/renderer_host/resource_message_filter_gtk.cc

Index: chrome/browser/renderer_host/resource_message_filter_gtk.cc
===================================================================
--- chrome/browser/renderer_host/resource_message_filter_gtk.cc	(revision 14874)
+++ chrome/browser/renderer_host/resource_message_filter_gtk.cc	(working copy)
@@ -6,6 +6,7 @@
 
 #include "base/gfx/gtk_native_view_id_manager.h"
 #include "chrome/browser/chrome_thread.h"
+#include "chrome/browser/renderer_host/renderer_security_policy.h"
 #include "chrome/common/render_messages.h"
 #include "chrome/common/x11_util.h"
 
@@ -102,6 +103,12 @@
 // Called on the IO thread.
 void ResourceMessageFilter::OnGetScreenInfo(gfx::NativeViewId view,
                                             IPC::Message* reply_msg) {
+  RendererSecurityPolicy* policy = RendererSecurityPolicy::GetInstance();
+  if (!policy->HasNativeViewId(GetProcessId(), view)) {
+    NOTREACHED() << "Bad NativeViewId from render process.";
+    return;
+  }
+
   ChromeThread::GetMessageLoop(ChromeThread::BACKGROUND_X11)->PostTask(
       FROM_HERE, NewRunnableMethod(
         this, &ResourceMessageFilter::DoOnGetScreenInfo, view, reply_msg));
@@ -110,6 +117,12 @@
 // Called on the IO thread.
 void ResourceMessageFilter::OnGetWindowRect(gfx::NativeViewId view,
                                             IPC::Message* reply_msg) {
+  RendererSecurityPolicy* policy = RendererSecurityPolicy::GetInstance();
+  if (!policy->HasNativeViewId(GetProcessId(), view)) {
+    NOTREACHED() << "Bad NativeViewId from render process.";
+    return;
+  }
+
   ChromeThread::GetMessageLoop(ChromeThread::BACKGROUND_X11)->PostTask(
       FROM_HERE, NewRunnableMethod(
         this, &ResourceMessageFilter::DoOnGetWindowRect, view, reply_msg));
@@ -118,6 +131,12 @@
 // Called on the IO thread.
 void ResourceMessageFilter::OnGetRootWindowRect(gfx::NativeViewId view,
                                                 IPC::Message* reply_msg) {
+  RendererSecurityPolicy* policy = RendererSecurityPolicy::GetInstance();
+  if (!policy->HasNativeViewId(GetProcessId(), view)) {
+    NOTREACHED() << "Bad NativeViewId from render process.";
+    return;
+  }
+
   ChromeThread::GetMessageLoop(ChromeThread::BACKGROUND_X11)->PostTask(
       FROM_HERE, NewRunnableMethod(
         this, &ResourceMessageFilter::DoOnGetRootWindowRect, view, reply_msg));