Add UMA histograms and logging for bad IPC message handling

content/browser/bad_message.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CONTENT_BROWSER_BAD_MESSAGE_H_
+#define CONTENT_BROWSER_BAD_MESSAGE_H_
+
+namespace content {
+class RenderProcessHost;
+
+namespace bad_message {
+
+// The browser process often chooses to terminate a renderer if it receives
+// a bad IPC message. The reasons are tracked for metrics.
+//
+// Content embedders should implement their own bad message statistics, but
+// should use similar histogram names to make analysis easier.
+//
+// NOTE: Do not remove or reorder elements in this end. Add new entries at the
+// end. We rely on these values in histograms.
+enum BadMessageReason {
+  NC_IN_PAGE_NAVIGATION = 0,
+  RFH_CAN_COMMIT_URL_BLOCKED,
+  RFH_CAN_ACCESS_FILES_OF_PAGE_STATE,
+  RFH_SANDBOX_FLAGS,
+  RFH_NO_PROXY_TO_PARENT,
+  RPH_DESERIALIZATION_FAILED,
+  RVH_CAN_ACCESS_FILES_OF_PAGE_STATE,
+  RVH_FILE_CHOOSER_PATH,
+  RWH_SYNTHETIC_GESTURE,
+  RWH_FOCUS,
+  RWH_BLUR,
+  RWH_SHARED_BITMAP,
+  RWH_BAD_ACK_MESSAGE,
+  RWHVA_SHARED_MEMORY,
+  SERVICE_WORKER_BAD_URL,
+  WC_INVALID_FRAME_SOURCE,
+  // Please add new elements here.
+
+  BAD_MESSAGE_MAX
+};
+
+// Called when the browser receives a bad IPC message from a renderer process.
+// Log the event, records a histogram metric for the |reason|, and terminates
+// the process for |host|.
+void ReceivedBadMessage(RenderProcessHost* host, BadMessageReason reason);
+
+}  // namespace bad_message
+}  // namespace content
+
+#endif  // CONTENT_BROWSER_BAD_MESSAGE_H_