Index: trunk/src/chrome_elf/blacklist/blacklist.cc |
=================================================================== |
--- trunk/src/chrome_elf/blacklist/blacklist.cc (revision 241567) |
+++ trunk/src/chrome_elf/blacklist/blacklist.cc (working copy) |
@@ -1,274 +0,0 @@ |
-// Copyright 2013 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include "chrome_elf/blacklist/blacklist.h" |
- |
-#include <string.h> |
- |
-#include "base/basictypes.h" |
-#include "chrome_elf/blacklist/blacklist_interceptions.h" |
-#include "sandbox/win/src/interception_internal.h" |
-#include "sandbox/win/src/internal_types.h" |
-#include "sandbox/win/src/sandbox_utils.h" |
-#include "sandbox/win/src/service_resolver.h" |
- |
-// http://blogs.msdn.com/oldnewthing/archive/2004/10/25/247180.aspx |
-extern "C" IMAGE_DOS_HEADER __ImageBase; |
- |
-namespace blacklist{ |
- |
-const wchar_t* g_troublesome_dlls[kTroublesomeDllsMaxCount] = {}; |
-int g_troublesome_dlls_cur_index = 0; |
- |
-const wchar_t kRegistryBeaconPath[] = L"SOFTWARE\\Google\\Chrome\\BLBeacon"; |
- |
-} // namespace blacklist |
- |
-// Allocate storage for thunks in a RWX page of this module to save on doing |
-// an extra allocation at run time. |
-#if !defined(_WIN64) |
-// 64-bit images appear to not support writeable and executable pages. |
-// This would yield compile warning C4330. |
-// TODO(robertshield): Add 64 bit support. |
-#pragma section(".crthunk",read,write,execute) |
-__declspec(allocate(".crthunk")) sandbox::ThunkData g_thunk_storage; |
-#endif |
- |
-namespace { |
- |
-enum Version { |
- VERSION_PRE_XP_SP2 = 0, // Not supported. |
- VERSION_XP_SP2, |
- VERSION_SERVER_2003, // Also includes XP Pro x64 and Server 2003 R2. |
- VERSION_VISTA, // Also includes Windows Server 2008. |
- VERSION_WIN7, // Also includes Windows Server 2008 R2. |
- VERSION_WIN8, // Also includes Windows Server 2012. |
- VERSION_WIN8_1, |
- VERSION_WIN_LAST, // Indicates error condition. |
-}; |
- |
-// Whether a process is running under WOW64 (the wrapper that allows 32-bit |
-// processes to run on 64-bit versions of Windows). This will return |
-// WOW64_DISABLED for both "32-bit Chrome on 32-bit Windows" and "64-bit |
-// Chrome on 64-bit Windows". WOW64_UNKNOWN means "an error occurred", e.g. |
-// the process does not have sufficient access rights to determine this. |
-enum WOW64Status { |
- WOW64_DISABLED, |
- WOW64_ENABLED, |
- WOW64_UNKNOWN, |
-}; |
- |
-WOW64Status GetWOW64StatusForCurrentProcess() { |
- typedef BOOL (WINAPI* IsWow64ProcessFunc)(HANDLE, PBOOL); |
- IsWow64ProcessFunc is_wow64_process = reinterpret_cast<IsWow64ProcessFunc>( |
- GetProcAddress(GetModuleHandle(L"kernel32.dll"), "IsWow64Process")); |
- if (!is_wow64_process) |
- return WOW64_DISABLED; |
- BOOL is_wow64 = FALSE; |
- if (!(*is_wow64_process)(GetCurrentProcess(), &is_wow64)) |
- return WOW64_UNKNOWN; |
- return is_wow64 ? WOW64_ENABLED : WOW64_DISABLED; |
-} |
- |
-class OSInfo { |
- public: |
- struct VersionNumber { |
- int major; |
- int minor; |
- int build; |
- }; |
- |
- struct ServicePack { |
- int major; |
- int minor; |
- }; |
- |
- OSInfo() { |
- OSVERSIONINFOEX version_info = { sizeof(version_info) }; |
- GetVersionEx(reinterpret_cast<OSVERSIONINFO*>(&version_info)); |
- version_number_.major = version_info.dwMajorVersion; |
- version_number_.minor = version_info.dwMinorVersion; |
- version_number_.build = version_info.dwBuildNumber; |
- if ((version_number_.major == 5) && (version_number_.minor > 0)) { |
- // Treat XP Pro x64, Home Server, and Server 2003 R2 as Server 2003. |
- version_ = (version_number_.minor == 1) ? VERSION_XP_SP2 : |
- VERSION_SERVER_2003; |
- if (version_ == VERSION_XP_SP2 && version_info.wServicePackMajor < 2) |
- version_ = VERSION_PRE_XP_SP2; |
- } else if (version_number_.major == 6) { |
- switch (version_number_.minor) { |
- case 0: |
- // Treat Windows Server 2008 the same as Windows Vista. |
- version_ = VERSION_VISTA; |
- break; |
- case 1: |
- // Treat Windows Server 2008 R2 the same as Windows 7. |
- version_ = VERSION_WIN7; |
- break; |
- case 2: |
- // Treat Windows Server 2012 the same as Windows 8. |
- version_ = VERSION_WIN8; |
- break; |
- default: |
- version_ = VERSION_WIN8_1; |
- break; |
- } |
- } else if (version_number_.major > 6) { |
- version_ = VERSION_WIN_LAST; |
- } else { |
- version_ = VERSION_PRE_XP_SP2; |
- } |
- |
- service_pack_.major = version_info.wServicePackMajor; |
- service_pack_.minor = version_info.wServicePackMinor; |
- } |
- |
- Version version() const { return version_; } |
- VersionNumber version_number() const { return version_number_; } |
- ServicePack service_pack() const { return service_pack_; } |
- |
- private: |
- Version version_; |
- VersionNumber version_number_; |
- ServicePack service_pack_; |
- |
- DISALLOW_COPY_AND_ASSIGN(OSInfo); |
-}; |
- |
-bool IsNonBrowserProcess() { |
- wchar_t* command_line = GetCommandLine(); |
- return (command_line && wcsstr(command_line, L"--type")); |
-} |
- |
-} // namespace |
- |
-namespace blacklist { |
- |
-bool CreateBeacon() { |
- HKEY beacon_key = NULL; |
- DWORD disposition = 0; |
- LONG result = ::RegCreateKeyEx(HKEY_CURRENT_USER, |
- kRegistryBeaconPath, |
- 0, |
- NULL, |
- 0, |
- KEY_WRITE, |
- NULL, |
- &beacon_key, |
- &disposition); |
- bool success = (result == ERROR_SUCCESS && |
- disposition != REG_OPENED_EXISTING_KEY); |
- if (result == ERROR_SUCCESS) |
- ::RegCloseKey(beacon_key); |
- return success; |
-} |
- |
-bool ClearBeacon() { |
- LONG result = ::RegDeleteKey(HKEY_CURRENT_USER, kRegistryBeaconPath); |
- return (result == ERROR_SUCCESS); |
-} |
- |
-bool AddDllToBlacklist(const wchar_t* dll_name) { |
- if (g_troublesome_dlls_cur_index >= kTroublesomeDllsMaxCount) |
- return false; |
- for (int i = 0; i < g_troublesome_dlls_cur_index; ++i) { |
- if (!wcscmp(g_troublesome_dlls[i], dll_name)) |
- return true; |
- } |
- |
- // Copy string to blacklist. |
- wchar_t* str_buffer = new wchar_t[wcslen(dll_name) + 1]; |
- wcscpy(str_buffer, dll_name); |
- |
- g_troublesome_dlls[g_troublesome_dlls_cur_index] = str_buffer; |
- g_troublesome_dlls_cur_index++; |
- return true; |
-} |
- |
-bool RemoveDllFromBlacklist(const wchar_t* dll_name) { |
- for (int i = 0; i < g_troublesome_dlls_cur_index; ++i) { |
- if (!wcscmp(g_troublesome_dlls[i], dll_name)) { |
- // Found the thing to remove. Delete it then replace it with the last |
- // element. |
- g_troublesome_dlls_cur_index--; |
- delete[] g_troublesome_dlls[i]; |
- g_troublesome_dlls[i] = g_troublesome_dlls[g_troublesome_dlls_cur_index]; |
- g_troublesome_dlls[g_troublesome_dlls_cur_index] = NULL; |
- return true; |
- } |
- } |
- return false; |
-} |
- |
-bool Initialize(bool force) { |
-#if defined(_WIN64) |
- // TODO(robertshield): Implement 64-bit support by providing 64-bit |
- // interceptors. |
- return false; |
-#endif |
- |
- // Check to see that we found the functions we need in ntdll. |
- if (!InitializeInterceptImports()) |
- return false; |
- |
- // Check to see if this is a non-browser process, abort if so. |
- if (IsNonBrowserProcess()) |
- return false; |
- |
- // Check to see if a beacon is present, abort if so. |
- if (!force && !CreateBeacon()) |
- return false; |
- |
- // Don't try blacklisting on unsupported OS versions. |
- OSInfo os_info; |
- if (os_info.version() <= VERSION_PRE_XP_SP2) |
- return false; |
- |
- // Pseudo-handle, no need to close. |
- HANDLE current_process = ::GetCurrentProcess(); |
- |
- // Tells the resolver to patch already patched functions. |
- const bool kRelaxed = true; |
- |
- // Create a thunk via the appropriate ServiceResolver instance. |
- sandbox::ServiceResolverThunk* thunk; |
-#if defined(_WIN64) |
- // TODO(robertshield): Use the appropriate thunk for 64-bit support |
- // when said support is implemented. |
-#else |
- if (GetWOW64StatusForCurrentProcess() == WOW64_ENABLED) { |
- if (os_info.version() >= VERSION_WIN8) |
- thunk = new sandbox::Wow64W8ResolverThunk(current_process, kRelaxed); |
- else |
- thunk = new sandbox::Wow64ResolverThunk(current_process, kRelaxed); |
- } else if (os_info.version() >= VERSION_WIN8) { |
- thunk = new sandbox::Win8ResolverThunk(current_process, kRelaxed); |
- } else { |
- thunk = new sandbox::ServiceResolverThunk(current_process, kRelaxed); |
- } |
-#endif |
- |
-#if defined(_WIN64) |
- BYTE* thunk_storage = new BYTE[sizeof(sandbox::ThunkData)]; |
-#else |
- BYTE* thunk_storage = reinterpret_cast<BYTE*>(&g_thunk_storage); |
-#endif |
- |
- thunk->AllowLocalPatches(); |
- |
- // Get ntdll base, target name, interceptor address, |
- NTSTATUS ret = thunk->Setup(::GetModuleHandle(sandbox::kNtdllName), |
- reinterpret_cast<void*>(&__ImageBase), |
- "NtMapViewOfSection", |
- NULL, |
- &blacklist::BlNtMapViewOfSection, |
- thunk_storage, |
- sizeof(sandbox::ThunkData), |
- NULL); |
- |
- delete thunk; |
- return NT_SUCCESS(ret); |
-} |
- |
-} // namespace blacklist |