| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_ | 5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_ |
| 6 #define SANDBOX_SRC_HANDLE_CLOSER_H_ | 6 #define SANDBOX_SRC_HANDLE_CLOSER_H_ |
| 7 | 7 |
| 8 #include <map> | 8 #include <map> |
| 9 #include <set> | 9 #include <set> |
| 10 | 10 |
| 11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
| 12 #include "base/strings/string16.h" | 12 #include "base/strings/string16.h" |
| 13 #include "sandbox/win/src/interception.h" | 13 #include "sandbox/win/src/interception.h" |
| 14 #include "sandbox/win/src/sandbox_types.h" | 14 #include "sandbox/win/src/sandbox_types.h" |
| 15 #include "sandbox/win/src/target_process.h" | 15 #include "sandbox/win/src/target_process.h" |
| 16 | 16 |
| 17 namespace sandbox { | 17 namespace sandbox { |
| 18 | 18 |
| 19 // This is a map of handle-types to names that we need to close in the | 19 // This is a map of handle-types to names that we need to close in the |
| 20 // target process. A null set means we need to close all handles of the | 20 // target process. A null set means we need to close all handles of the |
| 21 // given type. | 21 // given type. |
| 22 typedef std::map<const base::string16, std::set<const base::string16> > | 22 typedef std::map<const base::string16, std::set<const base::string16> > |
| 23 HandleMap; | 23 HandleMap; |
| 24 | 24 |
| 25 // Type and set of corresponding handle names to close. | 25 // Type and set of corresponding handle names to close. |
| 26 struct HandleListEntry { | 26 struct HandleListEntry { |
| 27 size_t record_bytes; // Rounded to sizeof(size_t) bytes. | 27 size_t record_bytes; // Rounded to sizeof(size_t) bytes. |
| 28 size_t offset_to_names; // Nul terminated strings of name_count names. | 28 size_t offset_to_names; // Nul terminated strings of name_count names. |
| 29 size_t name_count; | 29 size_t name_count; |
| 30 char16 handle_type[1]; | 30 base::char16 handle_type[1]; |
| 31 }; | 31 }; |
| 32 | 32 |
| 33 // Global parameters and a pointer to the list of entries. | 33 // Global parameters and a pointer to the list of entries. |
| 34 struct HandleCloserInfo { | 34 struct HandleCloserInfo { |
| 35 size_t record_bytes; // Rounded to sizeof(size_t) bytes. | 35 size_t record_bytes; // Rounded to sizeof(size_t) bytes. |
| 36 size_t num_handle_types; | 36 size_t num_handle_types; |
| 37 struct HandleListEntry handle_entries[1]; | 37 struct HandleListEntry handle_entries[1]; |
| 38 }; | 38 }; |
| 39 | 39 |
| 40 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info; | 40 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info; |
| 41 | 41 |
| 42 // Adds handles to close after lockdown. | 42 // Adds handles to close after lockdown. |
| 43 class HandleCloser { | 43 class HandleCloser { |
| 44 public: | 44 public: |
| 45 HandleCloser(); | 45 HandleCloser(); |
| 46 | 46 |
| 47 // Adds a handle that will be closed in the target process after lockdown. | 47 // Adds a handle that will be closed in the target process after lockdown. |
| 48 // A NULL value for handle_name indicates all handles of the specified type. | 48 // A NULL value for handle_name indicates all handles of the specified type. |
| 49 // An empty string for handle_name indicates the handle is unnamed. | 49 // An empty string for handle_name indicates the handle is unnamed. |
| 50 ResultCode AddHandle(const char16* handle_type, const char16* handle_name); | 50 ResultCode AddHandle(const base::char16* handle_type, |
| 51 const base::char16* handle_name); |
| 51 | 52 |
| 52 // Serializes and copies the closer table into the target process. | 53 // Serializes and copies the closer table into the target process. |
| 53 bool InitializeTargetHandles(TargetProcess* target); | 54 bool InitializeTargetHandles(TargetProcess* target); |
| 54 | 55 |
| 55 // Adds any interceptions that may be required due to closed system handles. | 56 // Adds any interceptions that may be required due to closed system handles. |
| 56 bool SetupHandleInterceptions(InterceptionManager* manager); | 57 bool SetupHandleInterceptions(InterceptionManager* manager); |
| 57 | 58 |
| 58 private: | 59 private: |
| 59 // Calculates the memory needed to copy the serialized handles list (rounded | 60 // Calculates the memory needed to copy the serialized handles list (rounded |
| 60 // to the nearest machine-word size). | 61 // to the nearest machine-word size). |
| 61 size_t GetBufferSize(); | 62 size_t GetBufferSize(); |
| 62 | 63 |
| 63 // Serializes the handle list into the target process. | 64 // Serializes the handle list into the target process. |
| 64 bool SetupHandleList(void* buffer, size_t buffer_bytes); | 65 bool SetupHandleList(void* buffer, size_t buffer_bytes); |
| 65 | 66 |
| 66 HandleMap handles_to_close_; | 67 HandleMap handles_to_close_; |
| 67 | 68 |
| 68 DISALLOW_COPY_AND_ASSIGN(HandleCloser); | 69 DISALLOW_COPY_AND_ASSIGN(HandleCloser); |
| 69 }; | 70 }; |
| 70 | 71 |
| 71 // Returns the object manager's name associated with a handle | 72 // Returns the object manager's name associated with a handle |
| 72 bool GetHandleName(HANDLE handle, base::string16* handle_name); | 73 bool GetHandleName(HANDLE handle, base::string16* handle_name); |
| 73 | 74 |
| 74 } // namespace sandbox | 75 } // namespace sandbox |
| 75 | 76 |
| 76 #endif // SANDBOX_SRC_HANDLE_CLOSER_H_ | 77 #endif // SANDBOX_SRC_HANDLE_CLOSER_H_ |
| OLD | NEW |