OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_ | 5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_ |
6 #define SANDBOX_SRC_HANDLE_CLOSER_H_ | 6 #define SANDBOX_SRC_HANDLE_CLOSER_H_ |
7 | 7 |
8 #include <map> | 8 #include <map> |
9 #include <set> | 9 #include <set> |
10 | 10 |
11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
12 #include "base/strings/string16.h" | 12 #include "base/strings/string16.h" |
13 #include "sandbox/win/src/interception.h" | 13 #include "sandbox/win/src/interception.h" |
14 #include "sandbox/win/src/sandbox_types.h" | 14 #include "sandbox/win/src/sandbox_types.h" |
15 #include "sandbox/win/src/target_process.h" | 15 #include "sandbox/win/src/target_process.h" |
16 | 16 |
17 namespace sandbox { | 17 namespace sandbox { |
18 | 18 |
19 // This is a map of handle-types to names that we need to close in the | 19 // This is a map of handle-types to names that we need to close in the |
20 // target process. A null set means we need to close all handles of the | 20 // target process. A null set means we need to close all handles of the |
21 // given type. | 21 // given type. |
22 typedef std::map<const base::string16, std::set<const base::string16> > | 22 typedef std::map<const base::string16, std::set<const base::string16> > |
23 HandleMap; | 23 HandleMap; |
24 | 24 |
25 // Type and set of corresponding handle names to close. | 25 // Type and set of corresponding handle names to close. |
26 struct HandleListEntry { | 26 struct HandleListEntry { |
27 size_t record_bytes; // Rounded to sizeof(size_t) bytes. | 27 size_t record_bytes; // Rounded to sizeof(size_t) bytes. |
28 size_t offset_to_names; // Nul terminated strings of name_count names. | 28 size_t offset_to_names; // Nul terminated strings of name_count names. |
29 size_t name_count; | 29 size_t name_count; |
30 char16 handle_type[1]; | 30 base::char16 handle_type[1]; |
31 }; | 31 }; |
32 | 32 |
33 // Global parameters and a pointer to the list of entries. | 33 // Global parameters and a pointer to the list of entries. |
34 struct HandleCloserInfo { | 34 struct HandleCloserInfo { |
35 size_t record_bytes; // Rounded to sizeof(size_t) bytes. | 35 size_t record_bytes; // Rounded to sizeof(size_t) bytes. |
36 size_t num_handle_types; | 36 size_t num_handle_types; |
37 struct HandleListEntry handle_entries[1]; | 37 struct HandleListEntry handle_entries[1]; |
38 }; | 38 }; |
39 | 39 |
40 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info; | 40 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info; |
41 | 41 |
42 // Adds handles to close after lockdown. | 42 // Adds handles to close after lockdown. |
43 class HandleCloser { | 43 class HandleCloser { |
44 public: | 44 public: |
45 HandleCloser(); | 45 HandleCloser(); |
46 | 46 |
47 // Adds a handle that will be closed in the target process after lockdown. | 47 // Adds a handle that will be closed in the target process after lockdown. |
48 // A NULL value for handle_name indicates all handles of the specified type. | 48 // A NULL value for handle_name indicates all handles of the specified type. |
49 // An empty string for handle_name indicates the handle is unnamed. | 49 // An empty string for handle_name indicates the handle is unnamed. |
50 ResultCode AddHandle(const char16* handle_type, const char16* handle_name); | 50 ResultCode AddHandle(const base::char16* handle_type, |
| 51 const base::char16* handle_name); |
51 | 52 |
52 // Serializes and copies the closer table into the target process. | 53 // Serializes and copies the closer table into the target process. |
53 bool InitializeTargetHandles(TargetProcess* target); | 54 bool InitializeTargetHandles(TargetProcess* target); |
54 | 55 |
55 // Adds any interceptions that may be required due to closed system handles. | 56 // Adds any interceptions that may be required due to closed system handles. |
56 bool SetupHandleInterceptions(InterceptionManager* manager); | 57 bool SetupHandleInterceptions(InterceptionManager* manager); |
57 | 58 |
58 private: | 59 private: |
59 // Calculates the memory needed to copy the serialized handles list (rounded | 60 // Calculates the memory needed to copy the serialized handles list (rounded |
60 // to the nearest machine-word size). | 61 // to the nearest machine-word size). |
61 size_t GetBufferSize(); | 62 size_t GetBufferSize(); |
62 | 63 |
63 // Serializes the handle list into the target process. | 64 // Serializes the handle list into the target process. |
64 bool SetupHandleList(void* buffer, size_t buffer_bytes); | 65 bool SetupHandleList(void* buffer, size_t buffer_bytes); |
65 | 66 |
66 HandleMap handles_to_close_; | 67 HandleMap handles_to_close_; |
67 | 68 |
68 DISALLOW_COPY_AND_ASSIGN(HandleCloser); | 69 DISALLOW_COPY_AND_ASSIGN(HandleCloser); |
69 }; | 70 }; |
70 | 71 |
71 // Returns the object manager's name associated with a handle | 72 // Returns the object manager's name associated with a handle |
72 bool GetHandleName(HANDLE handle, base::string16* handle_name); | 73 bool GetHandleName(HANDLE handle, base::string16* handle_name); |
73 | 74 |
74 } // namespace sandbox | 75 } // namespace sandbox |
75 | 76 |
76 #endif // SANDBOX_SRC_HANDLE_CLOSER_H_ | 77 #endif // SANDBOX_SRC_HANDLE_CLOSER_H_ |
OLD | NEW |