Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(721)

Side by Side Diff: sandbox/win/src/process_mitigations.h

Issue 11194027: Revert 162293 - Enable DEP earlier on Vista and below (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 8 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « no previous file | sandbox/win/src/process_mitigations.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
7 7
8 #include <windows.h> 8 #include <windows.h>
9 9
10 #include "base/basictypes.h" 10 #include "base/basictypes.h"
11 #include "sandbox/win/src/security_level.h" 11 #include "sandbox/win/src/security_level.h"
12 12
13 namespace sandbox { 13 namespace sandbox {
14 14
15 class TargetProcess;
16
17 // Sets the mitigation policy for the current process, ignoring any settings 15 // Sets the mitigation policy for the current process, ignoring any settings
18 // that are invalid for the current version of Windows. 16 // that are invalid for the current version of Windows.
19 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags); 17 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags);
20 18
21 // Returns the flags that must be enforced after startup for the current OS 19 // Returns the flags that must be enforced after startup for the current OS
22 // version. 20 // version.
23 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags); 21 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags);
24 22
25 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES 23 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES
26 // policy flags used by UpdateProcThreadAttribute(). The size field varies 24 // policy flags used by UpdateProcThreadAttribute(). The size field varies
27 // between a 32-bit and a 64-bit type based on the exact build and version of 25 // between a 32-bit and a 64-bit type based on the exact build and version of
28 // Windows, so the returned size must be passed to UpdateProcThreadAttribute(). 26 // Windows, so the returned size must be passed to UpdateProcThreadAttribute().
29 void ConvertProcessMitigationsToPolicy(MitigationFlags flags, 27 void ConvertProcessMitigationsToPolicy(MitigationFlags flags,
30 DWORD64* policy_flags, size_t* size); 28 DWORD64* policy_flags, size_t* size);
31 29
32 // Adds mitigations that need to be performed on the suspended target process 30 // Adds mitigations that need to be performed on the suspended target process
33 // before execution begins. 31 // before execution begins.
34 bool ApplyProcessMitigationsToSuspendedTarget(TargetProcess* target, 32 bool ApplyProcessMitigationsToSuspendedProcess(HANDLE process,
35 MitigationFlags flags); 33 MitigationFlags flags);
36 34
37 // Returns true if all the supplied flags can be set after a process starts. 35 // Returns true if all the supplied flags can be set after a process starts.
38 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags); 36 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags);
39 37
40 // Returns true if all the supplied flags can be set before a process starts. 38 // Returns true if all the supplied flags can be set before a process starts.
41 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags); 39 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags);
42 40
43 } // namespace sandbox 41 } // namespace sandbox
44 42
45 #endif // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 43 #endif // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
46 44
OLDNEW
« no previous file with comments | « no previous file | sandbox/win/src/process_mitigations.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698