PPB_UDPSocket_Private is switched to the new Pepper proxy.

content/browser/renderer_host/pepper/content_browser_pepper_host_factory.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/pepper/content_browser_pepper_host_factory.h"
 
 #include "content/browser/renderer_host/pepper/browser_ppapi_host_impl.h"
 #include "content/browser/renderer_host/pepper/pepper_flash_browser_host.h"
 #include "content/browser/renderer_host/pepper/pepper_flash_file_host.h"
 #include "content/browser/renderer_host/pepper/pepper_gamepad_host.h"
 #include "content/browser/renderer_host/pepper/pepper_print_settings_manager.h"
 #include "content/browser/renderer_host/pepper/pepper_printing_host.h"
+#include "content/browser/renderer_host/pepper/pepper_udp_socket_private_host.h"
 #include "ppapi/host/resource_host.h"
 #include "ppapi/proxy/ppapi_messages.h"
 #include "ppapi/shared_impl/ppapi_permissions.h"
 
 using ppapi::host::ResourceHost;
 
 namespace content {
 
 ContentBrowserPepperHostFactory::ContentBrowserPepperHostFactory(
     BrowserPpapiHostImpl* host)
@@ skipping 14 matching lines @@
   if (!host_->IsValidInstance(instance))
     return scoped_ptr<ResourceHost>();
 
   // Public interfaces.
   switch (message.type()) {
     case PpapiHostMsg_Gamepad_Create::ID:
       return scoped_ptr<ResourceHost>(new PepperGamepadHost(
           host_, instance, params.pp_resource()));
   }
 
+  // Private interfaces.
+  if (host_->GetPpapiHost()->permissions().HasPermission(
+          ppapi::PERMISSION_PRIVATE)) {

[dmichael (off chromium), 2012/12/12 23:23:38]

This probably won't work for whitelisted NaCl apps, will it? Do you have a
strategy for dealing with those?

[ygorshenin1, 2012/12/18 12:07:16]

Creation of UDP sockets actually does nothing. All work related to socket
initialization is hidden in Bind(), so from my point of view Create() is a safe
method. As you can see, permission check is performed for Bind(), Send() or
Recv() calls. Also, please take a look on a previous implementation of UDP
sockets:
http://code.google.com/searchframe#OAMlx_jo-ck/src/content/browser/renderer_h....
Permissions were checked on potentially dangerous operations like Bind() or IO,
not for creation.

On 2012/12/12 23:23:38, dmichael wrote:

+    switch (message.type()) {
+      case PpapiHostMsg_UDPSocketPrivate_Create::ID:
+        return scoped_ptr<ResourceHost>(new PepperUDPSocketPrivateHost(
+            host_, instance, params.pp_resource()));
+    }
+  }
+
   // Dev interfaces.
   if (GetPermissions().HasPermission(ppapi::PERMISSION_DEV)) {
     switch (message.type()) {
       case PpapiHostMsg_Printing_Create::ID: {
          scoped_ptr<PepperPrintSettingsManager> manager(
              new PepperPrintSettingsManagerImpl());
          return scoped_ptr<ResourceHost>(new PepperPrintingHost(
              host_->GetPpapiHost(), instance,
              params.pp_resource(), manager.Pass()));
       }
@@ skipping 14 matching lines @@
 
   return scoped_ptr<ResourceHost>();
 }
 
 const ppapi::PpapiPermissions&
 ContentBrowserPepperHostFactory::GetPermissions() const {
   return host_->GetPpapiHost()->permissions();
 }
 
 }  // namespace content