| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_WIN_SRC_BROKER_SERVICES_H_ | 5 #ifndef SANDBOX_WIN_SRC_BROKER_SERVICES_H_ |
| 6 #define SANDBOX_WIN_SRC_BROKER_SERVICES_H_ | 6 #define SANDBOX_WIN_SRC_BROKER_SERVICES_H_ |
| 7 | 7 |
| 8 #include <list> | 8 #include <list> |
| 9 #include <map> | 9 #include <map> |
| 10 #include <set> | 10 #include <set> |
| (...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 57 const wchar_t* name) override; | 57 const wchar_t* name) override; |
| 58 ResultCode UninstallAppContainer(const wchar_t* sid) override; | 58 ResultCode UninstallAppContainer(const wchar_t* sid) override; |
| 59 | 59 |
| 60 // Checks if the supplied process ID matches one of the broker's active | 60 // Checks if the supplied process ID matches one of the broker's active |
| 61 // target processes | 61 // target processes |
| 62 // Returns: | 62 // Returns: |
| 63 // true if there is an active target process for this ID, otherwise false. | 63 // true if there is an active target process for this ID, otherwise false. |
| 64 bool IsActiveTarget(DWORD process_id); | 64 bool IsActiveTarget(DWORD process_id); |
| 65 | 65 |
| 66 private: | 66 private: |
| 67 // Releases the Job and notifies the associated Policy object to its | 67 struct TokenPair; |
| 68 // resources as well. | 68 typedef std::list<JobTracker*> JobTrackerList; |
| 69 static void FreeResources(JobTracker* tracker); | 69 typedef std::map<DWORD, PeerTracker*> PeerTrackerMap; |
| 70 typedef std::map<uint32_t, TokenPair*> TokenCacheMap; |
| 70 | 71 |
| 71 // The routine that the worker thread executes. It is in charge of | 72 // The routine that the worker thread executes. It is in charge of |
| 72 // notifications and cleanup-related tasks. | 73 // notifications and cleanup-related tasks. |
| 73 static DWORD WINAPI TargetEventsThread(PVOID param); | 74 static DWORD WINAPI TargetEventsThread(PVOID param); |
| 74 | 75 |
| 75 // Removes a target peer from the process list if it expires. | 76 // Removes a target peer from the process list if it expires. |
| 76 static VOID CALLBACK RemovePeer(PVOID parameter, BOOLEAN timeout); | 77 static VOID CALLBACK RemovePeer(PVOID parameter, BOOLEAN timeout); |
| 77 | 78 |
| 78 // The completion port used by the job objects to communicate events to | 79 // The completion port used by the job objects to communicate events to |
| 79 // the worker thread. | 80 // the worker thread. |
| 80 HANDLE job_port_; | 81 base::win::ScopedHandle job_port_; |
| 81 | 82 |
| 82 // Handle to a manual-reset event that is signaled when the total target | 83 // Handle to a manual-reset event that is signaled when the total target |
| 83 // process count reaches zero. | 84 // process count reaches zero. |
| 84 HANDLE no_targets_; | 85 base::win::ScopedHandle no_targets_; |
| 85 | 86 |
| 86 // Handle to the worker thread that reacts to job notifications. | 87 // Handle to the worker thread that reacts to job notifications. |
| 87 HANDLE job_thread_; | 88 base::win::ScopedHandle job_thread_; |
| 88 | 89 |
| 89 // Lock used to protect the list of targets from being modified by 2 | 90 // Lock used to protect the list of targets from being modified by 2 |
| 90 // threads at the same time. | 91 // threads at the same time. |
| 91 CRITICAL_SECTION lock_; | 92 CRITICAL_SECTION lock_; |
| 92 | 93 |
| 93 // provides a pool of threads that are used to wait on the IPC calls. | 94 // provides a pool of threads that are used to wait on the IPC calls. |
| 94 ThreadProvider* thread_pool_; | 95 ThreadProvider* thread_pool_; |
| 95 | 96 |
| 96 // List of the trackers for closing and cleanup purposes. | 97 // List of the trackers for closing and cleanup purposes. |
| 97 typedef std::list<JobTracker*> JobTrackerList; | |
| 98 JobTrackerList tracker_list_; | 98 JobTrackerList tracker_list_; |
| 99 | 99 |
| 100 // Maps peer process IDs to the saved handle and wait event. | 100 // Maps peer process IDs to the saved handle and wait event. |
| 101 // Prevents peer callbacks from accessing the broker after destruction. | 101 // Prevents peer callbacks from accessing the broker after destruction. |
| 102 typedef std::map<DWORD, PeerTracker*> PeerTrackerMap; | |
| 103 PeerTrackerMap peer_map_; | 102 PeerTrackerMap peer_map_; |
| 104 | 103 |
| 105 // Provides a fast lookup to identify sandboxed processes that belong to a | 104 // Provides a fast lookup to identify sandboxed processes that belong to a |
| 106 // job. Consult |jobless_process_handles_| for handles of pocess without job. | 105 // job. Consult |jobless_process_handles_| for handles of pocess without job. |
| 107 std::set<DWORD> child_process_ids_; | 106 std::set<DWORD> child_process_ids_; |
| 108 | 107 |
| 109 typedef std::map<uint32_t, std::pair<HANDLE, HANDLE>> TokenCacheMap; | |
| 110 TokenCacheMap token_cache_; | 108 TokenCacheMap token_cache_; |
| 111 | 109 |
| 112 DISALLOW_COPY_AND_ASSIGN(BrokerServicesBase); | 110 DISALLOW_COPY_AND_ASSIGN(BrokerServicesBase); |
| 113 }; | 111 }; |
| 114 | 112 |
| 115 } // namespace sandbox | 113 } // namespace sandbox |
| 116 | 114 |
| 117 | 115 |
| 118 #endif // SANDBOX_WIN_SRC_BROKER_SERVICES_H_ | 116 #endif // SANDBOX_WIN_SRC_BROKER_SERVICES_H_ |
| OLD | NEW |