| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "base/strings/stringprintf.h" | 5 #include "base/strings/stringprintf.h" |
| 6 #include "base/win/scoped_handle.h" | 6 #include "base/win/scoped_handle.h" |
| 7 | 7 |
| 8 #include "base/win/windows_version.h" | 8 #include "base/win/windows_version.h" |
| 9 #include "sandbox/win/src/nt_internals.h" | 9 #include "sandbox/win/src/nt_internals.h" |
| 10 #include "sandbox/win/src/process_mitigations.h" | 10 #include "sandbox/win/src/process_mitigations.h" |
| (...skipping 21 matching lines...) Expand all Loading... |
| 32 | 32 |
| 33 bool CheckWin8DepPolicy() { | 33 bool CheckWin8DepPolicy() { |
| 34 PROCESS_MITIGATION_DEP_POLICY policy = {}; | 34 PROCESS_MITIGATION_DEP_POLICY policy = {}; |
| 35 if (!get_process_mitigation_policy(::GetCurrentProcess(), ProcessDEPPolicy, | 35 if (!get_process_mitigation_policy(::GetCurrentProcess(), ProcessDEPPolicy, |
| 36 &policy, sizeof(policy))) { | 36 &policy, sizeof(policy))) { |
| 37 return false; | 37 return false; |
| 38 } | 38 } |
| 39 return policy.Enable && policy.Permanent; | 39 return policy.Enable && policy.Permanent; |
| 40 } | 40 } |
| 41 | 41 |
| 42 #if defined(NDEBUG) |
| 42 bool CheckWin8AslrPolicy() { | 43 bool CheckWin8AslrPolicy() { |
| 43 PROCESS_MITIGATION_ASLR_POLICY policy = {}; | 44 PROCESS_MITIGATION_ASLR_POLICY policy = {}; |
| 44 if (!get_process_mitigation_policy(::GetCurrentProcess(), ProcessASLRPolicy, | 45 if (!get_process_mitigation_policy(::GetCurrentProcess(), ProcessASLRPolicy, |
| 45 &policy, sizeof(policy))) { | 46 &policy, sizeof(policy))) { |
| 46 return false; | 47 return false; |
| 47 } | 48 } |
| 48 return policy.EnableForceRelocateImages && policy.DisallowStrippedImages; | 49 return policy.EnableForceRelocateImages && policy.DisallowStrippedImages; |
| 49 } | 50 } |
| 51 #endif // defined(NDEBUG) |
| 50 | 52 |
| 51 bool CheckWin8StrictHandlePolicy() { | 53 bool CheckWin8StrictHandlePolicy() { |
| 52 PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY policy = {}; | 54 PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY policy = {}; |
| 53 if (!get_process_mitigation_policy(::GetCurrentProcess(), | 55 if (!get_process_mitigation_policy(::GetCurrentProcess(), |
| 54 ProcessStrictHandleCheckPolicy, | 56 ProcessStrictHandleCheckPolicy, |
| 55 &policy, sizeof(policy))) { | 57 &policy, sizeof(policy))) { |
| 56 return false; | 58 return false; |
| 57 } | 59 } |
| 58 return policy.RaiseExceptionOnInvalidHandleReference && | 60 return policy.RaiseExceptionOnInvalidHandleReference && |
| 59 policy.HandleExceptionsPermanentlyEnabled; | 61 policy.HandleExceptionsPermanentlyEnabled; |
| (...skipping 179 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 239 EXPECT_EQ(policy->SetProcessMitigations(MITIGATION_WIN32K_DISABLE), | 241 EXPECT_EQ(policy->SetProcessMitigations(MITIGATION_WIN32K_DISABLE), |
| 240 SBOX_ALL_OK); | 242 SBOX_ALL_OK); |
| 241 EXPECT_EQ(policy->AddRule(sandbox::TargetPolicy::SUBSYS_WIN32K_LOCKDOWN, | 243 EXPECT_EQ(policy->AddRule(sandbox::TargetPolicy::SUBSYS_WIN32K_LOCKDOWN, |
| 242 sandbox::TargetPolicy::FAKE_USER_GDI_INIT, NULL), | 244 sandbox::TargetPolicy::FAKE_USER_GDI_INIT, NULL), |
| 243 sandbox::SBOX_ALL_OK); | 245 sandbox::SBOX_ALL_OK); |
| 244 EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(L"CheckWin8Lockdown")); | 246 EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(L"CheckWin8Lockdown")); |
| 245 } | 247 } |
| 246 | 248 |
| 247 } // namespace sandbox | 249 } // namespace sandbox |
| 248 | 250 |
| OLD | NEW |