Add support for Flash Player Component updates on Linux

chrome/common/chrome_content_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_content_client.h"
 
+#include <fcntl.h>
+
 #include "base/command_line.h"
 #include "base/debug/crash_logging.h"
 #include "base/files/file_util.h"
 #include "base/json/json_reader.h"
 #include "base/path_service.h"
 #include "base/strings/string16.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
 #include "build/build_config.h"
 #include "chrome/common/child_process_logging.h"
 #include "chrome/common/chrome_constants.h"
 #include "chrome/common/chrome_paths.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/chrome_version_info.h"
+#include "chrome/common/component_flash_hint_file.h"
 #include "chrome/common/crash_keys.h"
 #include "chrome/common/pepper_flash.h"
 #include "chrome/common/secure_origin_whitelist.h"
 #include "chrome/common/url_constants.h"
 #include "chrome/grit/common_resources.h"
 #include "components/dom_distiller/core/url_constants.h"
 #include "content/public/common/content_constants.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/common/user_agent.h"
+#include "crypto/sha2.h"
 #include "extensions/common/constants.h"
 #include "gpu/config/gpu_info.h"
 #include "net/http/http_util.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "ui/base/layout.h"
 #include "ui/base/resource/resource_bundle.h"
 
 #include "widevine_cdm_version.h"  // In SHARED_INTERMEDIATE_DIR.
 
 #if defined(OS_WIN)
@@ skipping 230 matching lines @@
   // Also get the version from the command-line. Should be something like 11.2
   // or 11.2.123.45.
   std::string flash_version =
       base::CommandLine::ForCurrentProcess()->GetSwitchValueASCII(
           switches::kPpapiFlashVersion);
 
   plugins->push_back(
       CreatePepperFlashInfo(base::FilePath(flash_path), flash_version));
 }
 
+#if defined(OS_LINUX)
+bool IsUserDataDirAvailable() {
+  base::FilePath user_data_dir;
+  if (!PathService::Get(chrome::DIR_USER_DATA, &user_data_dir))
+    return false;
+  return base::PathExists(user_data_dir);
+}
+#endif  // defined(OS_LINUX)
+
+// This method is used on Linux only because of architectural differences in how
+// it loads the component updated flash plugin, and not because the other
+// platforms do not support component updated flash. On other platforms, the
+// component updater sends an IPC message to all threads, at undefined points in
+// time, with the URL of the component updated flash. Because the linux zygote
+// thread has no access to the file system after it warms up, it must preload
+// the component updated flash.
+#if defined(OS_LINUX)
+bool GetComponentUpdatedPepperFlash(content::PepperPluginInfo* plugin) {
+#if defined(FLAPPER_AVAILABLE)
+  base::FilePath flash_path;
+  std::string version;
+  if (chrome::ComponentFlashHintFile::DoesHintFileExist()) {
+    bool verified =
+        chrome::ComponentFlashHintFile::VerifyAndReturnFlashLocation(
+            &flash_path, &version);
+    if (verified) {
+      *plugin = CreatePepperFlashInfo(flash_path, version);
+      return true;

[rickyz (no longer on Chrome), 2015/07/31 00:13:56]

Is there any handling for when DIR_USER_DATA is on a filesystem mounted noexec?
Luckily, we're unsandboxed here, so we can test for this by attempting to mmap a
page PROT_READ | PROT_EXEC.

[Greg K, 2015/08/04 00:21:17]

Done.

+    }
+  }
+  return false;
+#else
+  return false;
+#endif  // defined(FLAPPER_AVAILABLE)
+}
+#endif  // defined(OS_LINUX)
+
 bool GetBundledPepperFlash(content::PepperPluginInfo* plugin) {
 #if defined(FLAPPER_AVAILABLE)
   base::CommandLine* command_line = base::CommandLine::ForCurrentProcess();
 
   // Ignore bundled Pepper Flash if there is Pepper Flash specified from the
   // command-line.
   if (command_line->HasSwitch(switches::kPpapiFlashPath))
     return false;
 
   bool force_disable =
@@ skipping 164 matching lines @@
   base::debug::SetCrashKeyValue(crash_keys::kGPURenderer, gpu_info.gl_renderer);
 #endif
 }
 
 void ChromeContentClient::AddPepperPlugins(
     std::vector<content::PepperPluginInfo>* plugins) {
 #if defined(ENABLE_PLUGINS)
   ComputeBuiltInPlugins(plugins);
   AddPepperFlashFromCommandLine(plugins);
 
-  content::PepperPluginInfo plugin;
-  if (GetBundledPepperFlash(&plugin))
-    plugins->push_back(plugin);
-  if (GetSystemPepperFlash(&plugin))
-    plugins->push_back(plugin);
+#if defined(OS_LINUX)
+  // Depending on the sandbox configurtion, the user data directory
+  // is not always available. If it is not available, do not try and load and
+  // flash plugin. It may incorrectly try to load the system flash plugin in
+  // this case.
+  if (!IsUserDataDirAvailable()) {
+    return;
+  }
+#endif
+
+  std::vector<content::PepperPluginInfo*> flash_versions;
+
+#if defined(OS_LINUX)
+  content::PepperPluginInfo component_flash;
+  if (GetComponentUpdatedPepperFlash(&component_flash))
+    flash_versions.push_back(&component_flash);
+#endif
+
+  content::PepperPluginInfo bundled_flash;
+  if (GetBundledPepperFlash(&bundled_flash))
+    flash_versions.push_back(&bundled_flash);
+
+  content::PepperPluginInfo system_flash;
+  if (GetSystemPepperFlash(&system_flash))
+    flash_versions.push_back(&system_flash);
+
+  // Now sort the list and add the most recent flash plugin to the plugins list.
+  std::sort(flash_versions.begin(), flash_versions.end(),
+            [](content::PepperPluginInfo* x, content::PepperPluginInfo* y) {
+              Version version_x(x->version);
+              DCHECK(version_x.IsValid());
+              return version_x.IsOlderThan(y->version);
+            });
+  // Use the last element in the list, which will be the most recent flash.
+  plugins->push_back(*flash_versions.back());
 #endif
 }
 
 void ChromeContentClient::AddAdditionalSchemes(
     std::vector<std::string>* standard_schemes,
     std::vector<std::string>* savable_schemes) {
   standard_schemes->push_back(extensions::kExtensionScheme);
   savable_schemes->push_back(extensions::kExtensionScheme);
   standard_schemes->push_back(chrome::kChromeNativeScheme);
   standard_schemes->push_back(extensions::kExtensionResourceScheme);
@@ skipping 70 matching lines @@
   schemes->insert(content::kChromeUIScheme);
   schemes->insert(extensions::kExtensionScheme);
   schemes->insert(extensions::kExtensionResourceScheme);
   GetSecureOriginWhitelist(origins);
 }
 
 void ChromeContentClient::AddServiceWorkerSchemes(
     std::set<std::string>* schemes) {
   schemes->insert(extensions::kExtensionScheme);
 }