OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/common/font_warmup_win.h" | 5 #include "content/common/font_warmup_win.h" |
6 | 6 |
7 #include <dwrite.h> | 7 #include <dwrite.h> |
8 #include <map> | 8 #include <map> |
9 | 9 |
10 #include "base/debug/alias.h" | 10 #include "base/debug/alias.h" |
11 #include "base/files/file_path.h" | 11 #include "base/files/file_path.h" |
12 #include "base/lazy_instance.h" | 12 #include "base/lazy_instance.h" |
13 #include "base/logging.h" | 13 #include "base/logging.h" |
14 #include "base/memory/ref_counted.h" | 14 #include "base/memory/ref_counted.h" |
15 #include "base/numerics/safe_conversions.h" | 15 #include "base/numerics/safe_conversions.h" |
16 #include "base/numerics/safe_math.h" | 16 #include "base/numerics/safe_math.h" |
17 #include "base/strings/utf_string_conversions.h" | 17 #include "base/strings/utf_string_conversions.h" |
18 #include "base/synchronization/lock.h" | 18 #include "base/synchronization/lock.h" |
19 #include "base/sys_byteorder.h" | 19 #include "base/sys_byteorder.h" |
20 #include "base/trace_event/trace_event.h" | 20 #include "base/trace_event/trace_event.h" |
21 #include "base/win/iat_patch_function.h" | 21 #include "base/win/iat_patch_function.h" |
22 #include "base/win/windows_version.h" | 22 #include "base/win/windows_version.h" |
23 #include "content/public/common/dwrite_font_platform_win.h" | 23 #include "ppapi/shared_impl/proxy_lock.h" |
24 #include "skia/ext/fontmgr_default_win.h" | 24 #include "skia/ext/fontmgr_default_win.h" |
25 #include "skia/ext/refptr.h" | 25 #include "skia/ext/refptr.h" |
26 #include "third_party/WebKit/public/web/win/WebFontRendering.h" | 26 #include "third_party/WebKit/public/web/win/WebFontRendering.h" |
27 #include "third_party/skia/include/core/SkPaint.h" | 27 #include "third_party/skia/include/core/SkPaint.h" |
28 #include "third_party/skia/include/ports/SkFontMgr.h" | 28 #include "third_party/skia/include/ports/SkFontMgr.h" |
29 #include "third_party/skia/include/ports/SkTypeface_win.h" | 29 #include "third_party/skia/include/ports/SkTypeface_win.h" |
30 #include "ui/gfx/hud_font.h" | 30 #include "ui/gfx/hud_font.h" |
31 | 31 |
32 namespace content { | 32 namespace content { |
33 | 33 |
(...skipping 55 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
89 DWORD flags, | 89 DWORD flags, |
90 void* server_sid, | 90 void* server_sid, |
91 void* message, | 91 void* message, |
92 DWORD* buffer_length, | 92 DWORD* buffer_length, |
93 void* out_message_attributes, | 93 void* out_message_attributes, |
94 void* in_message_attributes, | 94 void* in_message_attributes, |
95 void* time_out) { | 95 void* time_out) { |
96 return STATUS_ACCESS_DENIED; | 96 return STATUS_ACCESS_DENIED; |
97 } | 97 } |
98 | 98 |
99 // Directwrite connects to the font cache service to retrieve information about | |
100 // fonts installed on the system etc. This works well outside the sandbox and | |
101 // within the sandbox as long as the lpc connection maintained by the current | |
102 // process with the font cache service remains valid. It appears that there | |
103 // are cases when this connection is dropped after which directwrite is unable | |
104 // to connect to the font cache service which causes problems with characters | |
105 // disappearing. | |
106 // Directwrite has fallback code to enumerate fonts if it is unable to connect | |
107 // to the font cache service. We need to intercept the following APIs to | |
108 // ensure that it does not connect to the font cache service. | |
109 // NtALpcConnectPort | |
110 // OpenSCManagerW | |
111 // OpenServiceW | |
112 // StartServiceW | |
113 // CloseServiceHandle. | |
114 // These are all IAT patched. | |
115 void PatchServiceManagerCalls() { | |
116 static bool is_patched = false; | |
117 if (is_patched) | |
118 return; | |
119 const char* service_provider_dll = | |
120 (base::win::GetVersion() >= base::win::VERSION_WIN8 | |
121 ? "api-ms-win-service-management-l1-1-0.dll" | |
122 : "advapi32.dll"); | |
123 | |
124 is_patched = true; | |
125 | |
126 DWORD patched = | |
127 g_iat_patch_open_sc_manager.Patch(L"dwrite.dll", service_provider_dll, | |
128 "OpenSCManagerW", OpenSCManagerWPatch); | |
129 DCHECK(patched == 0); | |
130 | |
131 patched = g_iat_patch_close_service_handle.Patch( | |
132 L"dwrite.dll", service_provider_dll, "CloseServiceHandle", | |
133 CloseServiceHandlePatch); | |
134 DCHECK(patched == 0); | |
135 | |
136 patched = g_iat_patch_open_service.Patch(L"dwrite.dll", service_provider_dll, | |
137 "OpenServiceW", OpenServiceWPatch); | |
138 DCHECK(patched == 0); | |
139 | |
140 patched = g_iat_patch_start_service.Patch( | |
141 L"dwrite.dll", service_provider_dll, "StartServiceW", StartServiceWPatch); | |
142 DCHECK(patched == 0); | |
143 | |
144 patched = g_iat_patch_nt_connect_port.Patch( | |
145 L"dwrite.dll", "ntdll.dll", "NtAlpcConnectPort", NtALpcConnectPortPatch); | |
146 DCHECK(patched == 0); | |
147 } | |
148 | |
149 // Windows-only DirectWrite support. These warm up the DirectWrite paths | |
150 // before sandbox lock down to allow Skia access to the Font Manager service. | |
151 void CreateDirectWriteFactory(IDWriteFactory** factory) { | |
152 typedef decltype(DWriteCreateFactory)* DWriteCreateFactoryProc; | |
153 HMODULE dwrite_dll = LoadLibraryW(L"dwrite.dll"); | |
154 // TODO(scottmg): Temporary code to track crash in http://crbug.com/387867. | |
155 if (!dwrite_dll) { | |
156 DWORD load_library_get_last_error = GetLastError(); | |
157 base::debug::Alias(&dwrite_dll); | |
158 base::debug::Alias(&load_library_get_last_error); | |
159 CHECK(false); | |
160 } | |
161 | |
162 PatchServiceManagerCalls(); | |
163 | |
164 DWriteCreateFactoryProc dwrite_create_factory_proc = | |
165 reinterpret_cast<DWriteCreateFactoryProc>( | |
166 GetProcAddress(dwrite_dll, "DWriteCreateFactory")); | |
167 // TODO(scottmg): Temporary code to track crash in http://crbug.com/387867. | |
168 if (!dwrite_create_factory_proc) { | |
169 DWORD get_proc_address_get_last_error = GetLastError(); | |
170 base::debug::Alias(&dwrite_create_factory_proc); | |
171 base::debug::Alias(&get_proc_address_get_last_error); | |
172 CHECK(false); | |
173 } | |
174 CHECK(SUCCEEDED(dwrite_create_factory_proc( | |
175 DWRITE_FACTORY_TYPE_ISOLATED, __uuidof(IDWriteFactory), | |
176 reinterpret_cast<IUnknown**>(factory)))); | |
177 } | |
178 | |
179 HRESULT STDMETHODCALLTYPE StubFontCollection(IDWriteFactory* factory, | |
180 IDWriteFontCollection** col, | |
181 BOOL checkUpdates) { | |
182 // We always return pre-created font collection from here. | |
183 IDWriteFontCollection* custom_collection = GetCustomFontCollection(factory); | |
184 DCHECK(custom_collection != nullptr); | |
185 *col = custom_collection; | |
186 return S_OK; | |
187 } | |
188 | |
189 void PatchDWriteFactory(IDWriteFactory* factory) { | |
190 const unsigned int kGetSystemFontCollectionVTableIndex = 3; | |
191 | |
192 PROC* vtable = *reinterpret_cast<PROC**>(factory); | |
193 PROC* function_ptr = &vtable[kGetSystemFontCollectionVTableIndex]; | |
194 void* stub_function = &StubFontCollection; | |
195 base::win::ModifyCode(function_ptr, &stub_function, sizeof(PROC)); | |
196 } | |
197 | |
198 // Class to fake out a DC or a Font object. Maintains a reference to a | 99 // Class to fake out a DC or a Font object. Maintains a reference to a |
199 // SkTypeFace to emulate the simple operation of a DC and Font. | 100 // SkTypeFace to emulate the simple operation of a DC and Font. |
200 class FakeGdiObject : public base::RefCountedThreadSafe<FakeGdiObject> { | 101 class FakeGdiObject : public base::RefCountedThreadSafe<FakeGdiObject> { |
201 public: | 102 public: |
202 FakeGdiObject(uint32_t magic, void* handle) | 103 FakeGdiObject(uint32_t magic, void* handle) |
203 : handle_(handle), magic_(magic) {} | 104 : handle_(handle), magic_(magic) {} |
204 | 105 |
205 void set_typeface(const skia::RefPtr<SkTypeface>& typeface) { | 106 void set_typeface(const skia::RefPtr<SkTypeface>& typeface) { |
206 typeface_ = typeface; | 107 typeface_ = typeface; |
207 } | 108 } |
(...skipping 88 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
296 CHECK(g_warmup_fontmgr); | 197 CHECK(g_warmup_fontmgr); |
297 int weight = log_font->lfWeight; | 198 int weight = log_font->lfWeight; |
298 if (weight == FW_DONTCARE) | 199 if (weight == FW_DONTCARE) |
299 weight = SkFontStyle::kNormal_Weight; | 200 weight = SkFontStyle::kNormal_Weight; |
300 | 201 |
301 SkFontStyle style(weight, log_font->lfWidth, | 202 SkFontStyle style(weight, log_font->lfWidth, |
302 log_font->lfItalic ? SkFontStyle::kItalic_Slant | 203 log_font->lfItalic ? SkFontStyle::kItalic_Slant |
303 : SkFontStyle::kUpright_Slant); | 204 : SkFontStyle::kUpright_Slant); |
304 | 205 |
305 std::string family_name = base::WideToUTF8(log_font->lfFaceName); | 206 std::string family_name = base::WideToUTF8(log_font->lfFaceName); |
| 207 ppapi::ProxyAutoLock lock; |
306 return skia::AdoptRef( | 208 return skia::AdoptRef( |
307 g_warmup_fontmgr->matchFamilyStyle(family_name.c_str(), style)); | 209 g_warmup_fontmgr->matchFamilyStyle(family_name.c_str(), style)); |
308 } | 210 } |
309 | 211 |
310 HDC WINAPI CreateCompatibleDCPatch(HDC dc_handle) { | 212 HDC WINAPI CreateCompatibleDCPatch(HDC dc_handle) { |
311 scoped_refptr<FakeGdiObject> ret = | 213 scoped_refptr<FakeGdiObject> ret = |
312 g_fake_gdi_object_factory.Get().Create(kFakeDCMagic); | 214 g_fake_gdi_object_factory.Get().Create(kFakeDCMagic); |
313 return static_cast<HDC>(ret->handle()); | 215 return static_cast<HDC>(ret->handle()); |
314 } | 216 } |
315 | 217 |
(...skipping 138 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
454 DoSingleGdiPatch(create_enum_font_families_patch_, path, | 356 DoSingleGdiPatch(create_enum_font_families_patch_, path, |
455 "EnumFontFamiliesExW", EnumFontFamiliesExWPatch); | 357 "EnumFontFamiliesExW", EnumFontFamiliesExWPatch); |
456 DoSingleGdiPatch(create_get_font_data_patch_, path, "GetFontData", | 358 DoSingleGdiPatch(create_get_font_data_patch_, path, "GetFontData", |
457 GetFontDataPatch); | 359 GetFontDataPatch); |
458 DoSingleGdiPatch(create_select_object_patch_, path, "SelectObject", | 360 DoSingleGdiPatch(create_select_object_patch_, path, "SelectObject", |
459 SelectObjectPatch); | 361 SelectObjectPatch); |
460 } | 362 } |
461 | 363 |
462 } // namespace | 364 } // namespace |
463 | 365 |
464 void DoPreSandboxWarmupForTypeface(SkTypeface* typeface) { | 366 // Directwrite connects to the font cache service to retrieve information about |
465 SkPaint paint_warmup; | 367 // fonts installed on the system etc. This works well outside the sandbox and |
466 paint_warmup.setTypeface(typeface); | 368 // within the sandbox as long as the lpc connection maintained by the current |
467 wchar_t glyph = L'S'; | 369 // process with the font cache service remains valid. It appears that there |
468 paint_warmup.measureText(&glyph, 2); | 370 // are cases when this connection is dropped after which directwrite is unable |
469 } | 371 // to connect to the font cache service which causes problems with characters |
| 372 // disappearing. |
| 373 // Directwrite has fallback code to enumerate fonts if it is unable to connect |
| 374 // to the font cache service. We need to intercept the following APIs to |
| 375 // ensure that it does not connect to the font cache service. |
| 376 // NtALpcConnectPort |
| 377 // OpenSCManagerW |
| 378 // OpenServiceW |
| 379 // StartServiceW |
| 380 // CloseServiceHandle. |
| 381 // These are all IAT patched. |
| 382 void PatchServiceManagerCalls() { |
| 383 static bool is_patched = false; |
| 384 if (is_patched) |
| 385 return; |
| 386 const char* service_provider_dll = |
| 387 (base::win::GetVersion() >= base::win::VERSION_WIN8 |
| 388 ? "api-ms-win-service-management-l1-1-0.dll" |
| 389 : "advapi32.dll"); |
470 | 390 |
471 SkFontMgr* GetPreSandboxWarmupFontMgr() { | 391 is_patched = true; |
472 if (!g_warmup_fontmgr) { | |
473 IDWriteFactory* factory; | |
474 CreateDirectWriteFactory(&factory); | |
475 | 392 |
476 GetCustomFontCollection(factory); | 393 DWORD patched = |
| 394 g_iat_patch_open_sc_manager.Patch(L"dwrite.dll", service_provider_dll, |
| 395 "OpenSCManagerW", OpenSCManagerWPatch); |
| 396 DCHECK(patched == 0); |
477 | 397 |
478 PatchDWriteFactory(factory); | 398 patched = g_iat_patch_close_service_handle.Patch( |
| 399 L"dwrite.dll", service_provider_dll, "CloseServiceHandle", |
| 400 CloseServiceHandlePatch); |
| 401 DCHECK(patched == 0); |
479 | 402 |
480 blink::WebFontRendering::setDirectWriteFactory(factory); | 403 patched = g_iat_patch_open_service.Patch(L"dwrite.dll", service_provider_dll, |
481 g_warmup_fontmgr = SkFontMgr_New_DirectWrite(factory); | 404 "OpenServiceW", OpenServiceWPatch); |
482 } | 405 DCHECK(patched == 0); |
483 return g_warmup_fontmgr; | 406 |
| 407 patched = g_iat_patch_start_service.Patch( |
| 408 L"dwrite.dll", service_provider_dll, "StartServiceW", StartServiceWPatch); |
| 409 DCHECK(patched == 0); |
| 410 |
| 411 patched = g_iat_patch_nt_connect_port.Patch( |
| 412 L"dwrite.dll", "ntdll.dll", "NtAlpcConnectPort", NtALpcConnectPortPatch); |
| 413 DCHECK(patched == 0); |
484 } | 414 } |
485 | 415 |
486 GdiFontPatchData* PatchGdiFontEnumeration(const base::FilePath& path) { | 416 GdiFontPatchData* PatchGdiFontEnumeration(const base::FilePath& path) { |
487 // We assume the fontmgr is already warmed up before calling this. | 417 // We assume the fontmgr is already warmed up before calling this. |
| 418 g_warmup_fontmgr = SkFontMgr_New_DirectWrite(); |
488 DCHECK(g_warmup_fontmgr); | 419 DCHECK(g_warmup_fontmgr); |
489 return new GdiFontPatchDataImpl(path); | 420 return new GdiFontPatchDataImpl(path); |
490 } | 421 } |
491 | 422 |
492 size_t GetEmulatedGdiHandleCountForTesting() { | 423 size_t GetEmulatedGdiHandleCountForTesting() { |
493 return g_fake_gdi_object_factory.Get().GetObjectCount(); | 424 return g_fake_gdi_object_factory.Get().GetObjectCount(); |
494 } | 425 } |
495 | 426 |
496 void ResetEmulatedGdiHandlesForTesting() { | 427 void ResetEmulatedGdiHandlesForTesting() { |
497 g_fake_gdi_object_factory.Get().ResetObjectHandles(); | 428 g_fake_gdi_object_factory.Get().ResetObjectHandles(); |
498 } | 429 } |
499 | 430 |
500 void SetPreSandboxWarmupFontMgrForTesting(SkFontMgr* fontmgr) { | |
501 g_warmup_fontmgr = fontmgr; | |
502 } | |
503 | |
504 void WarmupDirectWrite() { | |
505 TRACE_EVENT0("startup", "content::WarmupDirectWrite"); | |
506 | |
507 // The objects used here are intentionally not freed as we want the Skia | |
508 // code to use these objects after warmup. | |
509 SetDefaultSkiaFactory(GetPreSandboxWarmupFontMgr()); | |
510 | |
511 // We need to warm up *some* font for DirectWrite. We also need to pass one | |
512 // down for the CC HUD code, so use the same one here. Note that we don't use | |
513 // a monospace as would be nice in an attempt to avoid a small startup time | |
514 // regression, see http://crbug.com/463613. | |
515 skia::RefPtr<SkTypeface> hud_typeface = skia::AdoptRef( | |
516 GetPreSandboxWarmupFontMgr()->legacyCreateTypeface("Times New Roman", 0)); | |
517 DoPreSandboxWarmupForTypeface(hud_typeface.get()); | |
518 gfx::SetHudTypeface(hud_typeface); | |
519 } | |
520 | |
521 } // namespace content | 431 } // namespace content |
OLD | NEW |