OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/common/child_process_sandbox_support_impl_linux.h" | 5 #include "content/common/child_process_sandbox_support_impl_linux.h" |
6 | 6 |
7 #include <sys/stat.h> | 7 #include <sys/stat.h> |
8 | 8 |
9 #include "base/debug/trace_event.h" | 9 #include "base/debug/trace_event.h" |
10 #include "base/memory/scoped_ptr.h" | 10 #include "base/memory/scoped_ptr.h" |
| 11 #include "base/numerics/safe_conversions.h" |
11 #include "base/pickle.h" | 12 #include "base/pickle.h" |
12 #include "base/posix/eintr_wrapper.h" | 13 #include "base/posix/eintr_wrapper.h" |
13 #include "base/posix/unix_domain_socket_linux.h" | 14 #include "base/posix/unix_domain_socket_linux.h" |
14 #include "base/safe_numerics.h" | |
15 #include "base/sys_byteorder.h" | 15 #include "base/sys_byteorder.h" |
16 #include "content/common/sandbox_linux/sandbox_linux.h" | 16 #include "content/common/sandbox_linux/sandbox_linux.h" |
17 #include "third_party/WebKit/public/platform/linux/WebFontFamily.h" | 17 #include "third_party/WebKit/public/platform/linux/WebFontFamily.h" |
18 #include "third_party/WebKit/public/platform/linux/WebFontRenderStyle.h" | 18 #include "third_party/WebKit/public/platform/linux/WebFontRenderStyle.h" |
19 | 19 |
20 namespace content { | 20 namespace content { |
21 | 21 |
22 void GetFontFamilyForCharacter(int32_t character, | 22 void GetFontFamilyForCharacter(int32_t character, |
23 const char* preferred_locale, | 23 const char* preferred_locale, |
24 blink::WebFontFamily* family) { | 24 blink::WebFontFamily* family) { |
(...skipping 85 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
110 if (offset < 0) | 110 if (offset < 0) |
111 return false; | 111 return false; |
112 | 112 |
113 size_t data_length = 0; // the length of the file data. | 113 size_t data_length = 0; // the length of the file data. |
114 off_t data_offset = 0; // the offset of the data in the file. | 114 off_t data_offset = 0; // the offset of the data in the file. |
115 if (table_tag == 0) { | 115 if (table_tag == 0) { |
116 // Get the entire font file. | 116 // Get the entire font file. |
117 struct stat st; | 117 struct stat st; |
118 if (fstat(fd, &st) < 0) | 118 if (fstat(fd, &st) < 0) |
119 return false; | 119 return false; |
120 data_length = base::checked_numeric_cast<size_t>(st.st_size); | 120 data_length = base::checked_cast<size_t>(st.st_size); |
121 } else { | 121 } else { |
122 // Get a font table. Read the header to find its offset in the file. | 122 // Get a font table. Read the header to find its offset in the file. |
123 uint16_t num_tables; | 123 uint16_t num_tables; |
124 ssize_t n = HANDLE_EINTR(pread(fd, &num_tables, sizeof(num_tables), | 124 ssize_t n = HANDLE_EINTR(pread(fd, &num_tables, sizeof(num_tables), |
125 4 /* skip the font type */)); | 125 4 /* skip the font type */)); |
126 if (n != sizeof(num_tables)) | 126 if (n != sizeof(num_tables)) |
127 return false; | 127 return false; |
128 // Font data is stored in net (big-endian) order. | 128 // Font data is stored in net (big-endian) order. |
129 num_tables = base::NetToHost16(num_tables); | 129 num_tables = base::NetToHost16(num_tables); |
130 | 130 |
131 // Read the table directory. | 131 // Read the table directory. |
132 static const size_t kTableEntrySize = 16; | 132 static const size_t kTableEntrySize = 16; |
133 const size_t directory_size = num_tables * kTableEntrySize; | 133 const size_t directory_size = num_tables * kTableEntrySize; |
134 scoped_ptr<uint8_t[]> table_entries(new uint8_t[directory_size]); | 134 scoped_ptr<uint8_t[]> table_entries(new uint8_t[directory_size]); |
135 n = HANDLE_EINTR(pread(fd, table_entries.get(), directory_size, | 135 n = HANDLE_EINTR(pread(fd, table_entries.get(), directory_size, |
136 12 /* skip the SFNT header */)); | 136 12 /* skip the SFNT header */)); |
137 if (n != base::checked_numeric_cast<ssize_t>(directory_size)) | 137 if (n != base::checked_cast<ssize_t>(directory_size)) |
138 return false; | 138 return false; |
139 | 139 |
140 for (uint16_t i = 0; i < num_tables; ++i) { | 140 for (uint16_t i = 0; i < num_tables; ++i) { |
141 uint8_t* entry = table_entries.get() + i * kTableEntrySize; | 141 uint8_t* entry = table_entries.get() + i * kTableEntrySize; |
142 uint32_t tag = *reinterpret_cast<uint32_t*>(entry); | 142 uint32_t tag = *reinterpret_cast<uint32_t*>(entry); |
143 if (tag == table_tag) { | 143 if (tag == table_tag) { |
144 // Font data is stored in net (big-endian) order. | 144 // Font data is stored in net (big-endian) order. |
145 data_offset = | 145 data_offset = |
146 base::NetToHost32(*reinterpret_cast<uint32_t*>(entry + 8)); | 146 base::NetToHost32(*reinterpret_cast<uint32_t*>(entry + 8)); |
147 data_length = | 147 data_length = |
148 base::NetToHost32(*reinterpret_cast<uint32_t*>(entry + 12)); | 148 base::NetToHost32(*reinterpret_cast<uint32_t*>(entry + 12)); |
149 break; | 149 break; |
150 } | 150 } |
151 } | 151 } |
152 } | 152 } |
153 | 153 |
154 if (!data_length) | 154 if (!data_length) |
155 return false; | 155 return false; |
156 // Clamp |offset| inside the allowable range. This allows the read to succeed | 156 // Clamp |offset| inside the allowable range. This allows the read to succeed |
157 // but return 0 bytes. | 157 // but return 0 bytes. |
158 offset = std::min(offset, base::checked_numeric_cast<off_t>(data_length)); | 158 offset = std::min(offset, base::checked_cast<off_t>(data_length)); |
159 // Make sure it's safe to add the data offset and the caller's logical offset. | 159 // Make sure it's safe to add the data offset and the caller's logical offset. |
160 // Define the maximum positive offset on 32 bit systems. | 160 // Define the maximum positive offset on 32 bit systems. |
161 static const off_t kMaxPositiveOffset32 = 0x7FFFFFFF; // 2 GB - 1. | 161 static const off_t kMaxPositiveOffset32 = 0x7FFFFFFF; // 2 GB - 1. |
162 if ((offset > kMaxPositiveOffset32 / 2) || | 162 if ((offset > kMaxPositiveOffset32 / 2) || |
163 (data_offset > kMaxPositiveOffset32 / 2)) | 163 (data_offset > kMaxPositiveOffset32 / 2)) |
164 return false; | 164 return false; |
165 data_offset += offset; | 165 data_offset += offset; |
166 data_length -= offset; | 166 data_length -= offset; |
167 | 167 |
168 if (output) { | 168 if (output) { |
169 // 'output_length' holds the maximum amount of data the caller can accept. | 169 // 'output_length' holds the maximum amount of data the caller can accept. |
170 data_length = std::min(data_length, *output_length); | 170 data_length = std::min(data_length, *output_length); |
171 ssize_t n = HANDLE_EINTR(pread(fd, output, data_length, data_offset)); | 171 ssize_t n = HANDLE_EINTR(pread(fd, output, data_length, data_offset)); |
172 if (n != base::checked_numeric_cast<ssize_t>(data_length)) | 172 if (n != base::checked_cast<ssize_t>(data_length)) |
173 return false; | 173 return false; |
174 } | 174 } |
175 *output_length = data_length; | 175 *output_length = data_length; |
176 | 176 |
177 return true; | 177 return true; |
178 } | 178 } |
179 | 179 |
180 } // namespace content | 180 } // namespace content |
OLD | NEW |