Do not translate the file open flags other than read/write.

chrome/nacl/nacl_ipc_adapter.cc

Index: chrome/nacl/nacl_ipc_adapter.cc
diff --git a/chrome/nacl/nacl_ipc_adapter.cc b/chrome/nacl/nacl_ipc_adapter.cc
index 58c6fb2cd2b5b54dce56f1480b731b23f4f63bc3..716c6b6a338671ee98e6134a9a6a3cce876b52ba 100644
--- a/chrome/nacl/nacl_ipc_adapter.cc
+++ b/chrome/nacl/nacl_ipc_adapter.cc
@@ -119,8 +119,12 @@ int TranslatePepperFileOpenFlags(int32_t pp_open_flags) {
     nacl_open_flag |= NACL_ABI_O_CREAT;
   if (pp_open_flags & PP_FILEOPENFLAG_TRUNCATE)
     nacl_open_flag |= NACL_ABI_O_TRUNC;
+#if 0

[Mark Seaborn, 2013/05/17 14:02:35]

Don't disable code with "#if 0" -- why don't you just remove the code?

Can you add a test for O_EXCL?

[mazda, 2013/05/17 22:09:55]

Deleted the code and added a test.

+  // NaCl does not support NACL_ABI_O_EXCL yet and sending the flag can cause
+  // NaCl module to crash, so we discard the flag here for now.
   if (pp_open_flags & PP_FILEOPENFLAG_EXCLUSIVE)
     nacl_open_flag |= NACL_ABI_O_EXCL;

[bsy, 2013/05/17 16:38:52]

TranslatePepperFileOpenFlags is used at line 452 below, to generate an argument
to NaClDescIoDescFromHandleAllocCtor.  The comment above that function in the
header file says:

/*
 * NaClDescIoDescFromHandleAllocCtor takes ownership of the |handle|
 * argument -- when the returned NaClDesc object is destroyed
 * (refcount goes to 0), the handle will be closed.  The |flags|
 * argument should be one of NACL_ABI_O_RDONLY, NACL_ABI_O_RDWR,
 * NACL_ABI_O_WRONLY possibly bitwise ORed with NACL_ABI_O_APPEND.
 */
struct NaClDesc *NaClDescIoDescFromHandleAllocCtor(NaClHandle handle,
                                                   int flags);

and NACL_ABI_O_EXCL is not allowed.  The same applies to NACL_ABI_O_TRUNC,
NACL_ABI_O_CREAT, and similar flags.

Exclusive open and truncation do not apply to already opened descriptors. 
Exclusive open is enforced by the underlying host OS -- the semantics are that
we will, when used with NACL_ABI_O_CREAT,  ensure that the file is created if
the file does not already exist, and will otherwise fail.  It clearly makes no
sense for an already-opened descriptor, since the creation had already happened.

Truncation happens at the time of the open.  Clearly, it makes no sense to ask
for it when passing ownership of the descriptor, because we wouldn't want to
truncate the file again.

Please change this to follow the contract -- do not include flags that are not
mentioned.

On the NaCl side, we will modify the interface to check and abort earlier
if/when unexpected/illegal flags are supplied.

[mazda, 2013/05/17 22:09:55]

Changed the code not to include NACL_ABI_O_EXCL, NACL_ABI_O_TRUNC, and
NACL_ABI_O_CREAT.

+#endif
   return nacl_open_flag;
 }