Constructing an RTCPeerConnection with expired certificates should throw an exception.

third_party/WebKit/Source/modules/mediastream/RTCPeerConnection.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 24 matching lines @@
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/Microtask.h"
 #include "bindings/core/v8/Nullable.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/ScriptState.h"
 #include "bindings/core/v8/ScriptValue.h"
 #include "bindings/core/v8/V8ThrowException.h"
 #include "bindings/modules/v8/UnionTypesModules.h"
 #include "bindings/modules/v8/V8RTCCertificate.h"
 #include "core/dom/DOMException.h"
+#include "core/dom/DOMTimeStamp.h"
 #include "core/dom/Document.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/dom/ExecutionContext.h"
 #include "core/frame/Deprecation.h"
 #include "core/frame/LocalFrame.h"
 #include "core/html/VoidCallback.h"
 #include "core/loader/FrameLoader.h"
 #include "core/loader/FrameLoaderClient.h"
 #include "modules/crypto/CryptoResultImpl.h"
 #include "modules/mediastream/MediaConstraintsImpl.h"
@@ skipping 26 matching lines @@
 #include "public/platform/WebRTCConfiguration.h"
 #include "public/platform/WebRTCDataChannelHandler.h"
 #include "public/platform/WebRTCDataChannelInit.h"
 #include "public/platform/WebRTCICECandidate.h"
 #include "public/platform/WebRTCKeyParams.h"
 #include "public/platform/WebRTCOfferOptions.h"
 #include "public/platform/WebRTCSessionDescription.h"
 #include "public/platform/WebRTCSessionDescriptionRequest.h"
 #include "public/platform/WebRTCStatsRequest.h"
 #include "public/platform/WebRTCVoidRequest.h"
+#include "wtf/CurrentTime.h"
 
 #include <memory>
 
 namespace blink {
 
 namespace {
 
 const char kSignalingStateClosedMessage[] = "The RTCPeerConnection's signalingState is 'closed'.";
 
 bool throwExceptionIfSignalingStateClosed(RTCPeerConnection::SignalingState state, ExceptionState& exceptionState)
@@ skipping 213 matching lines @@
                 certificate = V8RTCCertificate::toImplWithTypeCheck(configuration.isolate(), valCert);
             }
             if (!certificate) {
                 exceptionState.throwTypeError("Malformed sequence<RTCCertificate>");
                 return 0;
             }
 
             rtcConfiguration->appendCertificate(certificate->certificateShallowCopy());
         }
     }
-
     return rtcConfiguration;
 }
 
 RTCOfferOptionsPlatform* parseOfferOptions(const Dictionary& options)
 {
     if (options.isUndefinedOrNull())
         return 0;
 
     Vector<String> propertyNames;
     options.getPropertyNames(propertyNames);
@@ skipping 46 matching lines @@
 {
     if (mediaConstraints.isObject())
         UseCounter::count(context, UseCounter::RTCPeerConnectionConstructorConstraints);
     else
         UseCounter::count(context, UseCounter::RTCPeerConnectionConstructorCompliant);
 
     RTCConfiguration* configuration = parseConfiguration(rtcConfiguration, exceptionState);
     if (exceptionState.hadException())
         return 0;
 
+    // Make sure no certificates have expired.
+    if (configuration && configuration->numberOfCertificates() > 0) {
+        DOMTimeStamp now = convertSecondsToDOMTimeStamp(currentTime());
+        for (size_t i = 0; i < configuration->numberOfCertificates(); ++i) {
+            DOMTimeStamp expires = configuration->certificate(i)->expires();
+            if (expires <= now) {
+                exceptionState.throwDOMException(InvalidStateError, "Expired certificate(s).");
+                return 0;
+            }
+        }
+    }
+
     MediaErrorState mediaErrorState;
     WebMediaConstraints constraints = MediaConstraintsImpl::create(context, mediaConstraints, mediaErrorState);
     if (mediaErrorState.hadException()) {
         mediaErrorState.raiseException(exceptionState);
         return 0;
     }
 
     RTCPeerConnection* peerConnection = new RTCPeerConnection(context, configuration, constraints, exceptionState);
     peerConnection->suspendIfNeeded();
     if (exceptionState.hadException())
@@ skipping 799 matching lines @@
 {
     visitor->trace(m_localStreams);
     visitor->trace(m_remoteStreams);
     visitor->trace(m_dispatchScheduledEventRunner);
     visitor->trace(m_scheduledEvents);
     EventTargetWithInlineData::trace(visitor);
     ActiveDOMObject::trace(visitor);
 }
 
 } // namespace blink