IPC fuzzer child process component

chrome/browser/chrome_content_browser_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chrome_content_browser_client.h"
 
 #include <set>
 #include <utility>
 #include <vector>
 
@@ skipping 184 matching lines @@
 #endif
 
 #if defined(ENABLE_INPUT_SPEECH)
 #include "chrome/browser/speech/chrome_speech_recognition_manager_delegate_bubble_ui.h"
 #endif
 
 #if defined(FILE_MANAGER_EXTENSION)
 #include "chrome/browser/chromeos/extensions/file_manager/file_manager_util.h"
 #endif
 
+#if defined(ENABLE_IPC_FUZZER)
+#include "chrome/browser/ipc_fuzzer_host.h"
+#endif
+
 using base::FileDescriptor;
 using content::AccessTokenStore;
 using content::BrowserChildProcessHostIterator;
 using content::BrowserThread;
 using content::BrowserURLHandler;
 using content::ChildProcessSecurityPolicy;
 using content::FileDescriptorInfo;
 using content::QuotaPermissionContext;
 using content::RenderViewHost;
 using content::SiteInstance;
@@ skipping 604 matching lines @@
 #endif
 
   host->Send(new ChromeViewMsg_SetIsIncognitoProcess(
       profile->IsOffTheRecord()));
 
   host->Send(new ChromeViewMsg_SetExtensionActivityLogEnabled(
       IsExtensionActivityLogEnabledForProfile(profile)));
 
   SendExtensionWebRequestStatusToHost(host);
 
+#if defined(ENABLE_IPC_FUZZER)
+  SendTestcaseToIpcFuzzer(host);
+#endif
+
   RendererContentSettingRules rules;
   GetRendererContentSettingRules(profile->GetHostContentSettingsMap(), &rules);
   host->Send(new ChromeViewMsg_SetContentSettingRules(rules));
 }
 
 GURL ChromeContentBrowserClient::GetPossiblyPrivilegedURL(
     content::BrowserContext* browser_context,
     const GURL& url,
     bool is_renderer_initiated,
     content::SiteInstance* current_instance) {
@@ skipping 450 matching lines @@
   const CommandLine& browser_command_line = *CommandLine::ForCurrentProcess();
 
   if (browser_command_line.HasSwitch(switches::kChromeFrame))
     command_line->AppendSwitch(switches::kChromeFrame);
 
   if (process_type == switches::kRendererProcess) {
     base::FilePath user_data_dir =
         browser_command_line.GetSwitchValuePath(switches::kUserDataDir);
     if (!user_data_dir.empty())
       command_line->AppendSwitchPath(switches::kUserDataDir, user_data_dir);
+
+#if defined(ENABLE_IPC_FUZZER)
+    if (browser_command_line.HasSwitch(switches::kIpcFuzzerTestcase))
+      command_line->AppendSwitch(switches::kIpcFuzzerOverride);
+#endif
+
 #if defined(OS_CHROMEOS)
     const std::string& login_profile =
         browser_command_line.GetSwitchValueASCII(
             chromeos::switches::kLoginProfile);
     if (!login_profile.empty())
       command_line->AppendSwitchASCII(
           chromeos::switches::kLoginProfile, login_profile);
 #endif
 
     content::RenderProcessHost* process =
@@ skipping 1015 matching lines @@
           new drive::FileSystemBackendDelegate(external_mount_points),
           special_storage_policy,
           external_mount_points,
           fileapi::ExternalMountPoints::GetSystemInstance());
   backend->AddSystemMountPoints();
   DCHECK(backend->CanHandleType(fileapi::kFileSystemTypeExternal));
   additional_backends->push_back(backend);
 #endif
 }
 
+bool ChromeContentBrowserClient::ShouldKillChildProcessOnBadMessage() {
+#if defined(ENABLE_IPC_FUZZER)
+  // Don't kill the IPC fuzzer process, if it sends a bad message.
+  if (CommandLine::ForCurrentProcess()->HasSwitch(switches::kIpcFuzzerTestcase))
+    return false;
+#endif
+
+  return true;
+}
+
 #if defined(OS_POSIX) && !defined(OS_MACOSX)
 void ChromeContentBrowserClient::GetAdditionalMappedFilesForChildProcess(
     const CommandLine& command_line,
     int child_process_id,
     std::vector<FileDescriptorInfo>* mappings) {
 #if defined(OS_ANDROID)
   base::FilePath data_path;
   PathService::Get(ui::DIR_RESOURCE_PAKS_ANDROID, &data_path);
   DCHECK(!data_path.empty());
 
@@ skipping 87 matching lines @@
 #if defined(USE_NSS)
 crypto::CryptoModuleBlockingPasswordDelegate*
     ChromeContentBrowserClient::GetCryptoPasswordDelegate(
         const GURL& url) {
   return chrome::NewCryptoModuleBlockingDialogDelegate(
       chrome::kCryptoModulePasswordKeygen, url.host());
 }
 #endif
 
 }  // namespace chrome