Chromium Code Reviews| Index: components/nacl/renderer/ppb_nacl_private_impl.cc |
| diff --git a/components/nacl/renderer/ppb_nacl_private_impl.cc b/components/nacl/renderer/ppb_nacl_private_impl.cc |
| index eb325e4640b5fc8aabee9cd2dd59b93806c2aa1a..6498a1ddc45585904dd0aad11067609d09be3a2f 100644 |
| --- a/components/nacl/renderer/ppb_nacl_private_impl.cc |
| +++ b/components/nacl/renderer/ppb_nacl_private_impl.cc |
| @@ -22,6 +22,7 @@ |
| #include "base/location.h" |
| #include "base/logging.h" |
| #include "base/macros.h" |
| +#include "base/process/process_handle.h" |
| #include "base/single_thread_task_runner.h" |
| #include "base/strings/string_split.h" |
| #include "base/strings/string_util.h" |
| @@ -474,7 +475,8 @@ void PPBNaClPrivate::LaunchSelLdr( |
| // Duplicate the handle on the browser side instead of the renderer. |
|
Mark Seaborn
2016/03/29 19:24:09
This comment doesn't apply any more, since you're
erikchen
2016/03/29 20:57:42
Removed the comment. Yes, the new path is secure.
|
| // This is because BrokerGetFileForProcess isn't part of content/public, and |
| // it's simpler to do the duplication in the browser anyway. |
| - nexe_for_transit = nexe_file_info->handle; |
| + nexe_for_transit = IPC::PlatformFileForTransit(nexe_file_info->handle, |
| + base::GetCurrentProcId()); |
| #else |
| # error Unsupported target platform. |
| #endif |