Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(73)

Side by Side Diff: sandbox/win/src/interceptors_64.cc

Issue 1851213002: Remove sandbox on Windows. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: fix nacl compile issues Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/win/src/interceptors_64.h ('k') | sandbox/win/src/internal_types.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "sandbox/win/src/interceptors_64.h"
6
7 #include "sandbox/win/src/interceptors.h"
8 #include "sandbox/win/src/filesystem_interception.h"
9 #include "sandbox/win/src/named_pipe_interception.h"
10 #include "sandbox/win/src/policy_target.h"
11 #include "sandbox/win/src/process_mitigations_win32k_interception.h"
12 #include "sandbox/win/src/process_thread_interception.h"
13 #include "sandbox/win/src/registry_interception.h"
14 #include "sandbox/win/src/sandbox_nt_types.h"
15 #include "sandbox/win/src/sandbox_types.h"
16 #include "sandbox/win/src/sync_interception.h"
17 #include "sandbox/win/src/target_interceptions.h"
18
19 namespace sandbox {
20
21 SANDBOX_INTERCEPT NtExports g_nt;
22 SANDBOX_INTERCEPT OriginalFunctions g_originals;
23
24 NTSTATUS WINAPI TargetNtMapViewOfSection64(
25 HANDLE section, HANDLE process, PVOID *base, ULONG_PTR zero_bits,
26 SIZE_T commit_size, PLARGE_INTEGER offset, PSIZE_T view_size,
27 SECTION_INHERIT inherit, ULONG allocation_type, ULONG protect) {
28 NtMapViewOfSectionFunction orig_fn = reinterpret_cast<
29 NtMapViewOfSectionFunction>(g_originals[MAP_VIEW_OF_SECTION_ID]);
30
31 return TargetNtMapViewOfSection(orig_fn, section, process, base, zero_bits,
32 commit_size, offset, view_size, inherit,
33 allocation_type, protect);
34 }
35
36 NTSTATUS WINAPI TargetNtUnmapViewOfSection64(HANDLE process, PVOID base) {
37 NtUnmapViewOfSectionFunction orig_fn = reinterpret_cast<
38 NtUnmapViewOfSectionFunction>(g_originals[UNMAP_VIEW_OF_SECTION_ID]);
39 return TargetNtUnmapViewOfSection(orig_fn, process, base);
40 }
41
42 // -----------------------------------------------------------------------
43
44 NTSTATUS WINAPI TargetNtSetInformationThread64(
45 HANDLE thread, NT_THREAD_INFORMATION_CLASS thread_info_class,
46 PVOID thread_information, ULONG thread_information_bytes) {
47 NtSetInformationThreadFunction orig_fn = reinterpret_cast<
48 NtSetInformationThreadFunction>(g_originals[SET_INFORMATION_THREAD_ID]);
49 return TargetNtSetInformationThread(orig_fn, thread, thread_info_class,
50 thread_information,
51 thread_information_bytes);
52 }
53
54 NTSTATUS WINAPI TargetNtOpenThreadToken64(
55 HANDLE thread, ACCESS_MASK desired_access, BOOLEAN open_as_self,
56 PHANDLE token) {
57 NtOpenThreadTokenFunction orig_fn = reinterpret_cast<
58 NtOpenThreadTokenFunction>(g_originals[OPEN_THREAD_TOKEN_ID]);
59 return TargetNtOpenThreadToken(orig_fn, thread, desired_access, open_as_self,
60 token);
61 }
62
63 NTSTATUS WINAPI TargetNtOpenThreadTokenEx64(
64 HANDLE thread, ACCESS_MASK desired_access, BOOLEAN open_as_self,
65 ULONG handle_attributes, PHANDLE token) {
66 NtOpenThreadTokenExFunction orig_fn = reinterpret_cast<
67 NtOpenThreadTokenExFunction>(g_originals[OPEN_THREAD_TOKEN_EX_ID]);
68 return TargetNtOpenThreadTokenEx(orig_fn, thread, desired_access,
69 open_as_self, handle_attributes, token);
70 }
71
72 // -----------------------------------------------------------------------
73
74 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtCreateFile64(
75 PHANDLE file, ACCESS_MASK desired_access,
76 POBJECT_ATTRIBUTES object_attributes, PIO_STATUS_BLOCK io_status,
77 PLARGE_INTEGER allocation_size, ULONG file_attributes, ULONG sharing,
78 ULONG disposition, ULONG options, PVOID ea_buffer, ULONG ea_length) {
79 NtCreateFileFunction orig_fn = reinterpret_cast<
80 NtCreateFileFunction>(g_originals[CREATE_FILE_ID]);
81 return TargetNtCreateFile(orig_fn, file, desired_access, object_attributes,
82 io_status, allocation_size, file_attributes,
83 sharing, disposition, options, ea_buffer,
84 ea_length);
85 }
86
87 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenFile64(
88 PHANDLE file, ACCESS_MASK desired_access,
89 POBJECT_ATTRIBUTES object_attributes, PIO_STATUS_BLOCK io_status,
90 ULONG sharing, ULONG options) {
91 NtOpenFileFunction orig_fn = reinterpret_cast<
92 NtOpenFileFunction>(g_originals[OPEN_FILE_ID]);
93 return TargetNtOpenFile(orig_fn, file, desired_access, object_attributes,
94 io_status, sharing, options);
95 }
96
97 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtQueryAttributesFile64(
98 POBJECT_ATTRIBUTES object_attributes,
99 PFILE_BASIC_INFORMATION file_attributes) {
100 NtQueryAttributesFileFunction orig_fn = reinterpret_cast<
101 NtQueryAttributesFileFunction>(g_originals[QUERY_ATTRIB_FILE_ID]);
102 return TargetNtQueryAttributesFile(orig_fn, object_attributes,
103 file_attributes);
104 }
105
106 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtQueryFullAttributesFile64(
107 POBJECT_ATTRIBUTES object_attributes,
108 PFILE_NETWORK_OPEN_INFORMATION file_attributes) {
109 NtQueryFullAttributesFileFunction orig_fn = reinterpret_cast<
110 NtQueryFullAttributesFileFunction>(
111 g_originals[QUERY_FULL_ATTRIB_FILE_ID]);
112 return TargetNtQueryFullAttributesFile(orig_fn, object_attributes,
113 file_attributes);
114 }
115
116 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtSetInformationFile64(
117 HANDLE file, PIO_STATUS_BLOCK io_status, PVOID file_information,
118 ULONG length, FILE_INFORMATION_CLASS file_information_class) {
119 NtSetInformationFileFunction orig_fn = reinterpret_cast<
120 NtSetInformationFileFunction>(g_originals[SET_INFO_FILE_ID]);
121 return TargetNtSetInformationFile(orig_fn, file, io_status, file_information,
122 length, file_information_class);
123 }
124
125 // -----------------------------------------------------------------------
126
127 SANDBOX_INTERCEPT HANDLE WINAPI TargetCreateNamedPipeW64(
128 LPCWSTR pipe_name, DWORD open_mode, DWORD pipe_mode, DWORD max_instance,
129 DWORD out_buffer_size, DWORD in_buffer_size, DWORD default_timeout,
130 LPSECURITY_ATTRIBUTES security_attributes) {
131 CreateNamedPipeWFunction orig_fn = reinterpret_cast<
132 CreateNamedPipeWFunction>(g_originals[CREATE_NAMED_PIPE_ID]);
133 return TargetCreateNamedPipeW(orig_fn, pipe_name, open_mode, pipe_mode,
134 max_instance, out_buffer_size, in_buffer_size,
135 default_timeout, security_attributes);
136 }
137
138 // -----------------------------------------------------------------------
139
140 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenThread64(
141 PHANDLE thread, ACCESS_MASK desired_access,
142 POBJECT_ATTRIBUTES object_attributes, PCLIENT_ID client_id) {
143 NtOpenThreadFunction orig_fn = reinterpret_cast<
144 NtOpenThreadFunction>(g_originals[OPEN_THREAD_ID]);
145 return TargetNtOpenThread(orig_fn, thread, desired_access, object_attributes,
146 client_id);
147 }
148
149 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenProcess64(
150 PHANDLE process, ACCESS_MASK desired_access,
151 POBJECT_ATTRIBUTES object_attributes, PCLIENT_ID client_id) {
152 NtOpenProcessFunction orig_fn = reinterpret_cast<
153 NtOpenProcessFunction>(g_originals[OPEN_PROCESS_ID]);
154 return TargetNtOpenProcess(orig_fn, process, desired_access,
155 object_attributes, client_id);
156 }
157
158 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenProcessToken64(
159 HANDLE process, ACCESS_MASK desired_access, PHANDLE token) {
160 NtOpenProcessTokenFunction orig_fn = reinterpret_cast<
161 NtOpenProcessTokenFunction>(g_originals[OPEN_PROCESS_TOKEN_ID]);
162 return TargetNtOpenProcessToken(orig_fn, process, desired_access, token);
163 }
164
165 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenProcessTokenEx64(
166 HANDLE process, ACCESS_MASK desired_access, ULONG handle_attributes,
167 PHANDLE token) {
168 NtOpenProcessTokenExFunction orig_fn = reinterpret_cast<
169 NtOpenProcessTokenExFunction>(g_originals[OPEN_PROCESS_TOKEN_EX_ID]);
170 return TargetNtOpenProcessTokenEx(orig_fn, process, desired_access,
171 handle_attributes, token);
172 }
173
174 SANDBOX_INTERCEPT BOOL WINAPI TargetCreateProcessW64(
175 LPCWSTR application_name, LPWSTR command_line,
176 LPSECURITY_ATTRIBUTES process_attributes,
177 LPSECURITY_ATTRIBUTES thread_attributes, BOOL inherit_handles, DWORD flags,
178 LPVOID environment, LPCWSTR current_directory, LPSTARTUPINFOW startup_info,
179 LPPROCESS_INFORMATION process_information) {
180 CreateProcessWFunction orig_fn = reinterpret_cast<
181 CreateProcessWFunction>(g_originals[CREATE_PROCESSW_ID]);
182 return TargetCreateProcessW(orig_fn, application_name, command_line,
183 process_attributes, thread_attributes,
184 inherit_handles, flags, environment,
185 current_directory, startup_info,
186 process_information);
187 }
188
189 SANDBOX_INTERCEPT BOOL WINAPI TargetCreateProcessA64(
190 LPCSTR application_name, LPSTR command_line,
191 LPSECURITY_ATTRIBUTES process_attributes,
192 LPSECURITY_ATTRIBUTES thread_attributes, BOOL inherit_handles, DWORD flags,
193 LPVOID environment, LPCSTR current_directory, LPSTARTUPINFOA startup_info,
194 LPPROCESS_INFORMATION process_information) {
195 CreateProcessAFunction orig_fn = reinterpret_cast<
196 CreateProcessAFunction>(g_originals[CREATE_PROCESSA_ID]);
197 return TargetCreateProcessA(orig_fn, application_name, command_line,
198 process_attributes, thread_attributes,
199 inherit_handles, flags, environment,
200 current_directory, startup_info,
201 process_information);
202 }
203
204 SANDBOX_INTERCEPT HANDLE WINAPI
205 TargetCreateThread64(LPSECURITY_ATTRIBUTES thread_attributes,
206 SIZE_T stack_size,
207 LPTHREAD_START_ROUTINE start_address,
208 PVOID parameter,
209 DWORD creation_flags,
210 LPDWORD thread_id) {
211 CreateThreadFunction orig_fn =
212 reinterpret_cast<CreateThreadFunction>(g_originals[CREATE_THREAD_ID]);
213 return TargetCreateThread(orig_fn, thread_attributes, stack_size,
214 start_address, parameter, creation_flags,
215 thread_id);
216 }
217
218 // -----------------------------------------------------------------------
219
220 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtCreateKey64(
221 PHANDLE key, ACCESS_MASK desired_access,
222 POBJECT_ATTRIBUTES object_attributes, ULONG title_index,
223 PUNICODE_STRING class_name, ULONG create_options, PULONG disposition) {
224 NtCreateKeyFunction orig_fn = reinterpret_cast<
225 NtCreateKeyFunction>(g_originals[CREATE_KEY_ID]);
226 return TargetNtCreateKey(orig_fn, key, desired_access, object_attributes,
227 title_index, class_name, create_options,
228 disposition);
229 }
230
231 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenKey64(
232 PHANDLE key, ACCESS_MASK desired_access,
233 POBJECT_ATTRIBUTES object_attributes) {
234 NtOpenKeyFunction orig_fn = reinterpret_cast<
235 NtOpenKeyFunction>(g_originals[OPEN_KEY_ID]);
236 return TargetNtOpenKey(orig_fn, key, desired_access, object_attributes);
237 }
238
239 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenKeyEx64(
240 PHANDLE key, ACCESS_MASK desired_access,
241 POBJECT_ATTRIBUTES object_attributes, ULONG open_options) {
242 NtOpenKeyExFunction orig_fn = reinterpret_cast<
243 NtOpenKeyExFunction>(g_originals[OPEN_KEY_EX_ID]);
244 return TargetNtOpenKeyEx(orig_fn, key, desired_access, object_attributes,
245 open_options);
246 }
247
248 // -----------------------------------------------------------------------
249
250 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtCreateEvent64(
251 PHANDLE event_handle, ACCESS_MASK desired_access,
252 POBJECT_ATTRIBUTES object_attributes, EVENT_TYPE event_type,
253 BOOLEAN initial_state) {
254 NtCreateEventFunction orig_fn = reinterpret_cast<
255 NtCreateEventFunction>(g_originals[CREATE_EVENT_ID]);
256 return TargetNtCreateEvent(orig_fn, event_handle, desired_access,
257 object_attributes, event_type, initial_state);
258 }
259
260 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenEvent64(
261 PHANDLE event_handle, ACCESS_MASK desired_access,
262 POBJECT_ATTRIBUTES object_attributes) {
263 NtOpenEventFunction orig_fn = reinterpret_cast<
264 NtOpenEventFunction>(g_originals[OPEN_EVENT_ID]);
265 return TargetNtOpenEvent(orig_fn, event_handle, desired_access,
266 object_attributes);
267 }
268
269 // -----------------------------------------------------------------------
270
271 SANDBOX_INTERCEPT BOOL WINAPI TargetGdiDllInitialize64(
272 HANDLE dll,
273 DWORD reason) {
274 GdiDllInitializeFunction orig_fn = reinterpret_cast<
275 GdiDllInitializeFunction>(g_originals[GDIINITIALIZE_ID]);
276 return TargetGdiDllInitialize(orig_fn, dll, reason);
277 }
278
279 SANDBOX_INTERCEPT HGDIOBJ WINAPI TargetGetStockObject64(int object) {
280 GetStockObjectFunction orig_fn = reinterpret_cast<
281 GetStockObjectFunction>(g_originals[GETSTOCKOBJECT_ID]);
282 return TargetGetStockObject(orig_fn, object);
283 }
284
285 SANDBOX_INTERCEPT ATOM WINAPI TargetRegisterClassW64(
286 const WNDCLASS* wnd_class) {
287 RegisterClassWFunction orig_fn = reinterpret_cast<
288 RegisterClassWFunction>(g_originals[REGISTERCLASSW_ID]);
289 return TargetRegisterClassW(orig_fn, wnd_class);
290 }
291
292 } // namespace sandbox
OLDNEW
« no previous file with comments | « sandbox/win/src/interceptors_64.h ('k') | sandbox/win/src/internal_types.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698