Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(5)

Side by Side Diff: sandbox/win/src/named_pipe_policy.cc

Issue 1851213002: Remove sandbox on Windows. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: fix nacl compile issues Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/win/src/named_pipe_policy.h ('k') | sandbox/win/src/named_pipe_policy_test.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "sandbox/win/src/named_pipe_policy.h"
6
7 #include <string>
8
9 #include "sandbox/win/src/ipc_tags.h"
10 #include "sandbox/win/src/policy_engine_opcodes.h"
11 #include "sandbox/win/src/policy_params.h"
12 #include "sandbox/win/src/sandbox_types.h"
13
14 namespace {
15
16 // Creates a named pipe and duplicates the handle to 'target_process'. The
17 // remaining parameters are the same as CreateNamedPipeW().
18 HANDLE CreateNamedPipeHelper(HANDLE target_process, LPCWSTR pipe_name,
19 DWORD open_mode, DWORD pipe_mode,
20 DWORD max_instances, DWORD out_buffer_size,
21 DWORD in_buffer_size, DWORD default_timeout,
22 LPSECURITY_ATTRIBUTES security_attributes) {
23 HANDLE pipe = ::CreateNamedPipeW(pipe_name, open_mode, pipe_mode,
24 max_instances, out_buffer_size,
25 in_buffer_size, default_timeout,
26 security_attributes);
27 if (INVALID_HANDLE_VALUE == pipe)
28 return pipe;
29
30 HANDLE new_pipe;
31 if (!::DuplicateHandle(::GetCurrentProcess(), pipe,
32 target_process, &new_pipe,
33 0, FALSE,
34 DUPLICATE_CLOSE_SOURCE | DUPLICATE_SAME_ACCESS)) {
35 return INVALID_HANDLE_VALUE;
36 }
37
38 return new_pipe;
39 }
40
41 } // namespace
42
43 namespace sandbox {
44
45 bool NamedPipePolicy::GenerateRules(const wchar_t* name,
46 TargetPolicy::Semantics semantics,
47 LowLevelPolicy* policy) {
48 if (TargetPolicy::NAMEDPIPES_ALLOW_ANY != semantics) {
49 return false;
50 }
51 PolicyRule pipe(ASK_BROKER);
52 if (!pipe.AddStringMatch(IF, NameBased::NAME, name, CASE_INSENSITIVE)) {
53 return false;
54 }
55 if (!policy->AddRule(IPC_CREATENAMEDPIPEW_TAG, &pipe)) {
56 return false;
57 }
58 return true;
59 }
60
61 DWORD NamedPipePolicy::CreateNamedPipeAction(EvalResult eval_result,
62 const ClientInfo& client_info,
63 const base::string16 &name,
64 DWORD open_mode, DWORD pipe_mode,
65 DWORD max_instances,
66 DWORD out_buffer_size,
67 DWORD in_buffer_size,
68 DWORD default_timeout,
69 HANDLE* pipe) {
70 // The only action supported is ASK_BROKER which means create the pipe.
71 if (ASK_BROKER != eval_result) {
72 return ERROR_ACCESS_DENIED;
73 }
74
75 *pipe = CreateNamedPipeHelper(client_info.process, name.c_str(),
76 open_mode, pipe_mode, max_instances,
77 out_buffer_size, in_buffer_size,
78 default_timeout, NULL);
79
80 if (INVALID_HANDLE_VALUE == *pipe)
81 return ERROR_ACCESS_DENIED;
82
83 return ERROR_SUCCESS;
84 }
85
86 } // namespace sandbox
OLDNEW
« no previous file with comments | « sandbox/win/src/named_pipe_policy.h ('k') | sandbox/win/src/named_pipe_policy_test.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698