Wrap deprecated sandbox functions in C++ class.

ipc/ipc_send_fds_test.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "build/build_config.h"
 
 #if defined(OS_POSIX)
 #if defined(OS_MACOSX)
 extern "C" {
 #include <sandbox.h>

[Robert Sesek, 2016/04/05 14:13:25]

Remove.

[Greg K, 2016/04/05 18:24:44]

It's still needed for the profile constants.

 }
 #endif
 #include <fcntl.h>
 #include <stddef.h>
 #include <sys/socket.h>
 #include <sys/stat.h>
 #include <unistd.h>
 
 #include <queue>
 
 #include "base/callback.h"
 #include "base/file_descriptor_posix.h"
 #include "base/location.h"
 #include "base/pickle.h"
 #include "base/posix/eintr_wrapper.h"
 #include "base/single_thread_task_runner.h"
 #include "base/synchronization/waitable_event.h"
 #include "ipc/ipc_message_attachment_set.h"
 #include "ipc/ipc_message_utils.h"
 #include "ipc/ipc_test_base.h"
 
 #if defined(OS_POSIX)
 #include "base/macros.h"
 #endif
 
+#if defined(OS_MACOSX)
+#include "sandbox/mac/seatbelt.h"
+#endif
+
 namespace {
 
 const unsigned kNumFDsToSend = 7;  // per message
 const unsigned kNumMessages = 20;
 const char* kDevZeroPath = "/dev/zero";
 
 #if defined(OS_POSIX)
 static_assert(kNumFDsToSend ==
                   IPC::MessageAttachmentSet::kMaxDescriptorsPerMessage,
               "The number of FDs to send must be kMaxDescriptorsPerMessage.");
@@ skipping 140 matching lines @@
 
 MULTIPROCESS_IPC_TEST_CLIENT_MAIN(SendFdsSandboxedClient) {
   struct stat st;
   const int fd = open(kDevZeroPath, O_RDONLY);
   fstat(fd, &st);
   if (IGNORE_EINTR(close(fd)) < 0)
     return -1;
 
   // Enable the sandbox.
   char* error_buff = NULL;
-#pragma clang diagnostic push
-#pragma clang diagnostic ignored "-Wdeprecated-declarations"
-  int error = sandbox_init(kSBXProfilePureComputation, SANDBOX_NAMED,
-                           &error_buff);
+  int error = sandbox::Seatbelt::sandbox_init(kSBXProfilePureComputation,
+                                              SANDBOX_NAMED, &error_buff);
   bool success = (error == 0 && error_buff == NULL);
   if (!success)
     return -1;
 
-  sandbox_free_error(error_buff);
-#pragma clang diagnostic pop
+  sandbox::Seatbelt::sandbox_free_error(error_buff);
 
   // Make sure sandbox is really enabled.
   if (open(kDevZeroPath, O_RDONLY) != -1) {
     LOG(ERROR) << "Sandbox wasn't properly enabled";
     return -1;
   }
 
   // See if we can receive a file descriptor.
   return SendFdsClientCommon("SendFdsSandboxedClient", st.st_ino);
 }
@@ skipping 165 matching lines @@
   base::WaitableEvent received_;
 };
 
 TEST_F(IPCMultiSendingFdsTest, StressTest) {
   Run();
 }
 
 }  // namespace
 
 #endif  // defined(OS_POSIX)