OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/zygote/zygote_main.h" | 5 #include "content/zygote/zygote_main.h" |
6 | 6 |
7 #include <dlfcn.h> | 7 #include <dlfcn.h> |
8 #include <fcntl.h> | 8 #include <fcntl.h> |
9 #include <pthread.h> | 9 #include <pthread.h> |
10 #include <stdio.h> | 10 #include <stdio.h> |
11 #include <sys/socket.h> | 11 #include <sys/socket.h> |
12 #include <sys/stat.h> | 12 #include <sys/stat.h> |
13 #include <sys/types.h> | 13 #include <sys/types.h> |
14 #include <sys/wait.h> | 14 #include <sys/wait.h> |
15 #include <unistd.h> | 15 #include <unistd.h> |
16 | 16 |
17 #include "base/basictypes.h" | 17 #include "base/basictypes.h" |
18 #include "base/command_line.h" | 18 #include "base/command_line.h" |
19 #include "base/containers/hash_tables.h" | 19 #include "base/containers/hash_tables.h" |
20 #include "base/files/file_path.h" | 20 #include "base/files/file_path.h" |
21 #include "base/linux_util.h" | 21 #include "base/linux_util.h" |
22 #include "base/memory/scoped_ptr.h" | 22 #include "base/memory/scoped_ptr.h" |
| 23 #include "base/native_library.h" |
23 #include "base/pickle.h" | 24 #include "base/pickle.h" |
24 #include "base/posix/eintr_wrapper.h" | 25 #include "base/posix/eintr_wrapper.h" |
25 #include "base/posix/unix_domain_socket_linux.h" | 26 #include "base/posix/unix_domain_socket_linux.h" |
26 #include "base/process_util.h" | 27 #include "base/process_util.h" |
27 #include "base/rand_util.h" | 28 #include "base/rand_util.h" |
28 #include "base/sys_info.h" | 29 #include "base/sys_info.h" |
29 #include "build/build_config.h" | 30 #include "build/build_config.h" |
30 #include "content/common/font_config_ipc_linux.h" | 31 #include "content/common/font_config_ipc_linux.h" |
31 #include "content/common/pepper_plugin_registry.h" | 32 #include "content/common/pepper_plugin_list.h" |
32 #include "content/common/sandbox_linux.h" | 33 #include "content/common/sandbox_linux.h" |
33 #include "content/common/zygote_commands_linux.h" | 34 #include "content/common/zygote_commands_linux.h" |
34 #include "content/public/common/content_switches.h" | 35 #include "content/public/common/content_switches.h" |
35 #include "content/public/common/main_function_params.h" | 36 #include "content/public/common/main_function_params.h" |
| 37 #include "content/public/common/pepper_plugin_info.h" |
36 #include "content/public/common/sandbox_linux.h" | 38 #include "content/public/common/sandbox_linux.h" |
37 #include "content/public/common/zygote_fork_delegate_linux.h" | 39 #include "content/public/common/zygote_fork_delegate_linux.h" |
38 #include "content/zygote/zygote_linux.h" | 40 #include "content/zygote/zygote_linux.h" |
39 #include "crypto/nss_util.h" | 41 #include "crypto/nss_util.h" |
40 #include "sandbox/linux/services/libc_urandom_override.h" | 42 #include "sandbox/linux/services/libc_urandom_override.h" |
41 #include "sandbox/linux/suid/client/setuid_sandbox_client.h" | 43 #include "sandbox/linux/suid/client/setuid_sandbox_client.h" |
42 #include "third_party/icu/source/i18n/unicode/timezone.h" | 44 #include "third_party/icu/source/i18n/unicode/timezone.h" |
43 #include "third_party/skia/include/ports/SkFontConfigInterface.h" | 45 #include "third_party/skia/include/ports/SkFontConfigInterface.h" |
44 | 46 |
45 #if defined(OS_LINUX) | 47 #if defined(OS_LINUX) |
(...skipping 196 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
242 if (g_am_zygote_or_renderer) { | 244 if (g_am_zygote_or_renderer) { |
243 ProxyLocaltimeCallToBrowser(*timep, result, NULL, 0); | 245 ProxyLocaltimeCallToBrowser(*timep, result, NULL, 0); |
244 return result; | 246 return result; |
245 } else { | 247 } else { |
246 CHECK_EQ(0, pthread_once(&g_libc_localtime_funcs_guard, | 248 CHECK_EQ(0, pthread_once(&g_libc_localtime_funcs_guard, |
247 InitLibcLocaltimeFunctions)); | 249 InitLibcLocaltimeFunctions)); |
248 return g_libc_localtime64_r(timep, result); | 250 return g_libc_localtime64_r(timep, result); |
249 } | 251 } |
250 } | 252 } |
251 | 253 |
| 254 #if defined(ENABLE_PLUGINS) |
| 255 // Loads the (native) libraries but does not initialize them (i.e., does not |
| 256 // call PPP_InitializeModule). This is needed by the zygote on Linux to get |
| 257 // access to the plugins before entering the sandbox. |
| 258 void PreloadPepperPlugins() { |
| 259 std::vector<PepperPluginInfo> plugins; |
| 260 ComputePepperPluginList(&plugins); |
| 261 for (size_t i = 0; i < plugins.size(); ++i) { |
| 262 if (!plugins[i].is_internal && plugins[i].is_sandboxed) { |
| 263 std::string error; |
| 264 base::NativeLibrary library = base::LoadNativeLibrary(plugins[i].path, |
| 265 &error); |
| 266 DLOG_IF(WARNING, !library) << "Unable to load plugin " |
| 267 << plugins[i].path.value() << " " |
| 268 << error; |
| 269 (void)library; // Prevent release-mode warning. |
| 270 } |
| 271 } |
| 272 } |
| 273 #endif |
| 274 |
252 // This function triggers the static and lazy construction of objects that need | 275 // This function triggers the static and lazy construction of objects that need |
253 // to be created before imposing the sandbox. | 276 // to be created before imposing the sandbox. |
254 static void PreSandboxInit() { | 277 static void PreSandboxInit() { |
255 base::RandUint64(); | 278 base::RandUint64(); |
256 | 279 |
257 base::SysInfo::MaxSharedMemorySize(); | 280 base::SysInfo::MaxSharedMemorySize(); |
258 | 281 |
259 // ICU DateFormat class (used in base/time_format.cc) needs to get the | 282 // ICU DateFormat class (used in base/time_format.cc) needs to get the |
260 // Olson timezone ID by accessing the zoneinfo files on disk. After | 283 // Olson timezone ID by accessing the zoneinfo files on disk. After |
261 // TimeZone::createDefault is called once here, the timezone ID is | 284 // TimeZone::createDefault is called once here, the timezone ID is |
262 // cached and there's no more need to access the file system. | 285 // cached and there's no more need to access the file system. |
263 scoped_ptr<icu::TimeZone> zone(icu::TimeZone::createDefault()); | 286 scoped_ptr<icu::TimeZone> zone(icu::TimeZone::createDefault()); |
264 | 287 |
265 #if defined(USE_NSS) | 288 #if defined(USE_NSS) |
266 // NSS libraries are loaded before sandbox is activated. This is to allow | 289 // NSS libraries are loaded before sandbox is activated. This is to allow |
267 // successful initialization of NSS which tries to load extra library files. | 290 // successful initialization of NSS which tries to load extra library files. |
268 crypto::LoadNSSLibraries(); | 291 crypto::LoadNSSLibraries(); |
269 #elif defined(USE_OPENSSL) | 292 #elif defined(USE_OPENSSL) |
270 // OpenSSL is intentionally not supported in the sandboxed processes, see | 293 // OpenSSL is intentionally not supported in the sandboxed processes, see |
271 // http://crbug.com/99163. If that ever changes we'll likely need to init | 294 // http://crbug.com/99163. If that ever changes we'll likely need to init |
272 // OpenSSL here (at least, load the library and error strings). | 295 // OpenSSL here (at least, load the library and error strings). |
273 #else | 296 #else |
274 // It's possible that another hypothetical crypto stack would not require | 297 // It's possible that another hypothetical crypto stack would not require |
275 // pre-sandbox init, but more likely this is just a build configuration error. | 298 // pre-sandbox init, but more likely this is just a build configuration error. |
276 #error Which SSL library are you using? | 299 #error Which SSL library are you using? |
277 #endif | 300 #endif |
278 #if defined(ENABLE_PLUGINS) | 301 #if defined(ENABLE_PLUGINS) |
279 // Ensure access to the Pepper plugins before the sandbox is turned on. | 302 // Ensure access to the Pepper plugins before the sandbox is turned on. |
280 PepperPluginRegistry::PreloadModules(); | 303 PreloadPepperPlugins(); |
281 #endif | 304 #endif |
282 #if defined(ENABLE_WEBRTC) | 305 #if defined(ENABLE_WEBRTC) |
283 InitializeWebRtcModule(); | 306 InitializeWebRtcModule(); |
284 #endif | 307 #endif |
285 } | 308 } |
286 | 309 |
287 // Do nothing here | 310 // Do nothing here |
288 static void SIGCHLDHandler(int signal) { | 311 static void SIGCHLDHandler(int signal) { |
289 } | 312 } |
290 | 313 |
(...skipping 177 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
468 } | 491 } |
469 | 492 |
470 int sandbox_flags = linux_sandbox->GetStatus(); | 493 int sandbox_flags = linux_sandbox->GetStatus(); |
471 | 494 |
472 Zygote zygote(sandbox_flags, forkdelegate); | 495 Zygote zygote(sandbox_flags, forkdelegate); |
473 // This function call can return multiple times, once per fork(). | 496 // This function call can return multiple times, once per fork(). |
474 return zygote.ProcessRequests(); | 497 return zygote.ProcessRequests(); |
475 } | 498 } |
476 | 499 |
477 } // namespace content | 500 } // namespace content |
OLD | NEW |