Kill child processes on bad Mojo messages

content/browser/browser_child_process_host_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_BROWSER_CHILD_PROCESS_HOST_IMPL_H_
 #define CONTENT_BROWSER_BROWSER_CHILD_PROCESS_HOST_IMPL_H_
 
 #include <stdint.h>
 
 #include <list>
 #include <memory>
 
 #include "base/compiler_specific.h"
+#include "base/memory/ref_counted.h"
+#include "base/memory/weak_ptr.h"
 #include "base/process/process.h"
+#include "base/single_thread_task_runner.h"
 #include "base/synchronization/waitable_event_watcher.h"
 #include "build/build_config.h"
 #include "content/browser/child_process_launcher.h"
 #include "content/browser/power_monitor_message_broadcaster.h"
 #include "content/public/browser/browser_child_process_host.h"
 #include "content/public/browser/child_process_data.h"
 #include "content/public/common/child_process_host_delegate.h"
 
 #if defined(OS_WIN)
 #include "base/win/object_watcher.h"
@@ skipping 85 matching lines @@
   static void RemoveObserver(BrowserChildProcessObserver* observer);
 
   // ChildProcessLauncher::Client implementation.
   void OnProcessLaunched() override;
   void OnProcessLaunchFailed(int error_code) override;
 
   // Returns true if the process has successfully launched. Must only be called
   // on the IO thread.
   bool IsProcessLaunched() const;
 
+  static void OnMojoError(
+      base::WeakPtr<BrowserChildProcessHostImpl> process,
+      scoped_refptr<base::SingleThreadTaskRunner> task_runner,
+      const std::string& error);
+
 #if defined(OS_WIN)
   // ObjectWatcher::Delegate implementation.
   void OnObjectSignaled(HANDLE object) override;
 #endif
 
   ChildProcessData data_;
   BrowserChildProcessHostDelegate* delegate_;
   std::unique_ptr<ChildProcessHost> child_process_host_;
   const std::string mojo_child_token_;
 
   std::unique_ptr<ChildProcessLauncher> child_process_;
 
   PowerMonitorMessageBroadcaster power_monitor_message_broadcaster_;
 
 #if defined(OS_WIN)
   // Watches to see if the child process exits before the IPC channel has
   // been connected. Thereafter, its exit is determined by an error on the
   // IPC channel.
   base::win::ObjectWatcher early_exit_watcher_;
 #endif
 
   bool is_channel_connected_;
   bool notify_child_disconnected_;
+
+  base::WeakPtrFactory<BrowserChildProcessHostImpl> weak_factory_;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_BROWSER_CHILD_PROCESS_HOST_IMPL_H_