Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(125)

Side by Side Diff: components/nacl/browser/nacl_file_host.cc

Issue 224803002: Enable mmap and identity-based validation caching on pnacl-{llc,ld}.nexe (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Fix token handover for main nexe Created 6 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "components/nacl/browser/nacl_file_host.h" 5 #include "components/nacl/browser/nacl_file_host.h"
6 6
7 #include "base/bind.h" 7 #include "base/bind.h"
8 #include "base/file_util.h" 8 #include "base/file_util.h"
9 #include "base/files/file.h" 9 #include "base/files/file.h"
10 #include "base/files/file_path.h" 10 #include "base/files/file_path.h"
(...skipping 20 matching lines...) Expand all
31 // in file name limit error-handling-code-paths, etc. 31 // in file name limit error-handling-code-paths, etc.
32 const size_t kMaxFileLength = 40; 32 const size_t kMaxFileLength = 40;
33 33
34 void NotifyRendererOfError( 34 void NotifyRendererOfError(
35 nacl::NaClHostMessageFilter* nacl_host_message_filter, 35 nacl::NaClHostMessageFilter* nacl_host_message_filter,
36 IPC::Message* reply_msg) { 36 IPC::Message* reply_msg) {
37 reply_msg->set_reply_error(); 37 reply_msg->set_reply_error();
38 nacl_host_message_filter->Send(reply_msg); 38 nacl_host_message_filter->Send(reply_msg);
39 } 39 }
40 40
41 base::File PnaclDoOpenFile(const base::FilePath& file_to_open) { 41 // Make a wrapper function for the NaClHostMsg_GetReadonlyPnaclFD macro,
42 return base::File(file_to_open, 42 // so that there is a function pointer.
43 base::File::FLAG_OPEN | base::File::FLAG_READ); 43 void WriteGetReadonlyPnaclFDReply(IPC::Message* reply_msg,
44 IPC::PlatformFileForTransit file_desc,
45 uint64 file_token_lo,
46 uint64 file_token_hi) {
47 NaClHostMsg_GetReadonlyPnaclFD::WriteReplyParams(reply_msg,
48 file_desc,
49 file_token_lo,
50 file_token_hi);
51 }
52
53 // Make a wrapper function for the NaClHostMsg_OpenNaClExecutable macro,
54 // so that there is a function pointer.
55 void WriteOpenNaClExecutableReply(IPC::Message* reply_msg,
56 IPC::PlatformFileForTransit file_desc,
57 uint64 file_token_lo,
58 uint64 file_token_hi) {
59 NaClHostMsg_OpenNaClExecutable::WriteReplyParams(reply_msg,
60 file_desc,
61 file_token_lo,
62 file_token_hi);
63 }
64
65 void DoRegisterOpenedNaClExecutableFile(
66 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter,
67 base::File file,
68 base::FilePath file_path,
69 IPC::Message* reply_msg,
70 void (*WriteReplyParams)(IPC::Message* msg,
71 IPC::PlatformFileForTransit desc,
72 uint64 lo_token,
73 uint64 hi_token)) {
74 // IO thread owns the NaClBrowser singleton.
75 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
76
77 nacl::NaClBrowser* nacl_browser = nacl::NaClBrowser::GetInstance();
78 uint64 file_token_lo = 0;
79 uint64 file_token_hi = 0;
80 nacl_browser->PutFilePath(file_path, &file_token_lo, &file_token_hi);
81
82 IPC::PlatformFileForTransit file_desc = IPC::TakeFileHandleForProcess(
83 file.Pass(),
84 nacl_host_message_filter->PeerHandle());
85
86 (*WriteReplyParams)(reply_msg, file_desc, file_token_lo, file_token_hi);
87 nacl_host_message_filter->Send(reply_msg);
44 } 88 }
45 89
46 void DoOpenPnaclFile( 90 void DoOpenPnaclFile(
47 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter, 91 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter,
48 const std::string& filename, 92 const std::string& filename,
93 bool is_executable,
49 IPC::Message* reply_msg) { 94 IPC::Message* reply_msg) {
50 DCHECK(BrowserThread::GetBlockingPool()->RunsTasksOnCurrentThread()); 95 DCHECK(BrowserThread::GetBlockingPool()->RunsTasksOnCurrentThread());
51 base::FilePath full_filepath; 96 base::FilePath full_filepath;
52 97
53 // PNaCl must be installed. 98 // PNaCl must be installed.
54 base::FilePath pnacl_dir; 99 base::FilePath pnacl_dir;
55 if (!nacl::NaClBrowser::GetDelegate()->GetPnaclDirectory(&pnacl_dir) || 100 if (!nacl::NaClBrowser::GetDelegate()->GetPnaclDirectory(&pnacl_dir) ||
56 !base::PathExists(pnacl_dir)) { 101 !base::PathExists(pnacl_dir)) {
57 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 102 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
58 return; 103 return;
59 } 104 }
60 105
61 // Do some validation. 106 // Do some validation.
62 if (!nacl_file_host::PnaclCanOpenFile(filename, &full_filepath)) { 107 if (!nacl_file_host::PnaclCanOpenFile(filename, &full_filepath)) {
63 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 108 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
64 return; 109 return;
65 } 110 }
66 111
67 base::File file_to_open = PnaclDoOpenFile(full_filepath); 112 base::File file_to_open = nacl::OpenNaClReadExecImpl(full_filepath,
113 is_executable);
68 if (!file_to_open.IsValid()) { 114 if (!file_to_open.IsValid()) {
69 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 115 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
70 return; 116 return;
71 } 117 }
72 118
73 // Send the reply! 119 // This function is running on the blocking pool, but the path needs to be
74 // Do any DuplicateHandle magic that is necessary first. 120 // registered in a structure owned by the IO thread.
75 IPC::PlatformFileForTransit target_desc = 121 // Not all PNaCl files are executable. Only register those that are
76 IPC::TakeFileHandleForProcess(file_to_open.Pass(), 122 // executable in the NaCl file_path cache.
77 nacl_host_message_filter->PeerHandle()); 123 if (is_executable) {
78 if (target_desc == IPC::InvalidPlatformFileForTransit()) { 124 BrowserThread::PostTask(
79 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 125 BrowserThread::IO, FROM_HERE,
80 return; 126 base::Bind(
127 &DoRegisterOpenedNaClExecutableFile,
128 nacl_host_message_filter,
129 Passed(file_to_open.Pass()), full_filepath, reply_msg,
130 &WriteGetReadonlyPnaclFDReply));
131 } else {
132 IPC::PlatformFileForTransit file_desc = IPC::TakeFileHandleForProcess(
133 file_to_open.Pass(),
134 nacl_host_message_filter->PeerHandle());
135
136 WriteGetReadonlyPnaclFDReply(reply_msg, file_desc, 0, 0);
137 nacl_host_message_filter->Send(reply_msg);
81 } 138 }
82 NaClHostMsg_GetReadonlyPnaclFD::WriteReplyParams(
83 reply_msg, target_desc);
84 nacl_host_message_filter->Send(reply_msg);
85 }
86
87 void DoRegisterOpenedNaClExecutableFile(
88 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter,
89 base::File file,
90 base::FilePath file_path,
91 IPC::Message* reply_msg) {
92 // IO thread owns the NaClBrowser singleton.
93 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
94
95 nacl::NaClBrowser* nacl_browser = nacl::NaClBrowser::GetInstance();
96 uint64 file_token_lo = 0;
97 uint64 file_token_hi = 0;
98 nacl_browser->PutFilePath(file_path, &file_token_lo, &file_token_hi);
99
100 IPC::PlatformFileForTransit file_desc = IPC::TakeFileHandleForProcess(
101 file.Pass(),
102 nacl_host_message_filter->PeerHandle());
103
104 NaClHostMsg_OpenNaClExecutable::WriteReplyParams(
105 reply_msg, file_desc, file_token_lo, file_token_hi);
106 nacl_host_message_filter->Send(reply_msg);
107 } 139 }
108 140
109 // Convert the file URL into a file descriptor. 141 // Convert the file URL into a file descriptor.
110 // This function is security sensitive. Be sure to check with a security 142 // This function is security sensitive. Be sure to check with a security
111 // person before you modify it. 143 // person before you modify it.
112 void DoOpenNaClExecutableOnThreadPool( 144 void DoOpenNaClExecutableOnThreadPool(
113 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter, 145 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter,
114 const GURL& file_url, 146 const GURL& file_url,
115 IPC::Message* reply_msg) { 147 IPC::Message* reply_msg) {
116 DCHECK(BrowserThread::GetBlockingPool()->RunsTasksOnCurrentThread()); 148 DCHECK(BrowserThread::GetBlockingPool()->RunsTasksOnCurrentThread());
117 149
118 base::FilePath file_path; 150 base::FilePath file_path;
119 if (!nacl::NaClBrowser::GetDelegate()->MapUrlToLocalFilePath( 151 if (!nacl::NaClBrowser::GetDelegate()->MapUrlToLocalFilePath(
120 file_url, true /* use_blocking_api */, &file_path)) { 152 file_url, true /* use_blocking_api */, &file_path)) {
121 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 153 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
122 return; 154 return;
123 } 155 }
124 156
125 base::File file = nacl::OpenNaClExecutableImpl(file_path); 157 base::File file = nacl::OpenNaClReadExecImpl(file_path, true);
126 if (file.IsValid()) { 158 if (file.IsValid()) {
127 // This function is running on the blocking pool, but the path needs to be 159 // This function is running on the blocking pool, but the path needs to be
128 // registered in a structure owned by the IO thread. 160 // registered in a structure owned by the IO thread.
129 BrowserThread::PostTask( 161 BrowserThread::PostTask(
130 BrowserThread::IO, FROM_HERE, 162 BrowserThread::IO, FROM_HERE,
131 base::Bind( 163 base::Bind(
132 &DoRegisterOpenedNaClExecutableFile, 164 &DoRegisterOpenedNaClExecutableFile,
133 nacl_host_message_filter, 165 nacl_host_message_filter,
134 Passed(file.Pass()), file_path, reply_msg)); 166 Passed(file.Pass()), file_path, reply_msg,
167 &WriteOpenNaClExecutableReply));
135 } else { 168 } else {
136 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 169 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
137 return; 170 return;
138 } 171 }
139 } 172 }
140 173
141 } // namespace 174 } // namespace
142 175
143 namespace nacl_file_host { 176 namespace nacl_file_host {
144 177
145 void GetReadonlyPnaclFd( 178 void GetReadonlyPnaclFd(
146 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter, 179 scoped_refptr<nacl::NaClHostMessageFilter> nacl_host_message_filter,
147 const std::string& filename, 180 const std::string& filename,
181 bool is_executable,
148 IPC::Message* reply_msg) { 182 IPC::Message* reply_msg) {
149 if (!BrowserThread::PostBlockingPoolTask( 183 if (!BrowserThread::PostBlockingPoolTask(
150 FROM_HERE, 184 FROM_HERE,
151 base::Bind(&DoOpenPnaclFile, 185 base::Bind(&DoOpenPnaclFile,
152 nacl_host_message_filter, 186 nacl_host_message_filter,
153 filename, 187 filename,
188 is_executable,
154 reply_msg))) { 189 reply_msg))) {
155 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 190 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
156 } 191 }
157 } 192 }
158 193
159 // This function is security sensitive. Be sure to check with a security 194 // This function is security sensitive. Be sure to check with a security
160 // person before you modify it. 195 // person before you modify it.
161 bool PnaclCanOpenFile(const std::string& filename, 196 bool PnaclCanOpenFile(const std::string& filename,
162 base::FilePath* file_to_open) { 197 base::FilePath* file_to_open) {
163 if (filename.length() > kMaxFileLength) 198 if (filename.length() > kMaxFileLength)
(...skipping 64 matching lines...) Expand 10 before | Expand all | Expand 10 after
228 FROM_HERE, 263 FROM_HERE,
229 base::Bind( 264 base::Bind(
230 &DoOpenNaClExecutableOnThreadPool, 265 &DoOpenNaClExecutableOnThreadPool,
231 nacl_host_message_filter, 266 nacl_host_message_filter,
232 file_url, reply_msg))) { 267 file_url, reply_msg))) {
233 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg); 268 NotifyRendererOfError(nacl_host_message_filter.get(), reply_msg);
234 } 269 }
235 } 270 }
236 271
237 } // namespace nacl_file_host 272 } // namespace nacl_file_host
OLDNEW
« no previous file with comments | « components/nacl/browser/nacl_file_host.h ('k') | components/nacl/browser/nacl_host_message_filter.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698