Install the chrome event log provider together with the browser.

chrome/installer/setup/setup_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // This file declares util functions for setup project.
 
 #include "chrome/installer/setup/setup_util.h"
 
 #include <windows.h>
 #include <stddef.h>
 
 #include <algorithm>
 #include <iterator>
+#include <limits>
+#include <memory>
 #include <set>
 #include <string>
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/cpu.h"
 #include "base/files/file_enumerator.h"
 #include "base/files/file_path.h"
 #include "base/files/file_util.h"
 #include "base/logging.h"
 #include "base/macros.h"
 #include "base/metrics/histogram.h"
 #include "base/numerics/safe_conversions.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/time/time.h"
 #include "base/version.h"
 #include "base/win/registry.h"
 #include "base/win/windows_version.h"
+#include "chrome/install_static/install_details.h"

[grt (UTC plus 2), 2016/12/13 13:21:52]

remove this for now

[pastarmovj, 2016/12/16 12:44:16]

Done.

 #include "chrome/installer/setup/installer_state.h"
 #include "chrome/installer/setup/setup_constants.h"
 #include "chrome/installer/setup/user_hive_visitor.h"
 #include "chrome/installer/util/app_registration_data.h"
 #include "chrome/installer/util/google_update_constants.h"
+#include "chrome/installer/util/install_util.h"
 #include "chrome/installer/util/installation_state.h"
 #include "chrome/installer/util/master_preferences.h"
 #include "chrome/installer/util/master_preferences_constants.h"
 #include "chrome/installer/util/util_constants.h"
 #include "courgette/courgette.h"
 #include "courgette/third_party/bsdiff/bsdiff.h"
 
 namespace installer {
 
 namespace {
 
+// Event log provider registry location and value names.

[grt (UTC plus 2), 2016/12/13 13:21:52]

nit: value names are not defined here

[pastarmovj, 2016/12/16 12:44:16]

Done.

+// TODO(http://crbug.com/668397): Make this string depend on the branding then

[grt (UTC plus 2), 2016/12/13 13:21:52]

remove this TODO?

[pastarmovj, 2016/12/16 12:44:16]

Done.

+// as well.
+constexpr wchar_t kEventLogProvidersRegPath[] =
+    L"SYSTEM\\CurrentControlSet\\Services\\EventLog\\Application\\";
+
 // Returns true if product |type| cam be meaningfully installed without the
 // --multi-install flag.
 bool SupportsSingleInstall(BrowserDistribution::Type type) {
   return (type == BrowserDistribution::CHROME_BROWSER ||
           type == BrowserDistribution::CHROME_FRAME);
 }
 
 // Returns true if the "lastrun" value in |root|\|key_path| (a path to Chrome's
 // ClientState key for a user) indicates that Chrome has been used within the
 // last 28 days.
@@ skipping 593 matching lines @@
       UNPACK_STATUS_COUNT, UNPACK_STATUS_COUNT + 1,
       base::HistogramBase::kUmaTargetedHistogramFlag)
       ->Add(unpack_status);
 
   base::SparseHistogram::FactoryGet(
       std::string(kUnPackNTSTATUSMetricsName) + "_" + consumer_name,
       base::HistogramBase::kUmaTargetedHistogramFlag)
       ->Add(status);
 }
 
+void RegisterEventLogProvider(const base::FilePath& install_directory,
+                              const base::Version& version) {
+  base::string16 reg_path(kEventLogProvidersRegPath);
+  reg_path.append(install_static::InstallDetails::Get().install_full_name());

[grt (UTC plus 2), 2016/12/13 13:21:52]

this is ultimately the right thing, but it won't work until
https://codereview.chromium.org/2459583002/ lands. for now, we'll need to hack
something with a TODO. how about:

  // TODO(grt): use install_static::InstallDetails::Get().install_full_name()
when
  // InstallDetails is initialized in the installer.
  base::string16 reg_path(kEventLogProvidersRegPath);
#if defined(GOOGLE_CHROME_BUILD)
  reg_path += "Chrome";
  if (InstallUtil::IsChromeSxSProcess())
    reg_path += " SxS";
#else
  reg_path += "Chromium";
#endif

[pastarmovj, 2016/12/16 12:44:16]

Done.

+  VLOG(1) << "Registering Chrome's event log provider at "
+          << reg_path;
+
+  std::unique_ptr<WorkItemList> work_item_list(WorkItem::CreateWorkItemList());
+  work_item_list->set_log_message("Register event log provider");
+
+  work_item_list->AddCreateRegKeyWorkItem(
+      HKEY_LOCAL_MACHINE, reg_path, WorkItem::kWow64Default);
+  // Speicifes the number of event categories defined in the dll.
+  work_item_list->AddSetRegValueWorkItem(
+      HKEY_LOCAL_MACHINE, reg_path, WorkItem::kWow64Default, L"CategoryCount",
+      static_cast<DWORD>(1), true);
+  // Specifies the event type emitted by this event source.
+  work_item_list->AddSetRegValueWorkItem(
+      HKEY_LOCAL_MACHINE, reg_path, WorkItem::kWow64Default, L"TypesSupported",
+      static_cast<DWORD>(EVENTLOG_ERROR_TYPE | EVENTLOG_INFORMATION_TYPE |
+                         EVENTLOG_WARNING_TYPE),
+      true);
+
+  const base::FilePath provider(
+      install_directory.AppendASCII(version.GetString())
+          .Append(FILE_PATH_LITERAL("eventlog_provider.dll")));
+
+  static constexpr const wchar_t* kFileKeys[] = {
+      L"CategoryMessageFile", L"EventMessageFile", L"ParameterMessageFile",
+  };
+  for (const wchar_t* file_key : kFileKeys) {
+    work_item_list->AddSetRegValueWorkItem(
+        HKEY_LOCAL_MACHINE, reg_path, WorkItem::kWow64Default, file_key,
+        provider.value(), true);
+  }
+
+  // if the operation fails we log the error but still continue because none of
+  // these are critical for the proper operation of the browser.
+  if (!work_item_list->Do())
+    work_item_list->Rollback();
+}
+
+void DeRegisterEventLogProvider() {
+  base::string16 reg_path(kEventLogProvidersRegPath);
+  reg_path.append(install_static::InstallDetails::Get().install_full_name());

[grt (UTC plus 2), 2016/12/13 13:21:52]

same as above. maybe put the ugly logic in a helper function in the unnamed
namespace (AppendInstallFullName?)

[pastarmovj, 2016/12/16 12:44:16]

Done.

+
+  // TODO(http://crbug.com/668120): If the Event Viewer is open the provider dll
+  // will fail to get deleted. This doesn't fail the uninstallation altogether
+  // but leaves files behind.
+  InstallUtil::DeleteRegistryKey(HKEY_LOCAL_MACHINE, reg_path,
+                                 WorkItem::kWow64Default);
+}
+
 ScopedTokenPrivilege::ScopedTokenPrivilege(const wchar_t* privilege_name)
     : is_enabled_(false) {
   HANDLE temp_handle;
   if (!::OpenProcessToken(::GetCurrentProcess(),
                           TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY,
                           &temp_handle)) {
     return;
   }
   token_.Set(temp_handle);
 
@@ skipping 22 matching lines @@
 }
 
 ScopedTokenPrivilege::~ScopedTokenPrivilege() {
   if (is_enabled_ && previous_privileges_.PrivilegeCount != 0) {
     ::AdjustTokenPrivileges(token_.Get(), FALSE, &previous_privileges_,
                             sizeof(TOKEN_PRIVILEGES), NULL, NULL);
   }
 }
 
 }  // namespace installer