[webnfc] Restrict NFC message size to 32KB

third_party/WebKit/Source/modules/nfc/NFC.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/nfc/NFC.h"
 
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/V8ArrayBuffer.h"
 #include "bindings/core/v8/V8StringResource.h"
 #include "core/dom/DOMArrayBuffer.h"
@@ skipping 408 matching lines @@
   KURL originURL(ParsedURLString, origin);
 
   if (!message->url.isEmpty() && originURL.canSetPathname()) {
     originURL.setPath(message->url);
   }
 
   message->url = originURL;
   return originURL.isValid();
 }
 
-}  // anonymous namespace
+size_t getNFCMessageSize(

[kenneth.r.christiansen, 2016/11/22 13:11:23]

measure instead of get?

+    const device::nfc::mojom::blink::NFCMessagePtr& message) {
+  size_t messageSize = message->url.charactersSizeInBytes();
+  for (size_t i = 0; i < message->data.size(); ++i) {
+    messageSize += message->data[i]->media_type.charactersSizeInBytes();
+    messageSize += message->data[i]->data.size();
+  }
+  return messageSize;
+}
+
+}  // namespace
 
 NFC::NFC(LocalFrame* frame)
     : PageVisibilityObserver(frame->page()),
       ContextLifecycleObserver(frame->document()),
       m_client(this) {
   ThreadState::current()->registerPreFinalizer(this);
   frame->interfaceProvider()->getInterface(mojo::GetProxy(&m_nfc));
   m_nfc.set_connection_error_handler(convertToBaseCallback(
       WTF::bind(&NFC::OnConnectionError, wrapWeakPersistent(this))));
   m_nfc->SetClient(m_client.CreateInterfacePtrAndBind());
@@ skipping 41 matching lines @@
   if (!message)
     return ScriptPromise::rejectWithDOMException(
         scriptState, DOMException::create(SyntaxError));
 
   if (!setURL(
           scriptState->getExecutionContext()->getSecurityOrigin()->toString(),
           message))
     return ScriptPromise::rejectWithDOMException(
         scriptState, DOMException::create(SyntaxError));
 
+  if (getNFCMessageSize(message) >
+      device::nfc::mojom::blink::NFCMessage::kMaxSize) {
+    return ScriptPromise::rejectWithDOMException(
+        scriptState, DOMException::create(NotSupportedError));
+  }
+
   ScriptPromiseResolver* resolver = ScriptPromiseResolver::create(scriptState);
   m_requests.add(resolver);
   auto callback = convertToBaseCallback(WTF::bind(&NFC::OnRequestCompleted,
                                                   wrapPersistent(this),
                                                   wrapPersistent(resolver)));
   m_nfc->Push(std::move(message),
               device::nfc::mojom::blink::NFCPushOptions::From(options),
               callback);
 
   return resolver->promise();
@@ skipping 87 matching lines @@
   // TODO(shalamov): Not implemented.
 }
 
 DEFINE_TRACE(NFC) {
   PageVisibilityObserver::trace(visitor);
   ContextLifecycleObserver::trace(visitor);
   visitor->trace(m_requests);
 }
 
 }  // namespace blink