Mojo EDK: Add safe process connection API

content/common/child_process_host_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/child_process_host_impl.h"
 
 #include <limits>
 
 #include "base/atomic_sequence_num.h"
 #include "base/command_line.h"
@@ skipping 103 matching lines @@
 service_manager::InterfaceProvider*
 ChildProcessHostImpl::GetRemoteInterfaces() {
   return delegate_->GetRemoteInterfaces();
 }
 
 void ChildProcessHostImpl::ForceShutdown() {
   Send(new ChildProcessMsg_Shutdown());
 }
 
 std::string ChildProcessHostImpl::CreateChannelMojo(
-    const std::string& child_token) {
+    const mojo::edk::PendingProcessConnection& connection) {
   DCHECK(channel_id_.empty());
-  channel_id_ = mojo::edk::GenerateRandomToken();
-  mojo::ScopedMessagePipeHandle host_handle =
-      mojo::edk::CreateParentMessagePipe(channel_id_, child_token);
-  channel_ = IPC::ChannelMojo::Create(std::move(host_handle),
-                                      IPC::Channel::MODE_SERVER, this);
+  channel_ =
+      IPC::ChannelMojo::Create(connection.CreateMessagePipe(&channel_id_),
+                               IPC::Channel::MODE_SERVER, this);
   if (!channel_ || !InitChannel())
     return std::string();
-
   return channel_id_;
 }
 
 void ChildProcessHostImpl::CreateChannelMojo() {
   // TODO(rockot): Remove |channel_id_| once this is the only code path by which
   // the Channel is created. For now it serves to at least mutually exclude
   // different CreateChannel* calls.
   DCHECK(channel_id_.empty());
   channel_id_ = "ChannelMojo";
 
@@ skipping 140 matching lines @@
 void ChildProcessHostImpl::OnBadMessageReceived(const IPC::Message& message) {
   delegate_->OnBadMessageReceived(message);
 }
 
 void ChildProcessHostImpl::OnShutdownRequest() {
   if (delegate_->CanShutdown())
     Send(new ChildProcessMsg_Shutdown());
 }
 
 }  // namespace content