Mojo EDK: Add safe process connection API

content/public/common/child_process_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_CHILD_PROCESS_HOST_H_
 #define CONTENT_PUBLIC_COMMON_CHILD_PROCESS_HOST_H_
 
 #include <stdint.h>
 
 #include "base/files/scoped_file.h"
 #include "build/build_config.h"
 #include "content/common/content_export.h"
 #include "ipc/ipc_channel_proxy.h"
+#include "mojo/edk/embedder/pending_process_connection.h"
 
 namespace base {
 class FilePath;
 }
 
 namespace IPC {
 class MessageFilter;
 }
 
 namespace service_manager {
@@ skipping 54 matching lines @@
 
   // Send the shutdown message to the child process.
   // Does not check with the delegate's CanShutdown.
   virtual void ForceShutdown() = 0;
 
   // Creates the IPC channel on top of Mojo. Returns the Mojo channel token if
   // succeeded, or an empty string on failure.
   //
   // DEPRECATED: Don't use this. Instead implement GetRemoteInterfaces() in the
   // delegate and use the CreateChannelMojo() version below.
-  virtual std::string CreateChannelMojo(const std::string& child_token) = 0;
+  virtual std::string CreateChannelMojo(
+      mojo::edk::PendingProcessConnection* connection) = 0;
 
   // Creates the IPC channel over a Mojo message pipe. The pipe connection is
   // brokered through the Service Manager like any other service connection.
   virtual void CreateChannelMojo() = 0;
 
   // Returns true iff the IPC channel is currently being opened;
   virtual bool IsChannelOpening() = 0;
 
   // Adds an IPC message filter.  A reference will be kept to the filter.
   virtual void AddFilter(IPC::MessageFilter* filter) = 0;
 
   // Returns the service_manager::InterfaceProvider the process host can use to
   // bind
   // interfaces exposed to it from the child.
   virtual service_manager::InterfaceProvider* GetRemoteInterfaces() = 0;
 };
 
 };  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_CHILD_PROCESS_HOST_H_