Check for RPCS printers and return error if Win8+

printing/backend/win_helper.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "printing/backend/win_helper.h"
 
 #include <stddef.h>
 
 #include <algorithm>
 #include <memory>
 
 #include "base/file_version_info.h"
 #include "base/files/file_path.h"
 #include "base/logging.h"
 #include "base/macros.h"
 #include "base/memory/free_deleter.h"
 #include "base/numerics/safe_conversions.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/win/scoped_comptr.h"
+#include "base/win/windows_version.h"
 #include "printing/backend/print_backend.h"
 #include "printing/backend/print_backend_consts.h"
 #include "printing/backend/printing_info_win.h"
 
 namespace {
 
 typedef HRESULT (WINAPI* PTOpenProviderProc)(PCWSTR printer_name,
                                              DWORD version,
                                              HPTPROVIDER* provider);
 
@@ skipping 431 matching lines @@
   const char* xps_color = color ? kXpsTicketColor : kXpsTicketMonochrome;
   std::string xps_ticket = base::StringPrintf(kXpsTicketTemplate, xps_color);
   std::unique_ptr<DEVMODE, base::FreeDeleter> ticket =
       printing::XpsTicketToDevMode(printer_name, xps_ticket);
   if (!ticket)
     return default_ticket;
 
   return ticket;
 }
 
+bool IsPrinterRPCSOnly(HANDLE printer) {
+  PrinterInfo5 info_5;
+  if (!info_5.Init(printer))
+    return false;
+  const wchar_t* name = info_5.get()->pPrinterName;
+  const wchar_t* port = info_5.get()->pPortName;
+  int num_languages =
+      DeviceCapabilities(name, port, DC_PERSONALITY, NULL, NULL);
+  if (num_languages != 1)
+    return false;
+  std::vector<wchar_t> buf(33, 0);
+  DeviceCapabilities(name, port, DC_PERSONALITY, buf.data(), NULL);
+  static constexpr wchar_t kRPCSLanguage[] = L"RPCS";
+  return wcscmp(buf.data(), kRPCSLanguage) == 0;
+}
+
 std::unique_ptr<DEVMODE, base::FreeDeleter> CreateDevMode(HANDLE printer,
                                                           DEVMODE* in) {
   LONG buffer_size = DocumentProperties(
       NULL, printer, const_cast<wchar_t*>(L""), NULL, NULL, 0);
   if (buffer_size < static_cast<int>(sizeof(DEVMODE)))
     return std::unique_ptr<DEVMODE, base::FreeDeleter>();
 
   // Some drivers request buffers with size smaller than dmSize + dmDriverExtra.
   // crbug.com/421402
   buffer_size *= 2;
 
   std::unique_ptr<DEVMODE, base::FreeDeleter> out(
       reinterpret_cast<DEVMODE*>(calloc(buffer_size, 1)));
   DWORD flags = (in ? (DM_IN_BUFFER) : 0) | DM_OUT_BUFFER;
+
+  // Check for RPCS drivers on Windows 8+ as DocumentProperties will crash if
+  // called on one of these printers. See crbug.com/679160
+  if (base::win::GetVersion() >= base::win::VERSION_WIN8 &&
+      IsPrinterRPCSOnly(printer)) {
+    return std::unique_ptr<DEVMODE, base::FreeDeleter>();
+  }
+
   if (DocumentProperties(
           NULL, printer, const_cast<wchar_t*>(L""), out.get(), in, flags) !=
       IDOK) {
     return std::unique_ptr<DEVMODE, base::FreeDeleter>();
   }
   int size = out->dmSize;
   int extra_size = out->dmDriverExtra;
   CHECK_GE(buffer_size, size + extra_size);
   return out;
 }
@@ skipping 31 matching lines @@
     *canceled = (result == IDCANCEL);
   if (result != IDOK)
     return std::unique_ptr<DEVMODE, base::FreeDeleter>();
   int size = out->dmSize;
   int extra_size = out->dmDriverExtra;
   CHECK_GE(buffer_size, size + extra_size);
   return out;
 }
 
 }  // namespace printing