Move securityCheck out of V8WrapperInstantiationScope

third_party/WebKit/Source/bindings/core/v8/V8DOMWrapper.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 13 matching lines @@
  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef V8DOMWrapper_h
 #define V8DOMWrapper_h
 
-#include "bindings/core/v8/BindingSecurity.h"
 #include "bindings/core/v8/DOMDataStore.h"
 #include "bindings/core/v8/ScriptWrappable.h"
 #include "bindings/core/v8/V8Binding.h"
+#include "bindings/core/v8/WrapperCreationSecurityCheck.h"
 #include "core/CoreExport.h"
 #include "v8/include/v8.h"
 #include "wtf/Compiler.h"
 #include "wtf/text/AtomicString.h"
 
 namespace blink {
 
 struct WrapperTypeInfo;
 
 class V8DOMWrapper {
@@ skipping 70 matching lines @@
   SECURITY_CHECK(toScriptWrappable(wrapper) == impl);
   return wrapper;
 }
 
 class V8WrapperInstantiationScope {
   STACK_ALLOCATED();
 
  public:
   V8WrapperInstantiationScope(v8::Local<v8::Object> creationContext,
                               v8::Isolate* isolate,
-                              bool withSecurityCheck)
+                              const WrapperTypeInfo* type)
       : m_didEnterContext(false),
         m_context(isolate->GetCurrentContext()),
         m_tryCatch(isolate),
-        m_convertExceptions(false) {
+        m_type(type),
+        m_accessCheckFailed(false) {
     // creationContext should not be empty. Because if we have an
     // empty creationContext, we will end up creating
     // a new object in the context currently entered. This is wrong.
     RELEASE_ASSERT(!creationContext.IsEmpty());
     v8::Local<v8::Context> contextForWrapper =
         creationContext->CreationContext();
 
     // For performance, we enter the context only if the currently running
     // context is different from the context that we are about to enter.
     if (contextForWrapper == m_context)
       return;
-    if (withSecurityCheck) {
-      securityCheck(isolate, contextForWrapper);
-    } else {
-      m_convertExceptions = true;
+    m_context = contextForWrapper;
+
+    if (!WrapperCreationSecurityCheck::verifyContextAccess(isolate, m_context,
+                                                           m_type)) {
+      DCHECK(m_tryCatch.HasCaught());
+      m_tryCatch.ReThrow();
+      m_accessCheckFailed = true;
+      return;
     }
-    m_context = v8::Local<v8::Context>::New(isolate, contextForWrapper);
+
     m_didEnterContext = true;
     m_context->Enter();
   }
 
   ~V8WrapperInstantiationScope() {
     if (!m_didEnterContext) {
       m_tryCatch.ReThrow();
       return;
     }
     m_context->Exit();
-    // Rethrow any cross-context exceptions as security error.
-    if (m_tryCatch.HasCaught()) {
-      if (m_convertExceptions) {
-        m_tryCatch.Reset();
-        convertException();
-      }
-      m_tryCatch.ReThrow();
-    }
+
+    if (!m_tryCatch.HasCaught())
+      return;
+
+    v8::Isolate* isolate = m_context->GetIsolate();

[haraken, 2017/04/07 04:23:36]

Would you add a comment on why we need this complex conversion logic?

[adithyas, 2017/04/07 18:42:53]

Ok done.

+    v8::Local<v8::Value> caughtException = m_tryCatch.Exception();
+    m_tryCatch.Reset();
+    WrapperCreationSecurityCheck::rethrowCrossContextException(
+        isolate, m_context, m_type, caughtException);
+    m_tryCatch.ReThrow();
   }
 
   v8::Local<v8::Context> context() const { return m_context; }
+  bool accessCheckFailed() const { return m_accessCheckFailed; }
 
  private:
-  void securityCheck(v8::Isolate*, v8::Local<v8::Context> contextForWrapper);
-  void convertException();
-
   bool m_didEnterContext;
   v8::Local<v8::Context> m_context;
   v8::TryCatch m_tryCatch;
-  bool m_convertExceptions;
+  const WrapperTypeInfo* m_type;
+  bool m_accessCheckFailed;
 };
 
 }  // namespace blink
 
 #endif  // V8DOMWrapper_h