| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/safe_browsing/environment_data_collection_win.h" | 5 #include "chrome/browser/safe_browsing/environment_data_collection_win.h" |
| 6 | 6 |
| 7 #include <windows.h> | |
| 8 #include <set> | |
| 9 | |
| 10 #include "base/strings/string16.h" | |
| 11 #include "base/strings/string_util.h" | |
| 12 #include "base/strings/utf_string_conversions.h" | |
| 13 #include "chrome/browser/install_verification/win/module_info.h" | |
| 14 #include "chrome/browser/install_verification/win/module_verification_common.h" | |
| 15 #include "chrome/browser/net/service_providers_win.h" | |
| 16 #include "chrome/browser/safe_browsing/path_sanitizer.h" | |
| 17 #include "chrome/common/safe_browsing/csd.pb.h" | 7 #include "chrome/common/safe_browsing/csd.pb.h" |
| 18 | 8 |
| 19 namespace safe_browsing { | 9 namespace safe_browsing { |
| 20 | 10 |
| 21 namespace { | |
| 22 | |
| 23 // Helper function for expanding all environment variables in |path|. | |
| 24 base::string16 ExpandEnvironmentVariables(const base::string16& path) { | |
| 25 static const DWORD kMaxBuffer = 32 * 1024; // Max according to MSDN. | |
| 26 base::string16 path_expanded; | |
| 27 DWORD path_len = MAX_PATH; | |
| 28 do { | |
| 29 DWORD result = ExpandEnvironmentStrings( | |
| 30 path.c_str(), WriteInto(&path_expanded, path_len), path_len); | |
| 31 if (!result) { | |
| 32 // Failed to expand variables. Return the original string. | |
| 33 DPLOG(ERROR) << path; | |
| 34 break; | |
| 35 } | |
| 36 if (result <= path_len) | |
| 37 return path_expanded.substr(0, result - 1); | |
| 38 path_len = result; | |
| 39 } while (path_len < kMaxBuffer); | |
| 40 | |
| 41 return path; | |
| 42 } | |
| 43 | |
| 44 } // namespace | |
| 45 | |
| 46 bool CollectDlls(ClientIncidentReport_EnvironmentData_Process* process) { | |
| 47 // Retrieve the module list. | |
| 48 std::set<ModuleInfo> loaded_modules; | |
| 49 if (!GetLoadedModules(&loaded_modules)) | |
| 50 return false; | |
| 51 | |
| 52 // Sanitize path of each module and add it to the incident report. | |
| 53 PathSanitizer path_sanitizer; | |
| 54 for (std::set<ModuleInfo>::const_iterator it = loaded_modules.begin(); | |
| 55 it != loaded_modules.end(); | |
| 56 ++it) { | |
| 57 base::FilePath dll_path(it->name); | |
| 58 path_sanitizer.StripHomeDirectory(&dll_path); | |
| 59 | |
| 60 ClientIncidentReport_EnvironmentData_Process_Dll* dll = process->add_dll(); | |
| 61 dll->set_path(base::WideToUTF8(dll_path.value())); | |
| 62 dll->set_base_address(it->base_address); | |
| 63 dll->set_length(it->size); | |
| 64 } | |
| 65 | |
| 66 return true; | |
| 67 } | |
| 68 | |
| 69 void RecordLspFeature(ClientIncidentReport_EnvironmentData_Process* process) { | |
| 70 WinsockLayeredServiceProviderList lsp_list; | |
| 71 GetWinsockLayeredServiceProviders(&lsp_list); | |
| 72 | |
| 73 // For each LSP, we extract and sanitize the path. | |
| 74 PathSanitizer path_sanitizer; | |
| 75 std::set<base::string16> lsp_paths; | |
| 76 for (size_t i = 0; i < lsp_list.size(); ++i) { | |
| 77 base::FilePath lsp_path(ExpandEnvironmentVariables(lsp_list[i].path)); | |
| 78 path_sanitizer.StripHomeDirectory(&lsp_path); | |
| 79 lsp_paths.insert(lsp_path.value()); | |
| 80 } | |
| 81 | |
| 82 // Look for a match between LSPs and loaded dlls. | |
| 83 for (int i = 0; i < process->dll_size(); ++i) { | |
| 84 if (lsp_paths.count(base::UTF8ToWide(process->dll(i).path()))) { | |
| 85 process->mutable_dll(i) | |
| 86 ->add_feature(ClientIncidentReport_EnvironmentData_Process_Dll::LSP); | |
| 87 } | |
| 88 } | |
| 89 } | |
| 90 | |
| 91 void CollectPlatformProcessData( | 11 void CollectPlatformProcessData( |
| 92 ClientIncidentReport_EnvironmentData_Process* process) { | 12 ClientIncidentReport_EnvironmentData_Process* process) { |
| 93 CollectDlls(process); | 13 // TODO(pmonette): collect dlls and lsps. |
| 94 RecordLspFeature(process); | |
| 95 } | 14 } |
| 96 | 15 |
| 97 } // namespace safe_browsing | 16 } // namespace safe_browsing |
| OLD | NEW |