| Index: chrome/browser/safe_browsing/verifier.cc
|
| diff --git a/chrome/browser/safe_browsing/verifier.cc b/chrome/browser/safe_browsing/verifier.cc
|
| deleted file mode 100644
|
| index b3416756632344b0b8bd18931750163532b9d75b..0000000000000000000000000000000000000000
|
| --- a/chrome/browser/safe_browsing/verifier.cc
|
| +++ /dev/null
|
| @@ -1,168 +0,0 @@
|
| -// Copyright 2014 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include "chrome/browser/safe_browsing/verifier.h"
|
| -
|
| -#include <windows.h>
|
| -#include <psapi.h>
|
| -
|
| -#include "base/files/file_path.h"
|
| -#include "base/files/memory_mapped_file.h"
|
| -#include "base/win/pe_image.h"
|
| -
|
| -namespace safe_browsing {
|
| -
|
| -namespace {
|
| -
|
| -// The number of bytes made to agree (between memory and disk) when the
|
| -// relocations are accounted for.
|
| -int bytes_corrected_by_reloc = 0;
|
| -
|
| -// This is true if the relocation table contains a reloc of type we don't
|
| -// currently handle.
|
| -bool unknown_reloc_type = false;
|
| -
|
| -bool AddrIsInCodeSection(void* address, BYTE* code_addr, SIZE_T code_size) {
|
| - return (code_addr <= address && address <= code_addr + code_size);
|
| -}
|
| -
|
| -bool GetCodeAddrsAndSize(const base::win::PEImage mem_peimage,
|
| - base::win::PEImageAsData disk_peimage,
|
| - BYTE*& mem_code_addr,
|
| - BYTE*& disk_code_addr,
|
| - SIZE_T& code_size) {
|
| - DWORD base_of_code = mem_peimage.GetNTHeaders()->OptionalHeader.BaseOfCode;
|
| -
|
| - // Get the address and size of the code section in the loaded module image.
|
| - PIMAGE_SECTION_HEADER mem_code_header =
|
| - mem_peimage.GetImageSectionFromAddr(mem_peimage.RVAToAddr(base_of_code));
|
| - if (mem_code_header == NULL)
|
| - return false;
|
| - mem_code_addr = reinterpret_cast<BYTE*>(
|
| - mem_peimage.RVAToAddr(mem_code_header->VirtualAddress));
|
| - code_size = mem_code_header->Misc.VirtualSize;
|
| -
|
| - // Get the address of the code section in the module mapped as data from disk.
|
| - // Section size will be the same as in the loaded module.
|
| - DWORD disk_code_offset = 0;
|
| - if (!mem_peimage.ImageAddrToOnDiskOffset(
|
| - reinterpret_cast<void*>(mem_code_addr), &disk_code_offset))
|
| - return false;
|
| - disk_code_addr =
|
| - reinterpret_cast<BYTE*>(disk_peimage.module()) + disk_code_offset;
|
| - return true;
|
| -}
|
| -
|
| -int CountBytesDiffInPtr(intptr_t num_a, intptr_t num_b) {
|
| - int num_bytes = 0;
|
| - for (int i = 0; i < sizeof(num_a); ++i) {
|
| - if ((num_a & 0xFF) != (num_b & 0xFF))
|
| - ++num_bytes;
|
| - num_a >>= 8;
|
| - num_b >>= 8;
|
| - }
|
| - return num_bytes;
|
| -}
|
| -
|
| -bool EnumRelocsCallback(const base::win::PEImage& mem_peimage,
|
| - WORD type,
|
| - void* address,
|
| - void* cookie) {
|
| - base::win::PEImageAsData disk_peimage =
|
| - *reinterpret_cast<base::win::PEImageAsData*>(cookie);
|
| - BYTE* mem_code_addr = NULL;
|
| - BYTE* disk_code_addr = NULL;
|
| - SIZE_T code_size = 0;
|
| - if (!GetCodeAddrsAndSize(
|
| - mem_peimage, disk_peimage, mem_code_addr, disk_code_addr, code_size))
|
| - return false;
|
| -
|
| - switch (type) {
|
| - case IMAGE_REL_BASED_HIGHLOW: {
|
| - // If not in the code section return true to continue to the next reloc.
|
| - if (!AddrIsInCodeSection(address, mem_code_addr, code_size))
|
| - return true;
|
| -
|
| - BYTE* preferred_image_base = reinterpret_cast<BYTE*>(
|
| - disk_peimage.GetNTHeaders()->OptionalHeader.ImageBase);
|
| - intptr_t delta =
|
| - preferred_image_base - reinterpret_cast<BYTE*>(mem_peimage.module());
|
| - BYTE* new_value = (*reinterpret_cast<BYTE**>(address)) + delta;
|
| - int bytes_corrected =
|
| - CountBytesDiffInPtr(reinterpret_cast<intptr_t>(new_value),
|
| - *reinterpret_cast<intptr_t*>(address));
|
| -
|
| - // Check that the adding delta did correct the value to agree with disk.
|
| - BYTE** disk_address = reinterpret_cast<BYTE**>(
|
| - reinterpret_cast<BYTE*>(address) - mem_code_addr + disk_code_addr);
|
| - if (new_value == *disk_address) {
|
| - bytes_corrected_by_reloc += bytes_corrected;
|
| - }
|
| - break;
|
| - }
|
| - case IMAGE_REL_BASED_ABSOLUTE:
|
| - break;
|
| - default: {
|
| - // TODO(krstnmnlsn): Find a reliable description of the behaviour of the
|
| - // remaining types of relocation and handle them.
|
| - unknown_reloc_type = true;
|
| - break;
|
| - }
|
| - }
|
| - return true;
|
| -}
|
| -
|
| -int CountBytesDiffInMemory(BYTE* disk_code_start,
|
| - BYTE* memory_code_start,
|
| - SIZE_T code_size) {
|
| - int counter = 0;
|
| - for (int i = 0; i < static_cast<int>(code_size); ++i) {
|
| - if (*(disk_code_start + i) != *(memory_code_start + i))
|
| - ++counter;
|
| - }
|
| - return counter;
|
| -}
|
| -
|
| -} // namespace
|
| -
|
| -ModuleState VerifyModule(wchar_t* module_name) {
|
| - HMODULE module_handle = GetModuleHandle(module_name);
|
| - if (module_handle == NULL)
|
| - return MODULE_STATE_UNKNOWN;
|
| -
|
| - WCHAR module_path[MAX_PATH] = {0};
|
| - if (GetModuleFileNameEx(
|
| - GetCurrentProcess(), module_handle, module_path, MAX_PATH) == 0)
|
| - return MODULE_STATE_UNKNOWN;
|
| -
|
| - base::MemoryMappedFile mapped_module;
|
| - mapped_module.Initialize(base::FilePath(module_path));
|
| - base::win::PEImageAsData disk_peimage(
|
| - reinterpret_cast<HMODULE>(const_cast<uint8*>(mapped_module.data())));
|
| -
|
| - base::win::PEImage mem_peimage(module_handle);
|
| - if (!mem_peimage.VerifyMagic() || !disk_peimage.VerifyMagic())
|
| - return MODULE_STATE_UNKNOWN;
|
| -
|
| - BYTE* mem_code_addr = NULL;
|
| - BYTE* disk_code_addr = NULL;
|
| - SIZE_T code_size = 0;
|
| - if (!GetCodeAddrsAndSize(
|
| - mem_peimage, disk_peimage, mem_code_addr, disk_code_addr, code_size))
|
| - return MODULE_STATE_UNKNOWN;
|
| -
|
| - int num_bytes_different =
|
| - CountBytesDiffInMemory(disk_code_addr, mem_code_addr, code_size);
|
| - mem_peimage.EnumRelocs(
|
| - (base::win::PEImage::EnumRelocsFunction) & EnumRelocsCallback,
|
| - &disk_peimage);
|
| - if (unknown_reloc_type)
|
| - return MODULE_STATE_UNKNOWN;
|
| -
|
| - if (num_bytes_different - bytes_corrected_by_reloc == 0)
|
| - return MODULE_STATE_UNMODIFIED;
|
| - return MODULE_STATE_MODIFIED;
|
| -}
|
| -
|
| -} // namespace safe_browsing
|
|
|