Chrome Frame: Add explicit object security attributes to the Chrome Frame ver...

chrome_frame/module_utils.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_FRAME_MODULE_UTILS_H_
 #define CHROME_FRAME_MODULE_UTILS_H_
 
 #include <ObjBase.h>
 #include <windows.h>
 
 #include "base/basictypes.h"
 #include "base/scoped_ptr.h"
 #include "base/shared_memory.h"
 #include "base/singleton.h"
 
 // Forward
+namespace ATL {
+class CSecurityAttributes;
+}
 class Version;
 
 // A singleton class that provides a facility to register the version of the
 // current module as the only version that should be loaded system-wide. If
 // this module is not the first instance loaded in the system, then the version
 // that loaded first will be delegated to. This makes a few assumptions:
 //  1) That different versions of the module this code is in reside in
 //     neighbouring versioned directories, e.g.
 //       C:\foo\bar\1.2.3.4\my_module.dll
 //       C:\foo\bar\1.2.3.5\my_module.dll
@@ skipping 33 matching lines @@
   // Returns the version of the current module or NULL if none can be found.
   // The caller must free the Version.
   virtual Version* GetCurrentModuleVersion();
 
   // Attempt to load the specified version dll. Finds it by walking up one
   // directory from our current module's location, then appending the newly
   // found version number. The Version class in base will have ensured that we
   // actually have a valid version and not e.g. ..\..\..\..\MyEvilFolder\.
   virtual HMODULE LoadVersionedModule(Version* version);
 
+  // Builds the necessary SECURITY_ATTRIBUTES to allow low integrity access
+  // to an object. Returns true on success, false otherwise.
+  virtual bool BuildSecurityAttributesForLock(
+      ATL::CSecurityAttributes* sec_attr);
+
+  // Attempts to change the permissions on the given file mapping to read only.
+  // Returns true on success, false otherwise.
+  virtual bool SetFileMappingToReadOnly(base::SharedMemoryHandle mapping);
+
   // Shared memory segment that contains the version beacon.
   scoped_ptr<base::SharedMemory> shared_memory_;
 
   // The current version of the DLL to be loaded.
   scoped_ptr<Version> dll_version_;
 
   // The handle to the first version of this module that was loaded. This
   // may refer to the current module, or another version of the same module
   // that we go and load.
   HMODULE first_module_handle_;
 
   // Used for tests to override the name of the shared memory segment.
   std::string shared_memory_name_;
 
   friend class ModuleUtilsTest;
 
   DISALLOW_COPY_AND_ASSIGN(DllRedirector);
 };
 
 #endif  // CHROME_FRAME_MODULE_UTILS_H_