OLD | NEW |
---|---|
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/browser/renderer_host/clipboard_message_filter.h" | 5 #include "content/browser/renderer_host/clipboard_message_filter.h" |
6 | 6 |
7 #include "base/bind.h" | 7 #include "base/bind.h" |
8 #include "base/bind_helpers.h" | 8 #include "base/bind_helpers.h" |
9 #include "base/location.h" | 9 #include "base/location.h" |
10 #include "base/macros.h" | |
10 #include "base/memory/scoped_ptr.h" | 11 #include "base/memory/scoped_ptr.h" |
12 #include "base/pickle.h" | |
11 #include "base/stl_util.h" | 13 #include "base/stl_util.h" |
12 #include "base/strings/utf_string_conversions.h" | 14 #include "base/strings/utf_string_conversions.h" |
13 #include "content/common/clipboard_messages.h" | 15 #include "content/common/clipboard_messages.h" |
14 #include "content/public/browser/browser_context.h" | 16 #include "content/public/browser/browser_context.h" |
15 #include "ipc/ipc_message_macros.h" | 17 #include "ipc/ipc_message_macros.h" |
16 #include "third_party/skia/include/core/SkBitmap.h" | 18 #include "third_party/skia/include/core/SkBitmap.h" |
19 #include "ui/base/clipboard/custom_data_helper.h" | |
20 #include "ui/base/clipboard/scoped_clipboard_writer.h" | |
17 #include "ui/gfx/codec/png_codec.h" | 21 #include "ui/gfx/codec/png_codec.h" |
18 #include "ui/gfx/size.h" | 22 #include "ui/gfx/size.h" |
19 #include "url/gurl.h" | 23 #include "url/gurl.h" |
20 | 24 |
21 namespace content { | 25 namespace content { |
22 | 26 |
23 namespace { | 27 namespace { |
24 | 28 |
25 enum BitmapPolicy { | 29 void ReleaseSharedMemoryPixels(void* addr, void* context) { |
26 kFilterBitmap, | 30 delete reinterpret_cast<base::SharedMemory*>(context); |
27 kAllowBitmap, | |
28 }; | |
29 void SanitizeObjectMap(ui::Clipboard::ObjectMap* objects, | |
30 BitmapPolicy bitmap_policy) { | |
31 if (bitmap_policy != kAllowBitmap) | |
32 objects->erase(ui::Clipboard::CBF_SMBITMAP); | |
33 | |
34 ui::Clipboard::ObjectMap::iterator data_it = | |
35 objects->find(ui::Clipboard::CBF_DATA); | |
36 if (data_it != objects->end()) { | |
37 const ui::Clipboard::FormatType& web_custom_format = | |
38 ui::Clipboard::GetWebCustomDataFormatType(); | |
39 if (data_it->second.size() != 2 || | |
40 !web_custom_format.Equals( | |
41 ui::Clipboard::FormatType::Deserialize(std::string( | |
42 &data_it->second[0].front(), | |
43 data_it->second[0].size())))) { | |
44 // CBF_DATA should always have two parameters associated with it, and the | |
45 // associated FormatType should always be web custom data. If not, then | |
46 // data is malformed and we'll ignore it. | |
47 objects->erase(ui::Clipboard::CBF_DATA); | |
48 } | |
49 } | |
50 } | 31 } |
51 | 32 |
52 } // namespace | 33 } // namespace |
53 | 34 |
54 | |
55 ClipboardMessageFilter::ClipboardMessageFilter() | 35 ClipboardMessageFilter::ClipboardMessageFilter() |
56 : BrowserMessageFilter(ClipboardMsgStart) {} | 36 : BrowserMessageFilter(ClipboardMsgStart), |
37 clipboard_writer_( | |
38 new ui::ScopedClipboardWriter(ui::CLIPBOARD_TYPE_COPY_PASTE)) { | |
39 } | |
57 | 40 |
58 void ClipboardMessageFilter::OverrideThreadForMessage( | 41 void ClipboardMessageFilter::OverrideThreadForMessage( |
59 const IPC::Message& message, BrowserThread::ID* thread) { | 42 const IPC::Message& message, BrowserThread::ID* thread) { |
60 // Clipboard writes should always occur on the UI thread due the restrictions | 43 // Clipboard writes should always occur on the UI thread due the restrictions |
61 // of various platform APIs. In general, the clipboard is not thread-safe, so | 44 // of various platform APIs. In general, the clipboard is not thread-safe, so |
62 // all clipboard calls should be serviced from the UI thread. | 45 // all clipboard calls should be serviced from the UI thread. |
63 // | 46 // |
64 // Windows needs clipboard reads to be serviced from the IO thread because | 47 // Windows needs clipboard reads to be serviced from the IO thread because |
65 // these are sync IPCs which can result in deadlocks with NPAPI plugins if | 48 // these are sync IPCs which can result in deadlocks with NPAPI plugins if |
66 // serviced from the UI thread. Note that Windows clipboard calls ARE | 49 // serviced from the UI thread. Note that Windows clipboard calls ARE |
67 // thread-safe so it is ok for reads and writes to be serviced from different | 50 // thread-safe so it is ok for reads and writes to be serviced from different |
68 // threads. | 51 // threads. |
69 #if !defined(OS_WIN) | 52 #if !defined(OS_WIN) |
70 if (IPC_MESSAGE_CLASS(message) == ClipboardMsgStart) | 53 if (IPC_MESSAGE_CLASS(message) == ClipboardMsgStart) |
71 *thread = BrowserThread::UI; | 54 *thread = BrowserThread::UI; |
72 #endif | 55 #endif |
73 | 56 |
74 #if defined(OS_WIN) | 57 #if defined(OS_WIN) |
75 if (message.type() == ClipboardHostMsg_ReadImage::ID) | 58 if (message.type() == ClipboardHostMsg_ReadImage::ID) |
76 *thread = BrowserThread::FILE; | 59 *thread = BrowserThread::FILE; |
77 #endif | 60 #endif |
78 } | 61 } |
79 | 62 |
80 bool ClipboardMessageFilter::OnMessageReceived(const IPC::Message& message) { | 63 bool ClipboardMessageFilter::OnMessageReceived(const IPC::Message& message) { |
81 bool handled = true; | 64 bool handled = true; |
82 IPC_BEGIN_MESSAGE_MAP(ClipboardMessageFilter, message) | 65 IPC_BEGIN_MESSAGE_MAP(ClipboardMessageFilter, message) |
83 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteObjectsAsync, OnWriteObjectsAsync) | |
84 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteObjectsSync, OnWriteObjectsSync) | |
85 IPC_MESSAGE_HANDLER(ClipboardHostMsg_GetSequenceNumber, OnGetSequenceNumber) | 66 IPC_MESSAGE_HANDLER(ClipboardHostMsg_GetSequenceNumber, OnGetSequenceNumber) |
86 IPC_MESSAGE_HANDLER(ClipboardHostMsg_IsFormatAvailable, OnIsFormatAvailable) | 67 IPC_MESSAGE_HANDLER(ClipboardHostMsg_IsFormatAvailable, OnIsFormatAvailable) |
87 IPC_MESSAGE_HANDLER(ClipboardHostMsg_Clear, OnClear) | 68 IPC_MESSAGE_HANDLER(ClipboardHostMsg_Clear, OnClear) |
88 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadAvailableTypes, | 69 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadAvailableTypes, |
89 OnReadAvailableTypes) | 70 OnReadAvailableTypes) |
90 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadText, OnReadText) | 71 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadText, OnReadText) |
91 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadHTML, OnReadHTML) | 72 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadHTML, OnReadHTML) |
92 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadRTF, OnReadRTF) | 73 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadRTF, OnReadRTF) |
93 IPC_MESSAGE_HANDLER_DELAY_REPLY(ClipboardHostMsg_ReadImage, OnReadImage) | 74 IPC_MESSAGE_HANDLER_DELAY_REPLY(ClipboardHostMsg_ReadImage, OnReadImage) |
94 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadCustomData, OnReadCustomData) | 75 IPC_MESSAGE_HANDLER(ClipboardHostMsg_ReadCustomData, OnReadCustomData) |
76 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteText, OnWriteText) | |
77 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteHTML, OnWriteHTML) | |
78 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteSmartPasteMarker, | |
79 OnWriteSmartPasteMarker) | |
80 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteCustomData, OnWriteCustomData) | |
81 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteBookmark, OnWriteBookmark) | |
82 IPC_MESSAGE_HANDLER(ClipboardHostMsg_WriteImage, OnWriteImage) | |
83 IPC_MESSAGE_HANDLER(ClipboardHostMsg_CommitWrite, OnCommitWrite); | |
95 #if defined(OS_MACOSX) | 84 #if defined(OS_MACOSX) |
96 IPC_MESSAGE_HANDLER(ClipboardHostMsg_FindPboardWriteStringAsync, | 85 IPC_MESSAGE_HANDLER(ClipboardHostMsg_FindPboardWriteStringAsync, |
97 OnFindPboardWriteString) | 86 OnFindPboardWriteString) |
98 #endif | 87 #endif |
99 IPC_MESSAGE_UNHANDLED(handled = false) | 88 IPC_MESSAGE_UNHANDLED(handled = false) |
100 IPC_END_MESSAGE_MAP() | 89 IPC_END_MESSAGE_MAP() |
101 return handled; | 90 return handled; |
102 } | 91 } |
103 | 92 |
104 ClipboardMessageFilter::~ClipboardMessageFilter() { | 93 ClipboardMessageFilter::~ClipboardMessageFilter() { |
105 } | 94 } |
106 | 95 |
107 void ClipboardMessageFilter::OnWriteObjectsSync( | |
108 const ui::Clipboard::ObjectMap& objects, | |
109 base::SharedMemoryHandle bitmap_handle) { | |
110 DCHECK(base::SharedMemory::IsHandleValid(bitmap_handle)) | |
111 << "Bad bitmap handle"; | |
112 | |
113 // On Windows, we can't write directly from the IO thread, so we copy the data | |
114 // into a heap allocated map and post a task to the UI thread. On other | |
115 // platforms, to lower the amount of time the renderer has to wait for the | |
116 // sync IPC to complete, we also take a copy and post a task to flush the data | |
117 // to the clipboard later. | |
118 scoped_ptr<ui::Clipboard::ObjectMap> long_living_objects( | |
119 new ui::Clipboard::ObjectMap(objects)); | |
120 SanitizeObjectMap(long_living_objects.get(), kAllowBitmap); | |
121 // Splice the shared memory handle into the data. |long_living_objects| now | |
122 // contains a heap-allocated SharedMemory object that references | |
123 // |bitmap_handle|. This reference will keep the shared memory section alive | |
124 // when this IPC returns, and the SharedMemory object will eventually be | |
125 // freed by ui::Clipboard::WriteObjects(). | |
126 if (!ui::Clipboard::ReplaceSharedMemHandle( | |
127 long_living_objects.get(), bitmap_handle, PeerHandle())) | |
128 return; | |
129 | |
130 BrowserThread::PostTask( | |
131 BrowserThread::UI, | |
132 FROM_HERE, | |
133 base::Bind(&ClipboardMessageFilter::WriteObjectsOnUIThread, | |
134 base::Owned(long_living_objects.release()))); | |
135 } | |
136 | |
137 // On Windows, the write must be performed on the UI thread because the | |
138 // clipboard object from the IO thread cannot create windows so it cannot be | |
139 // the "owner" of the clipboard's contents. See http://crbug.com/5823. | |
140 // TODO(dcheng): Temporarily a member of ClipboardMessageFilter so it can access | |
141 // ui::Clipboard::WriteObjects(). | |
142 void ClipboardMessageFilter::WriteObjectsOnUIThread( | |
143 const ui::Clipboard::ObjectMap* objects) { | |
144 DCHECK_CURRENTLY_ON(BrowserThread::UI); | |
145 static ui::Clipboard* clipboard = ui::Clipboard::GetForCurrentThread(); | |
146 clipboard->WriteObjects(ui::CLIPBOARD_TYPE_COPY_PASTE, *objects); | |
147 } | |
148 | |
149 void ClipboardMessageFilter::OnWriteObjectsAsync( | |
150 const ui::Clipboard::ObjectMap& objects) { | |
151 // This async message doesn't support shared-memory based bitmaps; they must | |
152 // be removed otherwise we might dereference a rubbish pointer. | |
153 scoped_ptr<ui::Clipboard::ObjectMap> sanitized_objects( | |
154 new ui::Clipboard::ObjectMap(objects)); | |
155 SanitizeObjectMap(sanitized_objects.get(), kFilterBitmap); | |
156 | |
157 #if defined(OS_WIN) | |
158 // We cannot write directly from the IO thread, and cannot service the IPC | |
159 // on the UI thread. We'll copy the relevant data and post a task to preform | |
160 // the write on the UI thread. | |
161 BrowserThread::PostTask( | |
162 BrowserThread::UI, | |
163 FROM_HERE, | |
164 base::Bind( | |
165 &WriteObjectsOnUIThread, base::Owned(sanitized_objects.release()))); | |
166 #else | |
167 GetClipboard()->WriteObjects( | |
168 ui::CLIPBOARD_TYPE_COPY_PASTE, *sanitized_objects.get()); | |
169 #endif | |
170 } | |
171 | |
172 void ClipboardMessageFilter::OnGetSequenceNumber(ui::ClipboardType type, | 96 void ClipboardMessageFilter::OnGetSequenceNumber(ui::ClipboardType type, |
173 uint64* sequence_number) { | 97 uint64* sequence_number) { |
174 *sequence_number = GetClipboard()->GetSequenceNumber(type); | 98 *sequence_number = GetClipboard()->GetSequenceNumber(type); |
175 } | 99 } |
176 | 100 |
177 void ClipboardMessageFilter::OnReadAvailableTypes( | 101 void ClipboardMessageFilter::OnReadAvailableTypes( |
178 ui::ClipboardType type, | 102 ui::ClipboardType type, |
179 std::vector<base::string16>* types, | 103 std::vector<base::string16>* types, |
180 bool* contains_filenames) { | 104 bool* contains_filenames) { |
181 GetClipboard()->ReadAvailableTypes(type, types, contains_filenames); | 105 GetClipboard()->ReadAvailableTypes(type, types, contains_filenames); |
(...skipping 97 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
279 image_size); | 203 image_size); |
280 Send(reply_msg); | 204 Send(reply_msg); |
281 } | 205 } |
282 | 206 |
283 void ClipboardMessageFilter::OnReadCustomData(ui::ClipboardType clipboard_type, | 207 void ClipboardMessageFilter::OnReadCustomData(ui::ClipboardType clipboard_type, |
284 const base::string16& type, | 208 const base::string16& type, |
285 base::string16* result) { | 209 base::string16* result) { |
286 GetClipboard()->ReadCustomData(clipboard_type, type, result); | 210 GetClipboard()->ReadCustomData(clipboard_type, type, result); |
287 } | 211 } |
288 | 212 |
213 void ClipboardMessageFilter::OnWriteText(ui::ClipboardType clipboard_type, | |
214 const base::string16& text) { | |
215 clipboard_writer_->WriteText(text); | |
216 } | |
217 | |
218 void ClipboardMessageFilter::OnWriteHTML(ui::ClipboardType clipboard_type, | |
219 const base::string16& markup, | |
220 const GURL& url) { | |
221 clipboard_writer_->WriteHTML(markup, url.spec()); | |
sky
2014/09/18 19:47:53
Do you need to deal with an invalid url?
dcheng
2014/09/18 21:06:00
It probably doesn't hurt to filter this out--I thi
sky
2014/09/18 23:40:31
On tip of tree do we allow through invalid urls?
| |
222 } | |
223 | |
224 void ClipboardMessageFilter::OnWriteSmartPasteMarker( | |
225 ui::ClipboardType clipboard_type) { | |
226 clipboard_writer_->WriteWebSmartPaste(); | |
227 } | |
228 | |
229 void ClipboardMessageFilter::OnWriteCustomData( | |
230 ui::ClipboardType clipboard_type, | |
231 const std::map<base::string16, base::string16>& data) { | |
232 Pickle pickle; | |
233 ui::WriteCustomDataToPickle(data, &pickle); | |
234 clipboard_writer_->WritePickledData( | |
235 pickle, ui::Clipboard::GetWebCustomDataFormatType()); | |
236 } | |
237 | |
238 void ClipboardMessageFilter::OnWriteBookmark(ui::ClipboardType clipboard_type, | |
239 const GURL& url, | |
240 const base::string16& title) { | |
241 clipboard_writer_->WriteBookmark(title, url.spec()); | |
242 } | |
243 | |
244 void ClipboardMessageFilter::OnWriteImage(ui::ClipboardType clipboard_type, | |
245 const gfx::Size& size, | |
246 base::SharedMemoryHandle handle) { | |
247 if (!base::SharedMemory::IsHandleValid(handle)) { | |
248 return; | |
249 } | |
250 | |
251 scoped_ptr<base::SharedMemory> bitmap_buffer( | |
252 #if defined(OS_WIN) | |
253 new base::SharedMemory(handle, true, PeerHandle()); | |
dcheng
2014/09/18 17:02:22
Apparently, you only need to specify the process h
Will Harris
2014/09/22 23:23:33
I think calling this passing a process handle on P
| |
254 #else | |
255 new base::SharedMemory(handle, true)); | |
256 #endif | |
257 | |
258 SkBitmap bitmap; | |
259 // Let Skia do some sanity checking for (no negative widths/heights, no | |
260 // overflows while calculating bytes per row, etc). | |
261 if (!bitmap.setInfo(SkImageInfo::MakeN32Premul( | |
262 size.width(), size.height()))) { | |
263 return; | |
264 } | |
265 | |
266 // Make sure the size is representable as a signed 32-bit int, so | |
267 // SkBitmap::getSize() won't be truncated. | |
268 if (!sk_64_isS32(bitmap.computeSize64())) | |
269 return; | |
270 | |
271 if (!bitmap_buffer->Map(bitmap.getSize())) | |
272 return; | |
273 | |
274 if (!bitmap.installPixels(bitmap.info(), | |
dcheng
2014/09/18 17:02:22
I'm going to try to find a Skia person to see if t
| |
275 bitmap_buffer->memory(), | |
276 0, | |
277 NULL, | |
278 &ReleaseSharedMemoryPixels, | |
279 bitmap_buffer.get())) | |
280 return; | |
281 | |
282 // On success, SkBitmap now owns the SharedMemory. | |
283 ignore_result(bitmap_buffer.release()); | |
284 clipboard_writer_->WriteImage(bitmap); | |
285 } | |
286 | |
287 void ClipboardMessageFilter::OnCommitWrite(ui::ClipboardType clipboard_type) { | |
288 #if defined(OS_WIN) | |
289 // On non-Windows platforms, all clipboard IPCs are handled on the UI thread. | |
290 // However, Windows handles the clipboard IPCs on the IO thread to prevent | |
291 // deadlocks. Clipboard writes must still occur on the UI thread because the | |
292 // clipboard object from the IO thread cannot create windows so it cannot be | |
293 // the "owner" of the clipboard's contents. See http://crbug.com/5823. | |
294 BrowserThread::DeleteSoon( | |
295 BrowserThread::UI, FROM_HERE, clipboard_writer_.release()); | |
296 #endif | |
297 clipboard_writer_.reset( | |
298 new ui::ScopedClipboardWriter(ui::CLIPBOARD_TYPE_COPY_PASTE)); | |
299 } | |
300 | |
289 // static | 301 // static |
290 ui::Clipboard* ClipboardMessageFilter::GetClipboard() { | 302 ui::Clipboard* ClipboardMessageFilter::GetClipboard() { |
291 // We have a static instance of the clipboard service for use by all message | 303 // We have a static instance of the clipboard service for use by all message |
292 // filters. This instance lives for the life of the browser processes. | 304 // filters. This instance lives for the life of the browser processes. |
293 static ui::Clipboard* clipboard = ui::Clipboard::GetForCurrentThread(); | 305 static ui::Clipboard* clipboard = ui::Clipboard::GetForCurrentThread(); |
294 return clipboard; | 306 return clipboard; |
295 } | 307 } |
296 | 308 |
297 } // namespace content | 309 } // namespace content |
OLD | NEW |