Mojo: Implement plumbing to support passing handles over MessagePipes.

mojo/system/message_pipe_dispatcher.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/system/message_pipe_dispatcher.h"
 
 #include "base/logging.h"
 #include "mojo/system/limits.h"
 #include "mojo/system/memory.h"
 #include "mojo/system/message_pipe.h"
@@ skipping 25 matching lines @@
 
 MojoResult MessagePipeDispatcher::CloseImplNoLock() {
   lock().AssertAcquired();
   message_pipe_->Close(port_);
   message_pipe_ = NULL;
   return MOJO_RESULT_OK;
 }
 
 MojoResult MessagePipeDispatcher::WriteMessageImplNoLock(
     const void* bytes, uint32_t num_bytes,
-    const MojoHandle* handles, uint32_t num_handles,
+    const std::vector<Dispatcher*>* dispatchers,
     MojoWriteMessageFlags flags) {
   lock().AssertAcquired();
 
   if (!VerifyUserPointer<void>(bytes, num_bytes))
     return MOJO_RESULT_INVALID_ARGUMENT;
   if (num_bytes > kMaxMessageNumBytes)
     return MOJO_RESULT_RESOURCE_EXHAUSTED;
 
-  if (!VerifyUserPointer<MojoHandle>(handles, num_handles))
-    return MOJO_RESULT_INVALID_ARGUMENT;
-  if (num_handles > kMaxMessageNumHandles)
-    return MOJO_RESULT_RESOURCE_EXHAUSTED;
-  if (num_handles > 0) {
-    // TODO(vtl): Verify each handle.
+  if (dispatchers) {
+    DCHECK_GT(dispatchers->size(), 0u);
+    DCHECK_LE(dispatchers->size(), kMaxMessageNumHandles);
+
+    // TODO(vtl)
     NOTIMPLEMENTED();
     return MOJO_RESULT_UNIMPLEMENTED;
   }
 
   return message_pipe_->WriteMessage(port_,
                                      bytes, num_bytes,
-                                     handles, num_handles,
+                                     dispatchers,
                                      flags);
 }
 
 MojoResult MessagePipeDispatcher::ReadMessageImplNoLock(
     void* bytes, uint32_t* num_bytes,
-    MojoHandle* handles, uint32_t* num_handles,
+    uint32_t max_num_dispatchers,
+    std::vector<scoped_refptr<Dispatcher> >* dispatchers,
     MojoReadMessageFlags flags) {
   lock().AssertAcquired();
 
-  // TODO(vtl): I suppose we should verify |num_bytes| and |num_handles| (i.e.,
-  // those pointers themselves). Hmmm.
-
-  if (num_bytes && !VerifyUserPointer<void>(bytes, *num_bytes))
-    return MOJO_RESULT_INVALID_ARGUMENT;
-
-  if (num_handles && !VerifyUserPointer<MojoHandle>(handles, *num_handles))
-    return MOJO_RESULT_INVALID_ARGUMENT;
+  if (num_bytes) {
+    if (!VerifyUserPointer<uint32_t>(num_bytes, 1))
+      return MOJO_RESULT_INVALID_ARGUMENT;
+    if (!VerifyUserPointer<void>(bytes, *num_bytes))
+      return MOJO_RESULT_INVALID_ARGUMENT;
+  }
 
   return message_pipe_->ReadMessage(port_,
                                     bytes, num_bytes,
-                                    handles, num_handles,
+                                    max_num_dispatchers, dispatchers,
                                     flags);
 }
 
 MojoResult MessagePipeDispatcher::AddWaiterImplNoLock(Waiter* waiter,
                                                       MojoWaitFlags flags,
                                                       MojoResult wake_result) {
   lock().AssertAcquired();
   return message_pipe_->AddWaiter(port_, waiter, flags, wake_result);
 }
 
 void MessagePipeDispatcher::RemoveWaiterImplNoLock(Waiter* waiter) {
   lock().AssertAcquired();
   message_pipe_->RemoveWaiter(port_, waiter);
 }
 
 }  // namespace system
 }  // namespace mojo