An implementation of chrome.socket.secure().

chrome/browser/extensions/api/sockets_tcp/sockets_tcp_api.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/sockets_tcp/sockets_tcp_api.h"
 
 #include "chrome/browser/extensions/api/socket/tcp_socket.h"
+#include "chrome/browser/extensions/api/socket/tls_socket.h"
 #include "chrome/browser/extensions/api/sockets_tcp/tcp_socket_event_dispatcher.h"
 #include "chrome/common/extensions/api/sockets/sockets_manifest_data.h"
 #include "content/public/common/socket_permission_request.h"
 #include "net/base/net_errors.h"
 
 using extensions::ResumableTCPSocket;
 using extensions::api::sockets_tcp::SocketInfo;
 using extensions::api::sockets_tcp::SocketProperties;
 
 namespace {
 
 const char kSocketNotFoundError[] = "Socket not found";
 const char kPermissionError[] = "Does not have permission";
+const char kSecureSocketTypeError[] =
+    "Only TCP sockets are supported for TLS.";

[rpaquay, 2013/12/16 20:18:46]

This message should not be needed (use DCHEK instead), as all sockets used with
this API will be of type TCP.

[lally, 2013/12/16 22:20:07]

Ah, fixed.  I was actually trying to stop already-TLS sockets from trying to
re-secure, but didn't adjust the error messages or symbols.  Fixed.

+const char kSocketNotConnectedError[] = "Socket not connected";
 
 linked_ptr<SocketInfo> CreateSocketInfo(int socket_id,
                                         ResumableTCPSocket* socket) {
   linked_ptr<SocketInfo> socket_info(new SocketInfo());
   // This represents what we know about the socket, and does not call through
   // to the system.
   socket_info->socket_id = socket_id;
   if (!socket->name().empty()) {
     socket_info->name.reset(new std::string(socket->name()));
   }
@@ skipping 402 matching lines @@
       int socket_id = *it;
       ResumableTCPSocket* socket = GetTcpSocket(socket_id);
       if (socket) {
         socket_infos.push_back(CreateSocketInfo(socket_id, socket));
       }
     }
   }
   results_ = sockets_tcp::GetSockets::Results::Create(socket_infos);
 }
 
+SocketsTcpSecureFunction::SocketsTcpSecureFunction() {}
+SocketsTcpSecureFunction::~SocketsTcpSecureFunction() {}
+
+bool SocketsTcpSecureFunction::Prepare() {
+  DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
+  params_ = api::socket::Secure::Params::Create(*args_);
+  EXTENSION_FUNCTION_VALIDATE(params_.get());
+  url_request_getter_ = GetProfile()->GetRequestContext();
+  return true;
+}
+
+// Override the regular implementation, which would call AsyncWorkCompleted
+// immediately after Work().
+void SocketsTcpSecureFunction::AsyncWorkStart() {
+  int result = net::ERR_INVALID_ARGUMENT;
+  DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
+
+  Socket* socket = GetSocket(params_->socket_id);
+  Profile* profile = GetProfile();
+  DCHECK(profile);
+
+  if (!socket) {
+    SetResult(new base::FundamentalValue(result));
+    error_ = kSocketNotFoundError;
+    AsyncWorkCompleted();
+    return;
+  }
+
+  TCPSocket* tcp_socket = static_cast<TCPSocket*>(socket);
+  if (socket->GetSocketType() != Socket::TYPE_TCP

[rpaquay, 2013/12/16 20:18:46]

The check for TYPE_TCP should be DCHECK, because it should always be the case. I
am not 100% sure what "ClientStream()" is supposed to check, but it seems like
it should be part of the DCHECK too (unless we are checking for client
connection established).

[lally, 2013/12/16 22:20:07]

I've added some comments and clarified this part.

+      || tcp_socket->ClientStream() == NULL) {
+    SetResult(new base::FundamentalValue(result));
+    error_ = kSecureSocketTypeError;
+    AsyncWorkCompleted();
+    return;
+  }
+
+  if (!socket->IsConnected()) {
+    SetResult(new base::FundamentalValue(result));
+    error_ = kSocketNotConnectedError;
+    AsyncWorkCompleted();
+    return;
+  }
+
+  TLSSocket::SecureTCPSocket(
+      socket, profile, url_request_getter_, extension_id(),
+      params_->options.get(),
+      base::Bind(&SocketsTcpSecureFunction::TlsConnectDone,
+                 this));
+}
+
+void SocketsTcpSecureFunction::TlsConnectDone(TLSSocket* sock, int result) {
+  SetResult(new base::FundamentalValue(result));

[rpaquay, 2013/12/16 20:18:46]

This call is not needed if you always use "results_ = " as noted below.

[lally, 2013/12/16 22:20:07]

Ok, done.  Thanks.

+  if (sock) {
+    SetSocket(params_->socket_id, sock);
+  } else {
+    RemoveSocket(params_->socket_id);
+  }
+
+  if (result != net::OK) {
+    error_ = net::ErrorToString(result);
+    results_ = api::socket::Secure::Results::Create(result);

[rpaquay, 2013/12/16 20:18:46]

1) move this out of the if block
2) RHS should be "api::sockets::tcp::Secure::Results::Create(result)";

[lally, 2013/12/16 22:20:07]

Done.

+  }
+  AsyncWorkCompleted();
+}
+
 }  // namespace api
 }  // namespace extensions