Open a firewall hole when a TCP server or UDP socket is bound.

extensions/browser/api/socket/socket.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef EXTENSIONS_BROWSER_API_SOCKET_SOCKET_H_
 #define EXTENSIONS_BROWSER_API_SOCKET_SOCKET_H_
 
 #include <queue>
 #include <string>
 #include <utility>
 
 #include "base/callback.h"
 #include "base/memory/ref_counted.h"
 #include "extensions/browser/api/api_resource.h"
 #include "extensions/browser/api/api_resource_manager.h"
 #include "net/base/completion_callback.h"
 #include "net/base/io_buffer.h"
 #include "net/base/ip_endpoint.h"
 #include "net/socket/tcp_client_socket.h"
 
+#if defined(OS_CHROMEOS)
+#include "chromeos/network/firewall_hole.h"
+#endif  // OS_CHROMEOS
+
 namespace net {
 class AddressList;
 class IPEndPoint;
 class Socket;
 }
 
 namespace extensions {
 
 typedef base::Callback<void(int)> CompletionCallback;
 typedef base::Callback<void(int, scoped_refptr<net::IOBuffer> io_buffer)>
@@ skipping 17 matching lines @@
   // may be the empty string if the client does not intend to ever upgrade the
   // socket to TLS, and thusly has not invoked set_hostname().
   const std::string& hostname() const { return hostname_; }
 
   // Set the hostname of the remote host that this socket is connected to.
   // Note: This may be an IP literal. In the case of IDNs, this should be a
   // series of U-LABELs (UTF-8), not A-LABELs. IP literals for IPv6 will be
   // unbracketed.
   void set_hostname(const std::string& hostname) { hostname_ = hostname; }
 
+#if defined(OS_CHROMEOS)
+  void set_firewall_hole(scoped_ptr<chromeos::FirewallHole> firewall_hole) {
+    firewall_hole_.reset(firewall_hole.release());
+  }
+#endif  // OS_CHROMEOS
+
   // Note: |address| contains the resolved IP address, not the hostname of
   // the remote endpoint. In order to upgrade this socket to TLS, callers
   // must also supply the hostname of the endpoint via set_hostname().
   virtual void Connect(const std::string& address,
                        uint16 port,
                        const CompletionCallback& callback) = 0;
   virtual void Disconnect() = 0;
   virtual int Bind(const std::string& address, uint16 port) = 0;
 
   // The |callback| will be called with the number of bytes read into the
@@ skipping 60 matching lines @@
                  int byte_count,
                  const CompletionCallback& callback);
     ~WriteRequest();
     scoped_refptr<net::IOBuffer> io_buffer;
     int byte_count;
     CompletionCallback callback;
     int bytes_written;
   };
   std::queue<WriteRequest> write_queue_;
   scoped_refptr<net::IOBuffer> io_buffer_write_;
+
+#if defined(OS_CHROMEOS)
+  // Represents a hole punched in the system firewall for this socket.
+  scoped_ptr<chromeos::FirewallHole, content::BrowserThread::DeleteOnUIThread>
+      firewall_hole_;
+#endif  // OS_CHROMEOS
 };
 
 }  //  namespace extensions
 
 #endif  // EXTENSIONS_BROWSER_API_SOCKET_SOCKET_H_