Launches a privileged utility process.

chrome/utility/chrome_content_utility_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/utility/chrome_content_utility_client.h"
 
 #include "base/base64.h"
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/files/file_path.h"
@@ skipping 49 matching lines @@
 
 #if defined(ENABLE_MDNS)
 #include "chrome/utility/local_discovery/service_discovery_message_handler.h"
 #include "content/public/common/content_switches.h"
 #endif  // ENABLE_MDNS
 
 namespace chrome {
 
 namespace {
 
+// This whitelist is the default list of whitelist entries when running
+// elevated.
+const size_t kMessageWhitelistSize = 0;
+const uint32 kMessageWhitelist[] = {
+  0
+};
+
 bool Send(IPC::Message* message) {
   return content::UtilityThread::Get()->Send(message);
 }
 
 void ReleaseProcessIfNeeded() {
   content::UtilityThread::Get()->ReleaseProcessIfNeeded();
 }
 
 }  // namespace
 
-ChromeContentUtilityClient::ChromeContentUtilityClient() {
+ChromeContentUtilityClient::ChromeContentUtilityClient()
+  : filter_messages_(false) {

[mef, 2014/01/10 18:22:55]

nit: tab

[Drew Haven, 2014/01/16 02:52:05]

Done.

 #if !defined(OS_ANDROID)
-  handlers_.push_back(new ProfileImportHandler());
+    handlers_.push_back(new ProfileImportHandler());

[mef, 2014/01/10 18:22:55]

nit: tab not needed?

[Drew Haven, 2014/01/16 02:52:05]

Thanks.  My windows vim indentation-config needs needs to be fixed.

 #endif  // OS_ANDROID
 
 #if defined(ENABLE_MDNS)
   if (CommandLine::ForCurrentProcess()->HasSwitch(
           switches::kUtilityProcessEnableMDns)) {
     handlers_.push_back(new local_discovery::ServiceDiscoveryMessageHandler());
   }
 #endif  // ENABLE_MDNS
 }
 
 ChromeContentUtilityClient::~ChromeContentUtilityClient() {
 }
 
 void ChromeContentUtilityClient::UtilityThreadStarted() {
 #if defined(OS_WIN)
   // Load the pdf plugin before the sandbox is turned on. This is for Windows
   // only because we need this DLL only on Windows.
   base::FilePath pdf;
   if (PathService::Get(chrome::FILE_PDF_PLUGIN, &pdf) &&
       base::PathExists(pdf)) {
     bool rv = !!LoadLibrary(pdf.value().c_str());
     DCHECK(rv) << "Couldn't load PDF plugin";
   }
 #endif
 
   CommandLine* command_line = CommandLine::ForCurrentProcess();
   std::string lang = command_line->GetSwitchValueASCII(switches::kLang);
   if (!lang.empty())
     extension_l10n_util::SetProcessLocale(lang);
+
+  if (command_line->HasSwitch(switches::kUtilityProcessRunningElevated)) {
+    DVLOG(0) << "Running elevated, restricting messages.";
+    for (size_t i = 0; i < kMessageWhitelistSize; i++) {
+      DVLOG(0) << "Adding " << kMessageWhitelist[i] << " to whitelist.";
+      message_id_whitelist_.insert(kMessageWhitelist[i]);
+    }
+    filter_messages_ = true;
+  }
 }
 
 bool ChromeContentUtilityClient::OnMessageReceived(
     const IPC::Message& message) {
+  if (filter_messages_
+      && message_id_whitelist_.find(message.type())
+         == message_id_whitelist_.end()) {
+    DVLOG(0) << "Rejecting message for not being in whitelist: "
+             << message.type();
+    return false;
+  }
+
   bool handled = true;
   IPC_BEGIN_MESSAGE_MAP(ChromeContentUtilityClient, message)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_UnpackExtension, OnUnpackExtension)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_UnpackWebResource,
                         OnUnpackWebResource)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_ParseUpdateManifest,
                         OnParseUpdateManifest)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_DecodeImage, OnDecodeImage)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_DecodeImageBase64, OnDecodeImageBase64)
     IPC_MESSAGE_HANDLER(ChromeUtilityMsg_RenderPDFPagesToMetafile,
@@ skipping 46 matching lines @@
   local_discovery::ServiceDiscoveryMessageHandler::PreSandboxStartup();
 #endif  // ENABLE_MDNS
 
   // Load media libraries for media file validation.
   base::FilePath media_path;
   PathService::Get(content::DIR_MEDIA_LIBS, &media_path);
   if (!media_path.empty())
     media::InitializeMediaLibrary(media_path);
 }
 
+void ChromeContentUtilityClient::AddHandler(UtilityMessageHandler* handler) {
+  handlers_.push_back(handler);
+}
+
+void ChromeContentUtilityClient::AddWhitelistMessageType(int message_type) {
+  DVLOG(0) << "Adding " << message_type << " to whitelist.";
+  message_id_whitelist_.insert(message_type);
+}
+
 void ChromeContentUtilityClient::OnUnpackExtension(
     const base::FilePath& extension_path,
     const std::string& extension_id,
     int location,
     int creation_flags) {
   CHECK_GT(location, extensions::Manifest::INVALID_LOCATION);
   CHECK_LT(location, extensions::Manifest::NUM_LOCATIONS);
   extensions::ExtensionsClient::Set(
       extensions::ChromeExtensionsClient::GetInstance());
   extensions::Unpacker unpacker(
@@ skipping 410 matching lines @@
   picasa::PicasaAlbumsIndexer indexer(album_uids);
   indexer.ParseFolderINI(folders_inis);
 
   Send(new ChromeUtilityHostMsg_IndexPicasaAlbumsContents_Finished(
       indexer.albums_images()));
   ReleaseProcessIfNeeded();
 }
 #endif  // defined(OS_WIN) || defined(OS_MACOSX)
 
 }  // namespace chrome