OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 // A mini-zygote specifically for Native Client. | 5 // A mini-zygote specifically for Native Client. |
6 | 6 |
7 #include "chrome/common/nacl_helper_linux.h" | 7 #include "chrome/common/nacl_helper_linux.h" |
8 | 8 |
9 #include <errno.h> | 9 #include <errno.h> |
10 #include <link.h> | 10 #include <link.h> |
11 #include <stdio.h> | 11 #include <stdio.h> |
12 #include <stdlib.h> | 12 #include <stdlib.h> |
13 #include <sys/socket.h> | 13 #include <sys/socket.h> |
14 #include <sys/types.h> | 14 #include <sys/types.h> |
15 | 15 |
16 #include <string> | 16 #include <string> |
17 #include <vector> | 17 #include <vector> |
18 | 18 |
19 #include "base/at_exit.h" | 19 #include "base/at_exit.h" |
20 #include "base/command_line.h" | 20 #include "base/command_line.h" |
21 #include "base/eintr_wrapper.h" | 21 #include "base/eintr_wrapper.h" |
| 22 #include "base/global_descriptors_posix.h" |
22 #include "base/logging.h" | 23 #include "base/logging.h" |
23 #include "base/message_loop.h" | 24 #include "base/message_loop.h" |
24 #include "base/posix/unix_domain_socket.h" | 25 #include "base/posix/unix_domain_socket.h" |
25 #include "base/rand_util.h" | 26 #include "base/rand_util.h" |
26 #include "chrome/nacl/nacl_listener.h" | 27 #include "chrome/nacl/nacl_listener.h" |
27 #include "crypto/nss_util.h" | 28 #include "crypto/nss_util.h" |
| 29 #include "ipc/ipc_descriptors.h" |
28 #include "ipc/ipc_switches.h" | 30 #include "ipc/ipc_switches.h" |
29 #include "native_client/src/trusted/service_runtime/sel_addrspace.h" | 31 #include "native_client/src/trusted/service_runtime/sel_addrspace.h" |
30 | 32 |
31 namespace { | 33 namespace { |
32 | 34 |
33 bool g_suid_sandbox_active; | 35 bool g_suid_sandbox_active; |
34 | 36 |
35 // The child must mimic the behavior of zygote_main_linux.cc on the child | 37 // The child must mimic the behavior of zygote_main_linux.cc on the child |
36 // side of the fork. See zygote_main_linux.cc:HandleForkRequest from | 38 // side of the fork. See zygote_main_linux.cc:HandleForkRequest from |
37 // if (!child) { | 39 // if (!child) { |
38 // Note: this code doesn't attempt to support SELINUX or the SECCOMP sandbox. | 40 // Note: this code doesn't attempt to support SELINUX or the SECCOMP sandbox. |
39 void BecomeNaClLoader(const std::vector<int>& child_fds) { | 41 void BecomeNaClLoader(const std::vector<int>& child_fds) { |
40 VLOG(1) << "NaCl loader: setting up IPC descriptor"; | 42 VLOG(1) << "NaCl loader: setting up IPC descriptor"; |
41 // don't need zygote FD any more | 43 // don't need zygote FD any more |
42 if (HANDLE_EINTR(close(kNaClZygoteDescriptor)) != 0) | 44 if (HANDLE_EINTR(close(kNaClZygoteDescriptor)) != 0) |
43 LOG(ERROR) << "close(kNaClZygoteDescriptor) failed."; | 45 LOG(ERROR) << "close(kNaClZygoteDescriptor) failed."; |
44 // Set up browser descriptor as expected by Chrome on fd 3 | 46 // Set up browser descriptor on fd 3 and IPC as expected by Chrome. |
45 // The zygote takes care of putting the sandbox IPC channel on fd 5 | 47 base::GlobalDescriptors::GetInstance()->Set(kPrimaryIPCChannel, |
| 48 kPrimaryIPCChannel + base::GlobalDescriptors::kBaseDescriptor); |
46 int zfd = dup2(child_fds[kNaClBrowserFDIndex], kNaClBrowserDescriptor); | 49 int zfd = dup2(child_fds[kNaClBrowserFDIndex], kNaClBrowserDescriptor); |
47 if (zfd != kNaClBrowserDescriptor) { | 50 if (zfd != kNaClBrowserDescriptor) { |
48 LOG(ERROR) << "Could not initialize kNaClBrowserDescriptor"; | 51 LOG(ERROR) << "Could not initialize kNaClBrowserDescriptor"; |
49 _exit(-1); | 52 _exit(-1); |
50 } | 53 } |
51 | 54 |
52 MessageLoopForIO main_message_loop; | 55 MessageLoopForIO main_message_loop; |
53 NaClListener listener; | 56 NaClListener listener; |
54 listener.Listen(); | 57 listener.Listen(); |
55 _exit(0); | 58 _exit(0); |
(...skipping 174 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
230 } | 233 } |
231 } | 234 } |
232 // if fork fails, send PID=-1 to zygote | 235 // if fork fails, send PID=-1 to zygote |
233 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, &badpid, | 236 if (!UnixDomainSocket::SendMsg(kNaClZygoteDescriptor, &badpid, |
234 sizeof(badpid), empty)) { | 237 sizeof(badpid), empty)) { |
235 LOG(ERROR) << "*** send() to zygote failed"; | 238 LOG(ERROR) << "*** send() to zygote failed"; |
236 } | 239 } |
237 } | 240 } |
238 CHECK(false); // This routine must not return | 241 CHECK(false); // This routine must not return |
239 } | 242 } |
OLD | NEW |