Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(68)

Side by Side Diff: sandbox/src/target_process.h

Issue 10493002: Revert 130716 - Use ScopedProcessInformation and other RAII types in sandbox. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 8 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « sandbox/src/restricted_token_utils.cc ('k') | sandbox/src/target_process.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_SRC_TARGET_PROCESS_H__ 5 #ifndef SANDBOX_SRC_TARGET_PROCESS_H__
6 #define SANDBOX_SRC_TARGET_PROCESS_H__ 6 #define SANDBOX_SRC_TARGET_PROCESS_H__
7 7
8 #include <windows.h> 8 #include <windows.h>
9 9
10 #include "base/basictypes.h" 10 #include "base/basictypes.h"
11 #include "base/memory/scoped_ptr.h"
12 #include "base/win/scoped_handle.h"
13 #include "base/win/scoped_process_information.h"
14 #include "sandbox/src/crosscall_server.h" 11 #include "sandbox/src/crosscall_server.h"
15 #include "sandbox/src/sandbox_types.h" 12 #include "sandbox/src/sandbox_types.h"
16 13
17 namespace sandbox { 14 namespace sandbox {
18 15
19 class SharedMemIPCServer; 16 class SharedMemIPCServer;
20 class ThreadProvider; 17 class ThreadProvider;
21 18
22 // TargetProcess models a target instance (child process). Objects of this 19 // TargetProcess models a target instance (child process). Objects of this
23 // class are owned by the Policy used to create them. 20 // class are owned by the Policy used to create them.
24 class TargetProcess { 21 class TargetProcess {
25 public: 22 public:
26 // The constructor takes ownership of |initial_token| and |lockdown_token|. 23 // The constructor takes ownership of |initial_token| and |lockdown_token|.
27 TargetProcess(HANDLE initial_token, HANDLE lockdown_token, HANDLE job, 24 TargetProcess(HANDLE initial_token, HANDLE lockdown_token, HANDLE job,
28 ThreadProvider* thread_pool); 25 ThreadProvider* thread_pool);
29 ~TargetProcess(); 26 ~TargetProcess();
30 27
31 // TODO(cpu): Currently there does not seem to be a reason to implement 28 // TODO(cpu): Currently there does not seem to be a reason to implement
32 // reference counting for this class since is internal, but kept the 29 // reference counting for this class since is internal, but kept the
33 // the same interface so the interception framework does not need to be 30 // the same interface so the interception framework does not need to be
34 // touched at this point. 31 // touched at this point.
35 void AddRef() {} 32 void AddRef() {}
36 void Release() {} 33 void Release() {}
37 34
38 // Creates the new target process. The process is created suspended. 35 // Creates the new target process. The process is created suspended.
39 DWORD Create(const wchar_t* exe_path, 36 DWORD Create(const wchar_t* exe_path, const wchar_t* command_line,
40 const wchar_t* command_line, 37 const wchar_t* desktop, PROCESS_INFORMATION* target_info);
41 const wchar_t* desktop,
42 base::win::ScopedProcessInformation* target_info);
43 38
44 // Destroys the target process. 39 // Destroys the target process.
45 void Terminate(); 40 void Terminate();
46 41
47 // Creates the IPC objects such as the BrokerDispatcher and the 42 // Creates the IPC objects such as the BrokerDispatcher and the
48 // IPC server. The IPC server uses the services of the thread_pool. 43 // IPC server. The IPC server uses the services of the thread_pool.
49 DWORD Init(Dispatcher* ipc_dispatcher, void* policy, 44 DWORD Init(Dispatcher* ipc_dispatcher, void* policy,
50 uint32 shared_IPC_size, uint32 shared_policy_size); 45 uint32 shared_IPC_size, uint32 shared_policy_size);
51 46
52 // Returns the handle to the target process. 47 // Returns the handle to the target process.
53 HANDLE Process() const { 48 HANDLE Process() const {
54 return sandbox_process_info_.process_handle(); 49 return sandbox_process_;
55 } 50 }
56 51
57 // Returns the handle to the job object that the target process belongs to. 52 // Returns the handle to the job object that the target process belongs to.
58 HANDLE Job() const { 53 HANDLE Job() const {
59 return job_; 54 return job_;
60 } 55 }
61 56
62 // Returns the address of the target main exe. This is used by the 57 // Returns the address of the target main exe. This is used by the
63 // interceptions framework. 58 // interceptions framework.
64 HMODULE MainModule() const { 59 HMODULE MainModule() const {
65 return reinterpret_cast<HMODULE>(base_address_); 60 return reinterpret_cast<HMODULE>(base_address_);
66 } 61 }
67 62
68 // Returns the name of the executable. 63 // Returns the name of the executable.
69 const wchar_t* Name() const { 64 const wchar_t* Name() const {
70 return exe_name_.get(); 65 return exe_name_;
71 } 66 }
72 67
73 // Returns the process id. 68 // Returns the process id.
74 DWORD ProcessId() const { 69 DWORD ProcessId() const {
75 return sandbox_process_info_.process_id(); 70 return sandbox_process_id_;
76 } 71 }
77 72
78 // Returns the handle to the main thread. 73 // Returns the handle to the main thread.
79 HANDLE MainThread() const { 74 HANDLE MainThread() const {
80 return sandbox_process_info_.thread_handle(); 75 return sandbox_thread_;
81 } 76 }
82 77
83 // Transfers a 32-bit variable between the broker and the target. 78 // Transfers a 32-bit variable between the broker and the target.
84 ResultCode TransferVariable(const char* name, void* address, size_t size); 79 ResultCode TransferVariable(const char* name, void* address, size_t size);
85 80
86 private: 81 private:
87 // Details of the target process. 82 // The handle to the target process.
88 base::win::ScopedProcessInformation sandbox_process_info_; 83 HANDLE sandbox_process_;
84 // The handle to the main thread.
85 HANDLE sandbox_thread_;
86 // The process id of the target process.
87 DWORD sandbox_process_id_;
89 // The token associated with the process. It provides the core of the 88 // The token associated with the process. It provides the core of the
90 // sbox security. 89 // sbox security.
91 base::win::ScopedHandle lockdown_token_; 90 HANDLE lockdown_token_;
92 // The token given to the initial thread so that the target process can 91 // The token given to the initial thread so that the target process can
93 // start. It has more powers than the lockdown_token. 92 // start. It has more powers than the lockdown_token.
94 base::win::ScopedHandle initial_token_; 93 HANDLE initial_token_;
95 // Kernel handle to the shared memory used by the IPC server. 94 // Kernel handle to the shared memory used by the IPC server.
96 base::win::ScopedHandle shared_section_; 95 HANDLE shared_section_;
97 // Job object containing the target process. 96 // Job object containing the target process.
98 HANDLE job_; 97 HANDLE job_;
99 // Reference to the IPC subsystem. 98 // Reference to the IPC subsystem.
100 scoped_ptr<SharedMemIPCServer> ipc_server_; 99 SharedMemIPCServer* ipc_server_;
101 // Provides the threads used by the IPC. This class does not own this pointer. 100 // Provides the threads used by the IPC. This class does not own this pointer.
102 ThreadProvider* thread_pool_; 101 ThreadProvider* thread_pool_;
103 // Base address of the main executable 102 // Base address of the main executable
104 void* base_address_; 103 void* base_address_;
105 // Full name of the target executable. 104 // Full name of the target executable.
106 scoped_ptr_malloc<wchar_t> exe_name_; 105 wchar_t* exe_name_;
107 106
108 // Function used for testing. 107 // Function used for testing.
109 friend TargetProcess* MakeTestTargetProcess(HANDLE process, 108 friend TargetProcess* MakeTestTargetProcess(HANDLE process,
110 HMODULE base_address); 109 HMODULE base_address);
111 110
112 DISALLOW_IMPLICIT_CONSTRUCTORS(TargetProcess); 111 DISALLOW_IMPLICIT_CONSTRUCTORS(TargetProcess);
113 }; 112 };
114 113
115 // Creates a mock TargetProcess used for testing interceptions. 114 // Creates a mock TargetProcess used for testing interceptions.
116 // TODO(cpu): It seems that this method is not going to be used anymore. 115 // TODO(cpu): It seems that this method is not going to be used anymore.
117 TargetProcess* MakeTestTargetProcess(HANDLE process, HMODULE base_address); 116 TargetProcess* MakeTestTargetProcess(HANDLE process, HMODULE base_address);
118 117
119 118
120 } // namespace sandbox 119 } // namespace sandbox
121 120
122 #endif // SANDBOX_SRC_TARGET_PROCESS_H__ 121 #endif // SANDBOX_SRC_TARGET_PROCESS_H__
OLDNEW
« no previous file with comments | « sandbox/src/restricted_token_utils.cc ('k') | sandbox/src/target_process.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698