Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(124)

Side by Side Diff: sandbox/src/handle_closer.h

Issue 10689170: Move the Windows sandbox to sandbox/win (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Rebase on top of tree (properly this time) Created 8 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « sandbox/src/filesystem_policy.cc ('k') | sandbox/src/handle_closer.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_
6 #define SANDBOX_SRC_HANDLE_CLOSER_H_
7
8 #include <map>
9 #include <set>
10
11 #include "base/basictypes.h"
12 #include "base/string16.h"
13 #include "sandbox/src/interception.h"
14 #include "sandbox/src/sandbox_types.h"
15 #include "sandbox/src/target_process.h"
16
17 namespace sandbox {
18
19 // This is a map of handle-types to names that we need to close in the
20 // target process. A null set means we need to close all handles of the
21 // given type.
22 typedef std::map<const string16, std::set<const string16> > HandleMap;
23
24 // Type and set of corresponding handle names to close.
25 struct HandleListEntry {
26 size_t record_bytes; // Rounded to sizeof(size_t) bytes.
27 size_t offset_to_names; // Nul terminated strings of name_count names.
28 size_t name_count;
29 char16 handle_type[1];
30 };
31
32 // Global parameters and a pointer to the list of entries.
33 struct HandleCloserInfo {
34 size_t record_bytes; // Rounded to sizeof(size_t) bytes.
35 size_t num_handle_types;
36 struct HandleListEntry handle_entries[1];
37 };
38
39 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info;
40
41 // Adds handles to close after lockdown.
42 class HandleCloser {
43 public:
44 HandleCloser();
45
46 // Adds a handle that will be closed in the target process after lockdown.
47 // A NULL value for handle_name indicates all handles of the specified type.
48 // An empty string for handle_name indicates the handle is unnamed.
49 ResultCode AddHandle(const char16* handle_type, const char16* handle_name);
50
51 // Serializes and copies the closer table into the target process.
52 bool InitializeTargetHandles(TargetProcess* target);
53
54 // Adds any interceptions that may be required due to closed system handles.
55 bool SetupHandleInterceptions(InterceptionManager* manager);
56
57 private:
58 // Calculates the memory needed to copy the serialized handles list (rounded
59 // to the nearest machine-word size).
60 size_t GetBufferSize();
61
62 // Serializes the handle list into the target process.
63 bool SetupHandleList(void* buffer, size_t buffer_bytes);
64
65 HandleMap handles_to_close_;
66
67 DISALLOW_COPY_AND_ASSIGN(HandleCloser);
68 };
69
70 // Returns the object manager's name associated with a handle
71 bool GetHandleName(HANDLE handle, string16* handle_name);
72
73 } // namespace sandbox
74
75 #endif // SANDBOX_SRC_HANDLE_CLOSER_H_
OLDNEW
« no previous file with comments | « sandbox/src/filesystem_policy.cc ('k') | sandbox/src/handle_closer.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698