Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(88)

Side by Side Diff: sandbox/win/src/process_mitigations.h

Issue 10944015: Enable DEP earlier on Vista and below (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 8 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
7 7
8 #include <windows.h> 8 #include <windows.h>
9 9
10 #include "base/basictypes.h" 10 #include "base/basictypes.h"
11 #include "sandbox/win/src/security_level.h" 11 #include "sandbox/win/src/security_level.h"
12 12
13 namespace sandbox { 13 namespace sandbox {
14 14
15 class TargetProcess;
16
15 // Sets the mitigation policy for the current process, ignoring any settings 17 // Sets the mitigation policy for the current process, ignoring any settings
16 // that are invalid for the current version of Windows. 18 // that are invalid for the current version of Windows.
17 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags); 19 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags);
18 20
19 // Returns the flags that must be enforced after startup for the current OS 21 // Returns the flags that must be enforced after startup for the current OS
20 // version. 22 // version.
21 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags); 23 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags);
22 24
23 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES 25 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES
24 // policy flags used by UpdateProcThreadAttribute(). The size field varies 26 // policy flags used by UpdateProcThreadAttribute(). The size field varies
25 // between a 32-bit and a 64-bit type based on the exact build and version of 27 // between a 32-bit and a 64-bit type based on the exact build and version of
26 // Windows, so the returned size must be passed to UpdateProcThreadAttribute(). 28 // Windows, so the returned size must be passed to UpdateProcThreadAttribute().
27 void ConvertProcessMitigationsToPolicy(MitigationFlags flags, 29 void ConvertProcessMitigationsToPolicy(MitigationFlags flags,
28 DWORD64* policy_flags, size_t* size); 30 DWORD64* policy_flags, size_t* size);
29 31
30 // Adds mitigations that need to be performed on the suspended target process 32 // Adds mitigations that need to be performed on the suspended target process
31 // before execution begins. 33 // before execution begins.
32 bool ApplyProcessMitigationsToSuspendedProcess(HANDLE process, 34 bool ApplyProcessMitigationsToSuspendedTarget(TargetProcess* target,
33 MitigationFlags flags); 35 MitigationFlags flags);
34 36
35 // Returns true if all the supplied flags can be set after a process starts. 37 // Returns true if all the supplied flags can be set after a process starts.
36 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags); 38 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags);
37 39
38 // Returns true if all the supplied flags can be set before a process starts. 40 // Returns true if all the supplied flags can be set before a process starts.
39 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags); 41 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags);
40 42
41 } // namespace sandbox 43 } // namespace sandbox
42 44
43 #endif // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_ 45 #endif // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
44 46
OLDNEW
« no previous file with comments | « no previous file | sandbox/win/src/process_mitigations.cc » ('j') | sandbox/win/src/process_mitigations.cc » ('J')

Powered by Google App Engine
This is Rietveld 408576698