Add a 'NACL' plugin type to PepperMessageFilter so we can block private APIs.

content/browser/renderer_host/pepper/pepper_message_filter.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/pepper/pepper_message_filter.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/callback.h"
 #include "base/compiler_specific.h"
@@ skipping 92 matching lines @@
 }
 
 PepperMessageFilter::PepperMessageFilter(ProcessType type,
                                          net::HostResolver* host_resolver)
     : process_type_(type),
       process_id_(0),
       resource_context_(NULL),
       host_resolver_(host_resolver),
       next_socket_id_(1),
       incognito_(false) {
-  DCHECK(type == PLUGIN);
+  DCHECK(type == PLUGIN || type == NACL);
   DCHECK(host_resolver);
 }
 
 void PepperMessageFilter::OverrideThreadForMessage(
     const IPC::Message& message,
     BrowserThread::ID* thread) {
   if (message.type() == PpapiHostMsg_PPBTCPSocket_Connect::ID ||
       message.type() == PpapiHostMsg_PPBTCPSocket_ConnectWithNetAddress::ID ||
       message.type() == PpapiHostMsg_PPBUDPSocket_Bind::ID ||
       message.type() == PpapiHostMsg_PPBTCPServerSocket_Listen::ID ||
@@ skipping 681 matching lines @@
            tcp_sockets_.find(socket_id) != tcp_sockets_.end() ||
            udp_sockets_.find(socket_id) != udp_sockets_.end() ||
            tcp_server_sockets_.find(socket_id) != tcp_server_sockets_.end());
 
   return socket_id;
 }
 
 bool PepperMessageFilter::CanUseSocketAPIs(int32 render_id) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
   if (process_type_ == PLUGIN) {
-    // Always allow socket APIs for out-process plugins.
+    // Always allow socket APIs for out-process plugins (except NACL).
     return true;
   }
 
   RenderViewHostImpl* render_view_host =
       RenderViewHostImpl::FromID(process_id_, render_id);
   if (!render_view_host)
     return false;
 
   SiteInstance* site_instance = render_view_host->GetSiteInstance();
   if (!site_instance)
@@ skipping 51 matching lines @@
     network_copy.mtu = 0;
   }
   for (NetworkMonitorIdSet::iterator it = network_monitor_ids_.begin();
        it != network_monitor_ids_.end(); ++it) {
     Send(new PpapiMsg_PPBNetworkMonitor_NetworkList(
         ppapi::API_ID_PPB_NETWORKMANAGER_PRIVATE, *it, *list_copy));
   }
 }
 
 }  // namespace content