OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "base/stringprintf.h" | |
6 #include "sandbox/src/handle_policy.h" | |
7 #include "sandbox/src/nt_internals.h" | |
8 #include "sandbox/src/sandbox.h" | |
9 #include "sandbox/src/sandbox_factory.h" | |
10 #include "sandbox/src/sandbox_policy.h" | |
11 #include "sandbox/src/win_utils.h" | |
12 #include "sandbox/tests/common/controller.h" | |
13 #include "testing/gtest/include/gtest/gtest.h" | |
14 | |
15 namespace sandbox { | |
16 | |
17 // Just waits for the supplied number of milliseconds. | |
18 SBOX_TESTS_COMMAND int Handle_WaitProcess(int argc, wchar_t **argv) { | |
19 if (argc != 1) | |
20 return SBOX_TEST_FAILED_TO_EXECUTE_COMMAND; | |
21 | |
22 ::Sleep(::wcstoul(argv[0], NULL, 10)); | |
23 return SBOX_TEST_TIMED_OUT; | |
24 } | |
25 | |
26 // Attempts to duplicate an event handle into the target process. | |
27 SBOX_TESTS_COMMAND int Handle_DuplicateEvent(int argc, wchar_t **argv) { | |
28 if (argc != 1) | |
29 return SBOX_TEST_FAILED_TO_EXECUTE_COMMAND; | |
30 | |
31 // Create a test event to use as a handle. | |
32 base::win::ScopedHandle test_event; | |
33 test_event.Set(::CreateEvent(NULL, TRUE, TRUE, NULL)); | |
34 if (!test_event.IsValid()) | |
35 return SBOX_TEST_FIRST_ERROR; | |
36 | |
37 // Get the target process ID. | |
38 DWORD target_process_id = ::wcstoul(argv[0], NULL, 10); | |
39 | |
40 HANDLE handle = NULL; | |
41 ResultCode result = SandboxFactory::GetTargetServices()->DuplicateHandle( | |
42 test_event, target_process_id, &handle, 0, DUPLICATE_SAME_ACCESS); | |
43 | |
44 return (result == SBOX_ALL_OK) ? SBOX_TEST_SUCCEEDED : SBOX_TEST_DENIED; | |
45 } | |
46 | |
47 // Tests that duplicating an object works only when the policy allows it. | |
48 TEST(HandlePolicyTest, DuplicateHandle) { | |
49 TestRunner target; | |
50 TestRunner runner; | |
51 | |
52 // Kick off an asynchronous target process for testing. | |
53 target.SetAsynchronous(true); | |
54 EXPECT_EQ(SBOX_TEST_SUCCEEDED, target.RunTest(L"Handle_WaitProcess 30000")); | |
55 | |
56 // First test that we fail to open the event. | |
57 std::wstring cmd_line = base::StringPrintf(L"Handle_DuplicateEvent %d", | |
58 target.process_id()); | |
59 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(cmd_line.c_str())); | |
60 | |
61 // Now successfully open the event after adding a duplicate handle rule. | |
62 EXPECT_TRUE(runner.AddRule(TargetPolicy::SUBSYS_HANDLES, | |
63 TargetPolicy::HANDLES_DUP_ANY, | |
64 L"Event")); | |
65 EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(cmd_line.c_str())); | |
66 } | |
67 | |
68 } // namespace sandbox | |
69 | |
OLD | NEW |