1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "components/nacl/browser/nacl_broker_host_win.h"
6
7 #include "base/base_switches.h"
8 #include "base/command_line.h"
9 #include "base/path_service.h"
10 #include "components/nacl/browser/nacl_broker_service_win.h"
11 #include "components/nacl/browser/nacl_browser.h"
12 #include "components/nacl/common/nacl_cmd_line.h"
13 #include "components/nacl/common/nacl_messages.h"
14 #include "components/nacl/common/nacl_process_type.h"
15 #include "components/nacl/common/nacl_switches.h"
16 #include "content/public/browser/browser_child_process_host.h"
17 #include "content/public/browser/child_process_data.h"
18 #include "content/public/common/child_process_host.h"
19 #include "content/public/common/content_switches.h"
20 #include "content/public/common/sandboxed_process_launcher_delegate.h"
21 #include "ipc/ipc_switches.h"
22
23 namespace {
24 // NOTE: changes to this class need to be reviewed by the security team.
25 class NaClBrokerSandboxedProcessLauncherDelegate
26 : public content::SandboxedProcessLauncherDelegate {
27 public:
NaClBrokerSandboxedProcessLauncherDelegate()28 NaClBrokerSandboxedProcessLauncherDelegate() {}
~NaClBrokerSandboxedProcessLauncherDelegate()29 virtual ~NaClBrokerSandboxedProcessLauncherDelegate() {}
30
ShouldSandbox()31 virtual bool ShouldSandbox() OVERRIDE {
32 return false;
33 }
34
35 private:
36 DISALLOW_COPY_AND_ASSIGN(NaClBrokerSandboxedProcessLauncherDelegate);
37 };
38 } // namespace
39
40 namespace nacl {
41
NaClBrokerHost()42 NaClBrokerHost::NaClBrokerHost() : is_terminating_(false) {
43 process_.reset(content::BrowserChildProcessHost::Create(
44 PROCESS_TYPE_NACL_BROKER, this));
45 }
46
~NaClBrokerHost()47 NaClBrokerHost::~NaClBrokerHost() {
48 }
49
Init()50 bool NaClBrokerHost::Init() {
51 // Create the channel that will be used for communicating with the broker.
52 std::string channel_id = process_->GetHost()->CreateChannel();
53 if (channel_id.empty())
54 return false;
55
56 // Create the path to the nacl broker/loader executable.
57 base::FilePath nacl_path;
58 if (!NaClBrowser::GetInstance()->GetNaCl64ExePath(&nacl_path))
59 return false;
60
61 CommandLine* cmd_line = new CommandLine(nacl_path);
62 CopyNaClCommandLineArguments(cmd_line);
63
64 cmd_line->AppendSwitchASCII(switches::kProcessType,
65 switches::kNaClBrokerProcess);
66 cmd_line->AppendSwitchASCII(switches::kProcessChannelID, channel_id);
67 if (NaClBrowser::GetDelegate()->DialogsAreSuppressed())
68 cmd_line->AppendSwitch(switches::kNoErrorDialogs);
69
70 process_->Launch(new NaClBrokerSandboxedProcessLauncherDelegate,
71 cmd_line);
72 return true;
73 }
74
OnMessageReceived(const IPC::Message & msg)75 bool NaClBrokerHost::OnMessageReceived(const IPC::Message& msg) {
76 bool handled = true;
77 IPC_BEGIN_MESSAGE_MAP(NaClBrokerHost, msg)
78 IPC_MESSAGE_HANDLER(NaClProcessMsg_LoaderLaunched, OnLoaderLaunched)
79 IPC_MESSAGE_HANDLER(NaClProcessMsg_DebugExceptionHandlerLaunched,
80 OnDebugExceptionHandlerLaunched)
81 IPC_MESSAGE_UNHANDLED(handled = false)
82 IPC_END_MESSAGE_MAP()
83 return handled;
84 }
85
LaunchLoader(const std::string & loader_channel_id)86 bool NaClBrokerHost::LaunchLoader(const std::string& loader_channel_id) {
87 return process_->Send(
88 new NaClProcessMsg_LaunchLoaderThroughBroker(loader_channel_id));
89 }
90
OnLoaderLaunched(const std::string & loader_channel_id,base::ProcessHandle handle)91 void NaClBrokerHost::OnLoaderLaunched(const std::string& loader_channel_id,
92 base::ProcessHandle handle) {
93 NaClBrokerService::GetInstance()->OnLoaderLaunched(loader_channel_id, handle);
94 }
95
LaunchDebugExceptionHandler(int32 pid,base::ProcessHandle process_handle,const std::string & startup_info)96 bool NaClBrokerHost::LaunchDebugExceptionHandler(
97 int32 pid, base::ProcessHandle process_handle,
98 const std::string& startup_info) {
99 base::ProcessHandle broker_process = process_->GetData().handle;
100 base::ProcessHandle handle_in_broker_process;
101 if (!DuplicateHandle(::GetCurrentProcess(), process_handle,
102 broker_process, &handle_in_broker_process,
103 0, /* bInheritHandle= */ FALSE, DUPLICATE_SAME_ACCESS))
104 return false;
105 return process_->Send(new NaClProcessMsg_LaunchDebugExceptionHandler(
106 pid, handle_in_broker_process, startup_info));
107 }
108
OnDebugExceptionHandlerLaunched(int32 pid,bool success)109 void NaClBrokerHost::OnDebugExceptionHandlerLaunched(int32 pid, bool success) {
110 NaClBrokerService::GetInstance()->OnDebugExceptionHandlerLaunched(pid,
111 success);
112 }
113
StopBroker()114 void NaClBrokerHost::StopBroker() {
115 is_terminating_ = true;
116 process_->Send(new NaClProcessMsg_StopBroker());
117 }
118
119 } // namespace nacl
120