1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "content/public/browser/browser_main_runner.h"
6
7 #include "base/allocator/allocator_shim.h"
8 #include "base/base_switches.h"
9 #include "base/command_line.h"
10 #include "base/debug/leak_annotations.h"
11 #include "base/debug/trace_event.h"
12 #include "base/logging.h"
13 #include "base/metrics/histogram.h"
14 #include "base/metrics/statistics_recorder.h"
15 #include "content/browser/browser_main_loop.h"
16 #include "content/browser/browser_shutdown_profile_dumper.h"
17 #include "content/browser/notification_service_impl.h"
18 #include "content/public/common/content_switches.h"
19 #include "content/public/common/main_function_params.h"
20 #include "ui/base/ime/input_method_initializer.h"
21
22 #if defined(OS_WIN)
23 #include "base/win/win_util.h"
24 #include "base/win/windows_version.h"
25 #include "net/cert/sha256_legacy_support_win.h"
26 #include "sandbox/win/src/sidestep/preamble_patcher.h"
27 #include "ui/base/win/scoped_ole_initializer.h"
28 #endif
29
30 bool g_exited_main_message_loop = false;
31
32 namespace content {
33
34 #if defined(OS_WIN)
35 namespace {
36
37 // Pointer to the original CryptVerifyCertificateSignatureEx function.
38 net::sha256_interception::CryptVerifyCertificateSignatureExFunc
39 g_real_crypt_verify_signature_stub = NULL;
40
41 // Stub function that is called whenever the Crypt32 function
42 // CryptVerifyCertificateSignatureEx is called. It just defers to net to perform
43 // the actual verification.
CryptVerifyCertificateSignatureExStub(HCRYPTPROV_LEGACY provider,DWORD encoding_type,DWORD subject_type,void * subject_data,DWORD issuer_type,void * issuer_data,DWORD flags,void * extra)44 BOOL WINAPI CryptVerifyCertificateSignatureExStub(
45 HCRYPTPROV_LEGACY provider,
46 DWORD encoding_type,
47 DWORD subject_type,
48 void* subject_data,
49 DWORD issuer_type,
50 void* issuer_data,
51 DWORD flags,
52 void* extra) {
53 return net::sha256_interception::CryptVerifyCertificateSignatureExHook(
54 g_real_crypt_verify_signature_stub, provider, encoding_type, subject_type,
55 subject_data, issuer_type, issuer_data, flags, extra);
56 }
57
58 // If necessary, install an interception
InstallSha256LegacyHooks()59 void InstallSha256LegacyHooks() {
60 #if defined(_WIN64)
61 // Interception on x64 is not supported.
62 return;
63 #else
64 if (base::win::MaybeHasSHA256Support())
65 return;
66
67 net::sha256_interception::CryptVerifyCertificateSignatureExFunc
68 cert_verify_signature_ptr = reinterpret_cast<
69 net::sha256_interception::CryptVerifyCertificateSignatureExFunc>(
70 ::GetProcAddress(::GetModuleHandle(L"crypt32.dll"),
71 "CryptVerifyCertificateSignatureEx"));
72 CHECK(cert_verify_signature_ptr);
73
74 DWORD old_protect = 0;
75 if (!::VirtualProtect(cert_verify_signature_ptr, 5, PAGE_EXECUTE_READWRITE,
76 &old_protect)) {
77 return;
78 }
79
80 g_real_crypt_verify_signature_stub =
81 reinterpret_cast<
82 net::sha256_interception::CryptVerifyCertificateSignatureExFunc>(
83 VirtualAllocEx(::GetCurrentProcess(), NULL,
84 sidestep::kMaxPreambleStubSize, MEM_COMMIT,
85 PAGE_EXECUTE_READWRITE));
86 if (g_real_crypt_verify_signature_stub == NULL) {
87 CHECK(::VirtualProtect(cert_verify_signature_ptr, 5, old_protect,
88 &old_protect));
89 return;
90 }
91
92 sidestep::SideStepError patch_result =
93 sidestep::PreamblePatcher::Patch(
94 cert_verify_signature_ptr, CryptVerifyCertificateSignatureExStub,
95 g_real_crypt_verify_signature_stub, sidestep::kMaxPreambleStubSize);
96 if (patch_result != sidestep::SIDESTEP_SUCCESS) {
97 CHECK(::VirtualFreeEx(::GetCurrentProcess(),
98 g_real_crypt_verify_signature_stub, 0,
99 MEM_RELEASE));
100 CHECK(::VirtualProtect(cert_verify_signature_ptr, 5, old_protect,
101 &old_protect));
102 return;
103 }
104
105 DWORD dummy = 0;
106 CHECK(::VirtualProtect(cert_verify_signature_ptr, 5, old_protect, &dummy));
107 CHECK(::VirtualProtect(g_real_crypt_verify_signature_stub,
108 sidestep::kMaxPreambleStubSize, old_protect,
109 &old_protect));
110 #endif // _WIN64
111 }
112
113 } // namespace
114
115 #endif // OS_WIN
116
117 class BrowserMainRunnerImpl : public BrowserMainRunner {
118 public:
BrowserMainRunnerImpl()119 BrowserMainRunnerImpl()
120 : initialization_started_(false), is_shutdown_(false) {}
121
~BrowserMainRunnerImpl()122 virtual ~BrowserMainRunnerImpl() {
123 if (initialization_started_ && !is_shutdown_)
124 Shutdown();
125 }
126
Initialize(const MainFunctionParams & parameters)127 virtual int Initialize(const MainFunctionParams& parameters) OVERRIDE {
128 TRACE_EVENT0("startup", "BrowserMainRunnerImpl::Initialize");
129 // On Android we normally initialize the browser in a series of UI thread
130 // tasks. While this is happening a second request can come from the OS or
131 // another application to start the browser. If this happens then we must
132 // not run these parts of initialization twice.
133 if (!initialization_started_) {
134 initialization_started_ = true;
135
136 #if !defined(OS_IOS)
137 if (parameters.command_line.HasSwitch(switches::kWaitForDebugger))
138 base::debug::WaitForDebugger(60, true);
139 #endif
140
141 #if defined(OS_WIN)
142 if (base::win::GetVersion() < base::win::VERSION_VISTA) {
143 // When "Extend support of advanced text services to all programs"
144 // (a.k.a. Cicero Unaware Application Support; CUAS) is enabled on
145 // Windows XP and handwriting modules shipped with Office 2003 are
146 // installed, "penjpn.dll" and "skchui.dll" will be loaded and then
147 // crash unless a user installs Office 2003 SP3. To prevent these
148 // modules from being loaded, disable TSF entirely. crbug.com/160914.
149 // TODO(yukawa): Add a high-level wrapper for this instead of calling
150 // Win32 API here directly.
151 ImmDisableTextFrameService(static_cast<DWORD>(-1));
152 }
153 InstallSha256LegacyHooks();
154 #endif // OS_WIN
155
156 base::StatisticsRecorder::Initialize();
157
158 notification_service_.reset(new NotificationServiceImpl);
159
160 #if defined(OS_WIN)
161 // Ole must be initialized before starting message pump, so that TSF
162 // (Text Services Framework) module can interact with the message pump
163 // on Windows 8 Metro mode.
164 ole_initializer_.reset(new ui::ScopedOleInitializer);
165 #endif // OS_WIN
166
167 main_loop_.reset(new BrowserMainLoop(parameters));
168
169 main_loop_->Init();
170
171 main_loop_->EarlyInitialization();
172
173 // Must happen before we try to use a message loop or display any UI.
174 if (!main_loop_->InitializeToolkit())
175 return 1;
176
177 main_loop_->MainMessageLoopStart();
178
179 // WARNING: If we get a WM_ENDSESSION, objects created on the stack here
180 // are NOT deleted. If you need something to run during WM_ENDSESSION add it
181 // to browser_shutdown::Shutdown or BrowserProcess::EndSession.
182
183 #if defined(OS_WIN) && !defined(NO_TCMALLOC)
184 // When linking shared libraries, NO_TCMALLOC is defined, and dynamic
185 // allocator selection is not supported.
186
187 // Make this call before going multithreaded, or spawning any
188 // subprocesses.
189 base::allocator::SetupSubprocessAllocator();
190 #endif
191 ui::InitializeInputMethod();
192 }
193 main_loop_->CreateStartupTasks();
194 int result_code = main_loop_->GetResultCode();
195 if (result_code > 0)
196 return result_code;
197
198 // Return -1 to indicate no early termination.
199 return -1;
200 }
201
Run()202 virtual int Run() OVERRIDE {
203 DCHECK(initialization_started_);
204 DCHECK(!is_shutdown_);
205 main_loop_->RunMainMessageLoopParts();
206 return main_loop_->GetResultCode();
207 }
208
Shutdown()209 virtual void Shutdown() OVERRIDE {
210 DCHECK(initialization_started_);
211 DCHECK(!is_shutdown_);
212 #ifdef LEAK_SANITIZER
213 // Invoke leak detection now, to avoid dealing with shutdown-only leaks.
214 // Normally this will have already happened in
215 // BroserProcessImpl::ReleaseModule(), so this call has no effect. This is
216 // only for processes which do not instantiate a BrowserProcess.
217 // If leaks are found, the process will exit here.
218 __lsan_do_leak_check();
219 #endif
220 // If startup tracing has not been finished yet, replace it's dumper
221 // with special version, which would save trace file on exit (i.e.
222 // startup tracing becomes a version of shutdown tracing).
223 scoped_ptr<BrowserShutdownProfileDumper> startup_profiler;
224 if (main_loop_->is_tracing_startup()) {
225 main_loop_->StopStartupTracingTimer();
226 if (main_loop_->startup_trace_file() !=
227 base::FilePath().AppendASCII("none")) {
228 startup_profiler.reset(
229 new BrowserShutdownProfileDumper(main_loop_->startup_trace_file()));
230 }
231 }
232
233 // The shutdown tracing got enabled in AttemptUserExit earlier, but someone
234 // needs to write the result to disc. For that a dumper needs to get created
235 // which will dump the traces to disc when it gets destroyed.
236 const base::CommandLine& command_line =
237 *base::CommandLine::ForCurrentProcess();
238 scoped_ptr<BrowserShutdownProfileDumper> shutdown_profiler;
239 if (command_line.HasSwitch(switches::kTraceShutdown)) {
240 shutdown_profiler.reset(new BrowserShutdownProfileDumper(
241 BrowserShutdownProfileDumper::GetShutdownProfileFileName()));
242 }
243
244 {
245 // The trace event has to stay between profiler creation and destruction.
246 TRACE_EVENT0("shutdown", "BrowserMainRunner");
247 g_exited_main_message_loop = true;
248
249 main_loop_->ShutdownThreadsAndCleanUp();
250
251 ui::ShutdownInputMethod();
252 #if defined(OS_WIN)
253 ole_initializer_.reset(NULL);
254 #endif
255 #if defined(OS_ANDROID)
256 // Forcefully terminates the RunLoop inside MessagePumpForUI, ensuring
257 // proper shutdown for content_browsertests. Shutdown() is not used by
258 // the actual browser.
259 base::MessageLoop::current()->QuitNow();
260 #endif
261 main_loop_.reset(NULL);
262
263 notification_service_.reset(NULL);
264
265 is_shutdown_ = true;
266 }
267 }
268
269 protected:
270 // True if we have started to initialize the runner.
271 bool initialization_started_;
272
273 // True if the runner has been shut down.
274 bool is_shutdown_;
275
276 scoped_ptr<NotificationServiceImpl> notification_service_;
277 scoped_ptr<BrowserMainLoop> main_loop_;
278 #if defined(OS_WIN)
279 scoped_ptr<ui::ScopedOleInitializer> ole_initializer_;
280 #endif
281
282 DISALLOW_COPY_AND_ASSIGN(BrowserMainRunnerImpl);
283 };
284
285 // static
Create()286 BrowserMainRunner* BrowserMainRunner::Create() {
287 return new BrowserMainRunnerImpl();
288 }
289
290 } // namespace content
291