1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at https://mozilla.org/MPL/2.0/. */
#include "RemoteSandboxBrokerChild.h"
#include "chrome/common/ipc_channel.h"
#include "mozilla/ipc/CrashReporterClient.h"
#include "nsDebugImpl.h"
#include "mozilla/ipc/CrashReporterClient.h"
#include "RemoteSandboxBrokerProcessChild.h"
using namespace mozilla::ipc;
namespace mozilla {
RemoteSandboxBrokerChild::RemoteSandboxBrokerChild() {
nsDebugImpl::SetMultiprocessMode("RemoteSandboxBroker");
}
RemoteSandboxBrokerChild::~RemoteSandboxBrokerChild() {}
bool RemoteSandboxBrokerChild::Init(mozilla::ipc::UntypedEndpoint&& aEndpoint) {
if (NS_WARN_IF(!aEndpoint.Bind(this))) {
return false;
}
CrashReporterClient::InitSingleton(this);
return true;
}
void RemoteSandboxBrokerChild::ActorDestroy(ActorDestroyReason aWhy) {
if (AbnormalShutdown == aWhy) {
NS_WARNING("Abnormal shutdown of GMP process!");
ipc::ProcessChild::QuickExit();
}
CrashReporterClient::DestroySingleton();
XRE_ShutdownChildProcess();
}
mozilla::ipc::IPCResult RemoteSandboxBrokerChild::RecvLaunchApp(
LaunchParameters&& aParams, bool* aOutOk, uint64_t* aOutHandle) {
auto towstring = [](const nsString& s) {
return std::wstring(s.get(), s.Length());
};
base::EnvironmentMap envmap;
for (const EnvVar& env : aParams.env()) {
envmap[towstring(env.name())] = towstring(env.value());
}
// We need to add our parent as a target peer, so that the sandboxed child can
// duplicate handles to it for crash reporting. AddTargetPeer duplicates the
// handle, so we use a ScopedProcessHandle to automatically close ours.
ipc::ScopedProcessHandle parentProcHandle;
if (!base::OpenProcessHandle(OtherPid(), &parentProcHandle.rwget())) {
*aOutOk = false;
return IPC_OK();
}
mSandboxBroker.AddTargetPeer(parentProcHandle);
if (!mSandboxBroker.SetSecurityLevelForGMPlugin(
AbstractSandboxBroker::SandboxLevel(aParams.sandboxLevel()),
/* aIsRemoteLaunch */ true)) {
*aOutOk = false;
return IPC_OK();
}
for (const auto& path : aParams.allowedReadFiles()) {
if (!mSandboxBroker.AllowReadFile(path.get())) {
*aOutOk = false;
return IPC_OK();
}
}
for (const auto& handle : aParams.shareHandles()) {
mSandboxBroker.AddHandleToShare(HANDLE(handle));
}
HANDLE p;
mozilla::Result<mozilla::Ok, LaunchError> err =
mSandboxBroker.LaunchApp(aParams.path().get(), aParams.args().get(),
envmap, GeckoProcessType(aParams.processType()),
aParams.enableLogging(), nullptr, (void**)&p);
*aOutOk = err.isOk();
if (*aOutOk) {
*aOutHandle = uint64_t(p);
}
for (const auto& handle : aParams.shareHandles()) {
CloseHandle(HANDLE(handle));
}
return IPC_OK();
}
} // namespace mozilla
|
