The Tor Browser: security/sandbox/win/src/handle

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.

     2 // Use of this source code is governed by a BSD-style license that can be

     3 // found in the LICENSE file.

     5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_

     6 #define SANDBOX_SRC_HANDLE_CLOSER_H_

     8 #include <map>

     9 #include <set>

    11 #include "base/basictypes.h"

    12 #include "base/strings/string16.h"

    13 #include "sandbox/win/src/interception.h"

    14 #include "sandbox/win/src/sandbox_types.h"

    15 #include "sandbox/win/src/target_process.h"

    17 namespace sandbox {

    19 // This is a map of handle-types to names that we need to close in the

    20 // target process. A null set means we need to close all handles of the

    21 // given type.

    22 typedef std::map<const string16, std::set<const string16> > HandleMap;

    24 // Type and set of corresponding handle names to close.

    25 struct HandleListEntry {

    26   size_t record_bytes;       // Rounded to sizeof(size_t) bytes.

    27   size_t offset_to_names;    // Nul terminated strings of name_count names.

    28   size_t name_count;

    29   char16 handle_type[1];

    30 };

    32 // Global parameters and a pointer to the list of entries.

    33 struct HandleCloserInfo {

    34   size_t record_bytes;       // Rounded to sizeof(size_t) bytes.

    35   size_t num_handle_types;

    36   struct HandleListEntry handle_entries[1];

    37 };

    39 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info;

    41 // Adds handles to close after lockdown.

    42 class HandleCloser {

    43  public:

    44   HandleCloser();

    46   // Adds a handle that will be closed in the target process after lockdown.

    47   // A NULL value for handle_name indicates all handles of the specified type.

    48   // An empty string for handle_name indicates the handle is unnamed.

    49   ResultCode AddHandle(const char16* handle_type, const char16* handle_name);

    51   // Serializes and copies the closer table into the target process.

    52   bool InitializeTargetHandles(TargetProcess* target);

    54   // Adds any interceptions that may be required due to closed system handles.

    55   bool SetupHandleInterceptions(InterceptionManager* manager);

    57  private:

    58   // Calculates the memory needed to copy the serialized handles list (rounded

    59   // to the nearest machine-word size).

    60   size_t GetBufferSize();

    62   // Serializes the handle list into the target process.

    63   bool SetupHandleList(void* buffer, size_t buffer_bytes);

    65   HandleMap handles_to_close_;

    67   DISALLOW_COPY_AND_ASSIGN(HandleCloser);

    68 };

    70 // Returns the object manager's name associated with a handle

    71 bool GetHandleName(HANDLE handle, string16* handle_name);

    73 }  // namespace sandbox

    75 #endif  // SANDBOX_SRC_HANDLE_CLOSER_H_

The Tor Browser / file revision