1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "content/common/handle_enumerator_win.h"
10 #include "base/command_line.h"
11 #include "base/logging.h"
12 #include "base/process.h"
13 #include "base/process_util.h"
14 #include "base/utf_string_conversions.h"
15 #include "base/win/windows_version.h"
16 #include "content/public/common/content_switches.h"
17 #include "content/public/common/result_codes.h"
18 #include "sandbox/win/src/handle_table.h"
22 typedef std::map
<const string16
, content::HandleType
> HandleTypeMap
;
24 HandleTypeMap
& MakeHandleTypeMap() {
25 HandleTypeMap
& handle_types
= *(new HandleTypeMap());
26 handle_types
[sandbox::HandleTable::kTypeProcess
] = content::ProcessHandle
;
27 handle_types
[sandbox::HandleTable::kTypeThread
] = content::ThreadHandle
;
28 handle_types
[sandbox::HandleTable::kTypeFile
] = content::FileHandle
;
29 handle_types
[sandbox::HandleTable::kTypeDirectory
] =
30 content::DirectoryHandle
;
31 handle_types
[sandbox::HandleTable::kTypeKey
] = content::KeyHandle
;
32 handle_types
[sandbox::HandleTable::kTypeWindowStation
] =
33 content::WindowStationHandle
;
34 handle_types
[sandbox::HandleTable::kTypeDesktop
] = content::DesktopHandle
;
35 handle_types
[sandbox::HandleTable::kTypeService
] = content::ServiceHandle
;
36 handle_types
[sandbox::HandleTable::kTypeMutex
] = content::MutexHandle
;
37 handle_types
[sandbox::HandleTable::kTypeSemaphore
] =
38 content::SemaphoreHandle
;
39 handle_types
[sandbox::HandleTable::kTypeEvent
] = content::EventHandle
;
40 handle_types
[sandbox::HandleTable::kTypeTimer
] = content::TimerHandle
;
41 handle_types
[sandbox::HandleTable::kTypeNamedPipe
] =
42 content::NamedPipeHandle
;
43 handle_types
[sandbox::HandleTable::kTypeJobObject
] = content::JobHandle
;
44 handle_types
[sandbox::HandleTable::kTypeFileMap
] = content::FileMapHandle
;
45 handle_types
[sandbox::HandleTable::kTypeAlpcPort
] =
46 content::AlpcPortHandle
;
55 const size_t kMaxHandleNameLength
= 1024;
57 void HandleEnumerator::EnumerateHandles() {
58 sandbox::HandleTable handles
;
59 std::string process_type
=
60 CommandLine::ForCurrentProcess()->GetSwitchValueASCII(
61 switches::kProcessType
);
62 string16 output
= ASCIIToUTF16(process_type
);
63 output
.append(ASCIIToUTF16(" process - Handles at shutdown:\n"));
64 for (sandbox::HandleTable::Iterator sys_handle
65 = handles
.HandlesForProcess(::GetCurrentProcessId());
66 sys_handle
!= handles
.end(); ++sys_handle
) {
67 HandleType current_type
= StringToHandleType(sys_handle
->Type());
68 if (!all_handles_
&& (current_type
!= ProcessHandle
&&
69 current_type
!= FileHandle
&&
70 current_type
!= DirectoryHandle
&&
71 current_type
!= KeyHandle
&&
72 current_type
!= WindowStationHandle
&&
73 current_type
!= DesktopHandle
&&
74 current_type
!= ServiceHandle
))
77 output
+= ASCIIToUTF16("[");
78 output
+= sys_handle
->Type();
79 output
+= ASCIIToUTF16("] (");
80 output
+= sys_handle
->Name();
81 output
+= ASCIIToUTF16(")\n");
82 output
+= GetAccessString(current_type
,
83 sys_handle
->handle_entry()->GrantedAccess
);
88 HandleType
StringToHandleType(const string16
& type
) {
89 static HandleTypeMap handle_types
= MakeHandleTypeMap();
90 HandleTypeMap::iterator result
= handle_types
.find(type
);
91 return result
!= handle_types
.end() ? result
->second
: OtherHandle
;
94 string16
GetAccessString(HandleType handle_type
,
97 if (access
& GENERIC_READ
)
98 output
.append(ASCIIToUTF16("\tGENERIC_READ\n"));
99 if (access
& GENERIC_WRITE
)
100 output
.append(ASCIIToUTF16("\tGENERIC_WRITE\n"));
101 if (access
& GENERIC_EXECUTE
)
102 output
.append(ASCIIToUTF16("\tGENERIC_EXECUTE\n"));
103 if (access
& GENERIC_ALL
)
104 output
.append(ASCIIToUTF16("\tGENERIC_ALL\n"));
106 output
.append(ASCIIToUTF16("\tDELETE\n"));
107 if (access
& READ_CONTROL
)
108 output
.append(ASCIIToUTF16("\tREAD_CONTROL\n"));
109 if (access
& WRITE_DAC
)
110 output
.append(ASCIIToUTF16("\tWRITE_DAC\n"));
111 if (access
& WRITE_OWNER
)
112 output
.append(ASCIIToUTF16("\tWRITE_OWNER\n"));
113 if (access
& SYNCHRONIZE
)
114 output
.append(ASCIIToUTF16("\tSYNCHRONIZE\n"));
116 switch (handle_type
) {
118 if (access
& PROCESS_CREATE_PROCESS
)
119 output
.append(ASCIIToUTF16("\tPROCESS_CREATE_PROCESS\n"));
120 if (access
& PROCESS_CREATE_THREAD
)
121 output
.append(ASCIIToUTF16("\tPROCESS_CREATE_THREAD\n"));
122 if (access
& PROCESS_DUP_HANDLE
)
123 output
.append(ASCIIToUTF16("\tPROCESS_DUP_HANDLE\n"));
124 if (access
& PROCESS_QUERY_INFORMATION
)
125 output
.append(ASCIIToUTF16("\tPROCESS_QUERY_INFORMATION\n"));
126 if (access
& PROCESS_QUERY_LIMITED_INFORMATION
)
127 output
.append(ASCIIToUTF16("\tPROCESS_QUERY_LIMITED_INFORMATION\n"));
128 if (access
& PROCESS_SET_INFORMATION
)
129 output
.append(ASCIIToUTF16("\tPROCESS_SET_INFORMATION\n"));
130 if (access
& PROCESS_SET_QUOTA
)
131 output
.append(ASCIIToUTF16("\tPROCESS_SET_QUOTA\n"));
132 if (access
& PROCESS_SUSPEND_RESUME
)
133 output
.append(ASCIIToUTF16("\tPROCESS_SUSPEND_RESUME\n"));
134 if (access
& PROCESS_TERMINATE
)
135 output
.append(ASCIIToUTF16("\tPROCESS_TERMINATE\n"));
136 if (access
& PROCESS_VM_OPERATION
)
137 output
.append(ASCIIToUTF16("\tPROCESS_VM_OPERATION\n"));
138 if (access
& PROCESS_VM_READ
)
139 output
.append(ASCIIToUTF16("\tPROCESS_VM_READ\n"));
140 if (access
& PROCESS_VM_WRITE
)
141 output
.append(ASCIIToUTF16("\tPROCESS_VM_WRITE\n"));
144 if (access
& THREAD_DIRECT_IMPERSONATION
)
145 output
.append(ASCIIToUTF16("\tTHREAD_DIRECT_IMPERSONATION\n"));
146 if (access
& THREAD_GET_CONTEXT
)
147 output
.append(ASCIIToUTF16("\tTHREAD_GET_CONTEXT\n"));
148 if (access
& THREAD_IMPERSONATE
)
149 output
.append(ASCIIToUTF16("\tTHREAD_IMPERSONATE\n"));
150 if (access
& THREAD_QUERY_INFORMATION
)
151 output
.append(ASCIIToUTF16("\tTHREAD_QUERY_INFORMATION\n"));
152 if (access
& THREAD_QUERY_LIMITED_INFORMATION
)
153 output
.append(ASCIIToUTF16("\tTHREAD_QUERY_LIMITED_INFORMATION\n"));
154 if (access
& THREAD_SET_CONTEXT
)
155 output
.append(ASCIIToUTF16("\tTHREAD_SET_CONTEXT\n"));
156 if (access
& THREAD_SET_INFORMATION
)
157 output
.append(ASCIIToUTF16("\tTHREAD_SET_INFORMATION\n"));
158 if (access
& THREAD_SET_LIMITED_INFORMATION
)
159 output
.append(ASCIIToUTF16("\tTHREAD_SET_LIMITED_INFORMATION\n"));
160 if (access
& THREAD_SET_THREAD_TOKEN
)
161 output
.append(ASCIIToUTF16("\tTHREAD_SET_THREAD_TOKEN\n"));
162 if (access
& THREAD_SUSPEND_RESUME
)
163 output
.append(ASCIIToUTF16("\tTHREAD_SUSPEND_RESUME\n"));
164 if (access
& THREAD_TERMINATE
)
165 output
.append(ASCIIToUTF16("\tTHREAD_TERMINATE\n"));
168 if (access
& FILE_APPEND_DATA
)
169 output
.append(ASCIIToUTF16("\tFILE_APPEND_DATA\n"));
170 if (access
& FILE_EXECUTE
)
171 output
.append(ASCIIToUTF16("\tFILE_EXECUTE\n"));
172 if (access
& FILE_READ_ATTRIBUTES
)
173 output
.append(ASCIIToUTF16("\tFILE_READ_ATTRIBUTES\n"));
174 if (access
& FILE_READ_DATA
)
175 output
.append(ASCIIToUTF16("\tFILE_READ_DATA\n"));
176 if (access
& FILE_READ_EA
)
177 output
.append(ASCIIToUTF16("\tFILE_READ_EA\n"));
178 if (access
& FILE_WRITE_ATTRIBUTES
)
179 output
.append(ASCIIToUTF16("\tFILE_WRITE_ATTRIBUTES\n"));
180 if (access
& FILE_WRITE_DATA
)
181 output
.append(ASCIIToUTF16("\tFILE_WRITE_DATA\n"));
182 if (access
& FILE_WRITE_EA
)
183 output
.append(ASCIIToUTF16("\tFILE_WRITE_EA\n"));
184 if (access
& FILE_WRITE_EA
)
185 output
.append(ASCIIToUTF16("\tFILE_WRITE_EA\n"));
187 case DirectoryHandle
:
188 if (access
& FILE_ADD_FILE
)
189 output
.append(ASCIIToUTF16("\tFILE_ADD_FILE\n"));
190 if (access
& FILE_ADD_SUBDIRECTORY
)
191 output
.append(ASCIIToUTF16("\tFILE_ADD_SUBDIRECTORY\n"));
192 if (access
& FILE_APPEND_DATA
)
193 output
.append(ASCIIToUTF16("\tFILE_APPEND_DATA\n"));
194 if (access
& FILE_DELETE_CHILD
)
195 output
.append(ASCIIToUTF16("\tFILE_DELETE_CHILD\n"));
196 if (access
& FILE_LIST_DIRECTORY
)
197 output
.append(ASCIIToUTF16("\tFILE_LIST_DIRECTORY\n"));
198 if (access
& FILE_READ_DATA
)
199 output
.append(ASCIIToUTF16("\tFILE_READ_DATA\n"));
200 if (access
& FILE_TRAVERSE
)
201 output
.append(ASCIIToUTF16("\tFILE_TRAVERSE\n"));
202 if (access
& FILE_WRITE_DATA
)
203 output
.append(ASCIIToUTF16("\tFILE_WRITE_DATA\n"));
206 if (access
& KEY_CREATE_LINK
)
207 output
.append(ASCIIToUTF16("\tKEY_CREATE_LINK\n"));
208 if (access
& KEY_CREATE_SUB_KEY
)
209 output
.append(ASCIIToUTF16("\tKEY_CREATE_SUB_KEY\n"));
210 if (access
& KEY_ENUMERATE_SUB_KEYS
)
211 output
.append(ASCIIToUTF16("\tKEY_ENUMERATE_SUB_KEYS\n"));
212 if (access
& KEY_EXECUTE
)
213 output
.append(ASCIIToUTF16("\tKEY_EXECUTE\n"));
214 if (access
& KEY_NOTIFY
)
215 output
.append(ASCIIToUTF16("\tKEY_NOTIFY\n"));
216 if (access
& KEY_QUERY_VALUE
)
217 output
.append(ASCIIToUTF16("\tKEY_QUERY_VALUE\n"));
218 if (access
& KEY_READ
)
219 output
.append(ASCIIToUTF16("\tKEY_READ\n"));
220 if (access
& KEY_SET_VALUE
)
221 output
.append(ASCIIToUTF16("\tKEY_SET_VALUE\n"));
222 if (access
& KEY_WOW64_32KEY
)
223 output
.append(ASCIIToUTF16("\tKEY_WOW64_32KEY\n"));
224 if (access
& KEY_WOW64_64KEY
)
225 output
.append(ASCIIToUTF16("\tKEY_WOW64_64KEY\n"));
227 case WindowStationHandle
:
228 if (access
& WINSTA_ACCESSCLIPBOARD
)
229 output
.append(ASCIIToUTF16("\tWINSTA_ACCESSCLIPBOARD\n"));
230 if (access
& WINSTA_ACCESSGLOBALATOMS
)
231 output
.append(ASCIIToUTF16("\tWINSTA_ACCESSGLOBALATOMS\n"));
232 if (access
& WINSTA_CREATEDESKTOP
)
233 output
.append(ASCIIToUTF16("\tWINSTA_CREATEDESKTOP\n"));
234 if (access
& WINSTA_ENUMDESKTOPS
)
235 output
.append(ASCIIToUTF16("\tWINSTA_ENUMDESKTOPS\n"));
236 if (access
& WINSTA_ENUMERATE
)
237 output
.append(ASCIIToUTF16("\tWINSTA_ENUMERATE\n"));
238 if (access
& WINSTA_EXITWINDOWS
)
239 output
.append(ASCIIToUTF16("\tWINSTA_EXITWINDOWS\n"));
240 if (access
& WINSTA_READATTRIBUTES
)
241 output
.append(ASCIIToUTF16("\tWINSTA_READATTRIBUTES\n"));
242 if (access
& WINSTA_READSCREEN
)
243 output
.append(ASCIIToUTF16("\tWINSTA_READSCREEN\n"));
244 if (access
& WINSTA_WRITEATTRIBUTES
)
245 output
.append(ASCIIToUTF16("\tWINSTA_WRITEATTRIBUTES\n"));
248 if (access
& DESKTOP_CREATEMENU
)
249 output
.append(ASCIIToUTF16("\tDESKTOP_CREATEMENU\n"));
250 if (access
& DESKTOP_CREATEWINDOW
)
251 output
.append(ASCIIToUTF16("\tDESKTOP_CREATEWINDOW\n"));
252 if (access
& DESKTOP_ENUMERATE
)
253 output
.append(ASCIIToUTF16("\tDESKTOP_ENUMERATE\n"));
254 if (access
& DESKTOP_HOOKCONTROL
)
255 output
.append(ASCIIToUTF16("\tDESKTOP_HOOKCONTROL\n"));
256 if (access
& DESKTOP_JOURNALPLAYBACK
)
257 output
.append(ASCIIToUTF16("\tDESKTOP_JOURNALPLAYBACK\n"));
258 if (access
& DESKTOP_JOURNALRECORD
)
259 output
.append(ASCIIToUTF16("\tDESKTOP_JOURNALRECORD\n"));
260 if (access
& DESKTOP_READOBJECTS
)
261 output
.append(ASCIIToUTF16("\tDESKTOP_READOBJECTS\n"));
262 if (access
& DESKTOP_SWITCHDESKTOP
)
263 output
.append(ASCIIToUTF16("\tDESKTOP_SWITCHDESKTOP\n"));
264 if (access
& DESKTOP_WRITEOBJECTS
)
265 output
.append(ASCIIToUTF16("\tDESKTOP_WRITEOBJECTS\n"));
268 if (access
& SC_MANAGER_CREATE_SERVICE
)
269 output
.append(ASCIIToUTF16("\tSC_MANAGER_CREATE_SERVICE\n"));
270 if (access
& SC_MANAGER_CONNECT
)
271 output
.append(ASCIIToUTF16("\tSC_MANAGER_CONNECT\n"));
272 if (access
& SC_MANAGER_ENUMERATE_SERVICE
)
273 output
.append(ASCIIToUTF16("\tSC_MANAGER_ENUMERATE_SERVICE\n"));
274 if (access
& SC_MANAGER_LOCK
)
275 output
.append(ASCIIToUTF16("\tSC_MANAGER_LOCK\n"));
276 if (access
& SC_MANAGER_MODIFY_BOOT_CONFIG
)
277 output
.append(ASCIIToUTF16("\tSC_MANAGER_MODIFY_BOOT_CONFIG\n"));
278 if (access
& SC_MANAGER_QUERY_LOCK_STATUS
)
279 output
.append(ASCIIToUTF16("\tSC_MANAGER_QUERY_LOCK_STATUS\n"));
282 if (access
& EVENT_MODIFY_STATE
)
283 output
.append(ASCIIToUTF16("\tEVENT_MODIFY_STATE\n"));
286 if (access
& MUTEX_MODIFY_STATE
)
287 output
.append(ASCIIToUTF16("\tMUTEX_MODIFY_STATE\n"));
289 case SemaphoreHandle
:
290 if (access
& SEMAPHORE_MODIFY_STATE
)
291 output
.append(ASCIIToUTF16("\tSEMAPHORE_MODIFY_STATE\n"));
294 if (access
& TIMER_MODIFY_STATE
)
295 output
.append(ASCIIToUTF16("\tTIMER_MODIFY_STATE\n"));
296 if (access
& TIMER_QUERY_STATE
)
297 output
.append(ASCIIToUTF16("\tTIMER_QUERY_STATE\n"));
299 case NamedPipeHandle
:
300 if (access
& PIPE_ACCESS_INBOUND
)
301 output
.append(ASCIIToUTF16("\tPIPE_ACCESS_INBOUND\n"));
302 if (access
& PIPE_ACCESS_OUTBOUND
)
303 output
.append(ASCIIToUTF16("\tPIPE_ACCESS_OUTBOUND\n"));
306 if (access
& JOB_OBJECT_ASSIGN_PROCESS
)
307 output
.append(ASCIIToUTF16("\tJOB_OBJECT_ASSIGN_PROCESS\n"));
308 if (access
& JOB_OBJECT_QUERY
)
309 output
.append(ASCIIToUTF16("\tJOB_OBJECT_QUERY\n"));
310 if (access
& JOB_OBJECT_SET_ATTRIBUTES
)
311 output
.append(ASCIIToUTF16("\tJOB_OBJECT_SET_ATTRIBUTES\n"));
312 if (access
& JOB_OBJECT_SET_SECURITY_ATTRIBUTES
)
313 output
.append(ASCIIToUTF16("\tJOB_OBJECT_SET_SECURITY_ATTRIBUTES\n"));
314 if (access
& JOB_OBJECT_TERMINATE
)
315 output
.append(ASCIIToUTF16("\tJOB_OBJECT_TERMINATE\n"));
318 if (access
& FILE_MAP_EXECUTE
)
319 output
.append(ASCIIToUTF16("\tFILE_MAP_EXECUTE\n"));
320 if (access
& FILE_MAP_READ
)
321 output
.append(ASCIIToUTF16("\tFILE_MAP_READ\n"));
322 if (access
& FILE_MAP_WRITE
)
323 output
.append(ASCIIToUTF16("\tFILE_MAP_WRITE\n"));
329 } // namespace content