1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #ifndef PPAPI_PROXY_PLUGIN_VAR_TRACKER_H_
6 #define PPAPI_PROXY_PLUGIN_VAR_TRACKER_H_
11 #include "base/basictypes.h"
12 #include "base/compiler_specific.h"
13 #include "base/memory/ref_counted.h"
14 #include "ppapi/c/pp_stdint.h"
15 #include "ppapi/c/pp_var.h"
16 #include "ppapi/proxy/ppapi_proxy_export.h"
17 #include "ppapi/shared_impl/var_tracker.h"
19 template<typename T
> struct DefaultSingletonTraits
;
20 struct PPP_Class_Deprecated
;
28 class PluginDispatcher
;
30 // Tracks live strings and objects in the plugin process.
31 class PPAPI_PROXY_EXPORT PluginVarTracker
: public VarTracker
{
36 // Manages tracking for receiving a VARTYPE_OBJECT from the remote side
37 // (either the plugin or the renderer) that has already had its reference
38 // count incremented on behalf of the caller.
39 PP_Var
ReceiveObjectPassRef(const PP_Var
& var
, PluginDispatcher
* dispatcher
);
41 // See the comment in var_tracker.h for more about what a tracked object is.
42 // This adds and releases the "track_with_no_reference_count" for a given
44 PP_Var
TrackObjectWithNoReference(const PP_Var
& host_var
,
45 PluginDispatcher
* dispatcher
);
46 void StopTrackingObjectWithNoReference(const PP_Var
& plugin_var
);
48 // Returns the host var for the corresponding plugin object var. The object
49 // should be a VARTYPE_OBJECT. The reference count is not affeceted.
50 PP_Var
GetHostObject(const PP_Var
& plugin_object
) const;
52 PluginDispatcher
* DispatcherForPluginObject(
53 const PP_Var
& plugin_object
) const;
55 // Like Release() but the var is identified by its host object ID (as
56 // returned by GetHostObject).
57 void ReleaseHostObject(PluginDispatcher
* dispatcher
,
58 const PP_Var
& host_object
);
60 // VarTracker public overrides.
61 void DidDeleteInstance(PP_Instance instance
) OVERRIDE
;
63 // Notification that a plugin-implemented object (PPP_Class) was created by
64 // the plugin or deallocated by WebKit over IPC.
65 void PluginImplementedObjectCreated(PP_Instance instance
,
66 const PP_Var
& created_var
,
67 const PPP_Class_Deprecated
* ppp_class
,
68 void* ppp_class_data
);
69 void PluginImplementedObjectDestroyed(void* ppp_class_data
);
71 // Returns true if there is an object implemented by the plugin with the
72 // given user_data that has not been deallocated yet. Call this when
73 // receiving a scripting call to the plugin to validate that the object
74 // receiving the call is still alive (see user_data_to_plugin_ below).
75 bool IsPluginImplementedObjectAlive(void* user_data
);
77 // Validates that the given class/user_data pair corresponds to a currently
78 // living plugin object.
79 bool ValidatePluginObjectCall(const PPP_Class_Deprecated
* ppp_class
,
83 // VarTracker protected overrides.
84 virtual int32
AddVarInternal(Var
* var
, AddVarRefMode mode
) OVERRIDE
;
85 virtual void TrackedObjectGettingOneRef(VarMap::const_iterator iter
) OVERRIDE
;
86 virtual void ObjectGettingZeroRef(VarMap::iterator iter
) OVERRIDE
;
87 virtual bool DeleteObjectInfoIfNecessary(VarMap::iterator iter
) OVERRIDE
;
88 virtual ArrayBufferVar
* CreateArrayBuffer(uint32 size_in_bytes
) OVERRIDE
;
91 friend struct DefaultSingletonTraits
<PluginVarTracker
>;
92 friend class PluginProxyTestHarness
;
94 // Represents a var as received from the host.
96 HostVar(PluginDispatcher
* d
, int32 i
);
98 bool operator<(const HostVar
& other
) const;
100 // The dispatcher that sent us this object. This is used so we know how to
101 // send back requests on this object.
102 PluginDispatcher
* dispatcher
;
104 // The object ID that the host generated to identify the object. This is
105 // unique only within that host: different hosts could give us different
106 // objects with the same ID.
107 int32 host_object_id
;
110 struct PluginImplementedVar
{
111 const PPP_Class_Deprecated
* ppp_class
;
113 // The instance that created this Var. This will be 0 if the instance has
114 // been destroyed but the object is still alive.
115 PP_Instance instance
;
117 // Represents the plugin var ID for the var corresponding to this object.
118 // If the plugin does not have a ref to the object but it's still alive
119 // (the DOM could be holding a ref keeping it alive) this will be 0.
121 // There is an obscure corner case. If the plugin returns an object to the
122 // renderer and releases all of its refs, the object will still be alive
123 // but there will be no plugin refs. It's possible for the plugin to get
124 // this same object again through the DOM, and we'll lose the correlation
125 // between plugin implemented object and car. This means we won't know when
126 // the plugin releases its last refs and may call Deallocate when the
127 // plugin is still holding a ref.
129 // However, for the plugin to be depending on holding a ref to an object
130 // that it implements that it previously released but got again through
131 // indirect means would be extremely rare, and we only allow var scripting
132 // in limited cases anyway.
133 int32 plugin_object_id
;
136 // Returns the existing var ID for the given object var, creating and
137 // assigning an ID to it if necessary. This does not affect the reference
138 // count, so in the creation case the refcount will be 0. It's assumed in
139 // this case the caller will either adjust the refcount or the
140 // track_with_no_reference_count.
141 PP_Var
GetOrCreateObjectVarID(ProxyObjectVar
* object
);
143 // Sends an addref or release message to the browser for the given object ID.
144 void SendAddRefObjectMsg(const ProxyObjectVar
& proxy_object
);
145 void SendReleaseObjectMsg(const ProxyObjectVar
& proxy_object
);
147 // Looks up the given host var. If we already know about it, returns a
148 // reference to the already-tracked object. If it doesn't creates a new one
149 // and returns it. If it's created, it's not added to the map.
150 scoped_refptr
<ProxyObjectVar
> FindOrMakePluginVarFromHostVar(
152 PluginDispatcher
* dispatcher
);
154 // Maps host vars in the host to IDs in the plugin process.
155 typedef std::map
<HostVar
, int32
> HostVarToPluginVarMap
;
156 HostVarToPluginVarMap host_var_to_plugin_var_
;
158 // Maps "user data" for plugin implemented objects (PPP_Class) that are
159 // alive to various tracking info.
161 // This is tricky because there may not actually be any vars in the plugin
162 // associated with a plugin-implemented object, so they won't all have
163 // entries in our HostVarToPluginVarMap or the base class VarTracker's map.
165 // All objects that the plugin has created using CreateObject that have not
166 // yet been Deallocate()-ed by WebKit will be in this map. When the instance
167 // that created the object goes away, we know to call Deallocate on all
168 // remaining objects for that instance so that the data backing the object
169 // that the plugin owns is not leaked. We may not receive normal Deallocate
170 // calls from WebKit because the object could be leaked (attached to the DOM
171 // and outliving the plugin instance) or WebKit could send the deallocate
172 // after the out-of-process routing for that instance was torn down.
174 // There is an additional complexity. In WebKit, objects created by the
175 // plugin aren't actually bound to the plugin instance (for example, you
176 // could attach it to the DOM or send it to another plugin instance). It's
177 // possible that we could force deallocate an object when an instance id
178 // destroyed, but then another instance could get to that object somehow
179 // (like by reading it out of the DOM). We will then have deallocated the
180 // object and can't complete the call. We do not care about this case, and
181 // the calls will just fail.
182 typedef std::map
<void*, PluginImplementedVar
>
183 UserDataToPluginImplementedVarMap
;
184 UserDataToPluginImplementedVarMap user_data_to_plugin_
;
186 DISALLOW_COPY_AND_ASSIGN(PluginVarTracker
);
192 #endif // PPAPI_PROXY_PLUGIN_VAR_TRACKER_H_