sandbox/win/src/handle_closer.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef SANDBOX_SRC_HANDLE_CLOSER_H_
   6 #define SANDBOX_SRC_HANDLE_CLOSER_H_
   7
   8 #include <map>
   9 #include <set>
  10
  11 #include "base/basictypes.h"
  12 #include "base/strings/string16.h"
  13 #include "sandbox/win/src/interception.h"
  14 #include "sandbox/win/src/sandbox_types.h"
  15 #include "sandbox/win/src/target_process.h"
  16
  17 namespace sandbox {
  18
  19 // This is a map of handle-types to names that we need to close in the
  20 // target process. A null set means we need to close all handles of the
  21 // given type.
  22 typedef std::map<const string16, std::set<const string16> > HandleMap;
  23
  24 // Type and set of corresponding handle names to close.
  25 struct HandleListEntry {
  26   size_t record_bytes;       // Rounded to sizeof(size_t) bytes.
  27   size_t offset_to_names;    // Nul terminated strings of name_count names.
  28   size_t name_count;
  29   char16 handle_type[1];
  30 };
  31
  32 // Global parameters and a pointer to the list of entries.
  33 struct HandleCloserInfo {
  34   size_t record_bytes;       // Rounded to sizeof(size_t) bytes.
  35   size_t num_handle_types;
  36   struct HandleListEntry handle_entries[1];
  37 };
  38
  39 SANDBOX_INTERCEPT HandleCloserInfo* g_handle_closer_info;
  40
  41 // Adds handles to close after lockdown.
  42 class HandleCloser {
  43  public:
  44   HandleCloser();
  45
  46   // Adds a handle that will be closed in the target process after lockdown.
  47   // A NULL value for handle_name indicates all handles of the specified type.
  48   // An empty string for handle_name indicates the handle is unnamed.
  49   ResultCode AddHandle(const char16* handle_type, const char16* handle_name);
  50
  51   // Serializes and copies the closer table into the target process.
  52   bool InitializeTargetHandles(TargetProcess* target);
  53
  54   // Adds any interceptions that may be required due to closed system handles.
  55   bool SetupHandleInterceptions(InterceptionManager* manager);
  56
  57  private:
  58   // Calculates the memory needed to copy the serialized handles list (rounded
  59   // to the nearest machine-word size).
  60   size_t GetBufferSize();
  61
  62   // Serializes the handle list into the target process.
  63   bool SetupHandleList(void* buffer, size_t buffer_bytes);
  64
  65   HandleMap handles_to_close_;
  66
  67   DISALLOW_COPY_AND_ASSIGN(HandleCloser);
  68 };
  69
  70 // Returns the object manager's name associated with a handle
  71 bool GetHandleName(HANDLE handle, string16* handle_name);
  72
  73 }  // namespace sandbox
  74
  75 #endif  // SANDBOX_SRC_HANDLE_CLOSER_H_