1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 // This is the browser side of the resource dispatcher, it receives requests
6 // from the child process (i.e. [Renderer, Plugin, Worker]ProcessHost), and
7 // dispatches them to URLRequests. It then forwards the messages from the
8 // URLRequests back to the correct process for handling.
10 // See http://dev.chromium.org/developers/design-documents/multi-process-resource-loading
12 #ifndef CONTENT_BROWSER_LOADER_RESOURCE_DISPATCHER_HOST_IMPL_H_
13 #define CONTENT_BROWSER_LOADER_RESOURCE_DISPATCHER_HOST_IMPL_H_
20 #include "base/basictypes.h"
21 #include "base/gtest_prod_util.h"
22 #include "base/memory/linked_ptr.h"
23 #include "base/memory/scoped_ptr.h"
24 #include "base/observer_list.h"
25 #include "base/time/time.h"
26 #include "base/timer/timer.h"
27 #include "content/browser/download/download_resource_handler.h"
28 #include "content/browser/loader/global_routing_id.h"
29 #include "content/browser/loader/resource_loader.h"
30 #include "content/browser/loader/resource_loader_delegate.h"
31 #include "content/browser/loader/resource_scheduler.h"
32 #include "content/common/content_export.h"
33 #include "content/common/resource_request_body.h"
34 #include "content/public/browser/child_process_data.h"
35 #include "content/public/browser/download_item.h"
36 #include "content/public/browser/download_url_parameters.h"
37 #include "content/public/browser/global_request_id.h"
38 #include "content/public/browser/notification_types.h"
39 #include "content/public/browser/resource_dispatcher_host.h"
40 #include "content/public/common/resource_type.h"
41 #include "ipc/ipc_message.h"
42 #include "net/cookies/canonical_cookie.h"
43 #include "net/url_request/url_request.h"
45 class ResourceHandler
;
46 struct ResourceHostMsg_Request
;
49 class URLRequestJobFactory
;
53 class ShareableFileReference
;
57 class AppCacheService
;
58 class NavigationURLLoaderImplCore
;
59 class ResourceContext
;
60 class ResourceDispatcherHostDelegate
;
61 class ResourceMessageDelegate
;
62 class ResourceMessageFilter
;
63 class ResourceRequestInfoImpl
;
64 class SaveFileManager
;
65 class WebContentsImpl
;
66 struct CommonNavigationParams
;
67 struct DownloadSaveInfo
;
68 struct NavigationRequestInfo
;
71 class CONTENT_EXPORT ResourceDispatcherHostImpl
72 : public ResourceDispatcherHost
,
73 public ResourceLoaderDelegate
{
75 ResourceDispatcherHostImpl();
76 ~ResourceDispatcherHostImpl() override
;
78 // Returns the current ResourceDispatcherHostImpl. May return NULL if it
79 // hasn't been created yet.
80 static ResourceDispatcherHostImpl
* Get();
82 // ResourceDispatcherHost implementation:
83 void SetDelegate(ResourceDispatcherHostDelegate
* delegate
) override
;
84 void SetAllowCrossOriginAuthPrompt(bool value
) override
;
85 DownloadInterruptReason
BeginDownload(
86 scoped_ptr
<net::URLRequest
> request
,
87 const Referrer
& referrer
,
88 bool is_content_initiated
,
89 ResourceContext
* context
,
93 bool do_not_prompt_for_login
,
94 scoped_ptr
<DownloadSaveInfo
> save_info
,
96 const DownloadStartedCallback
& started_callback
) override
;
97 void ClearLoginDelegateForRequest(net::URLRequest
* request
) override
;
98 void BlockRequestsForRoute(int child_id
, int route_id
) override
;
99 void ResumeBlockedRequestsForRoute(int child_id
, int route_id
) override
;
101 // Puts the resource dispatcher host in an inactive state (unable to begin
102 // new requests). Cancels all pending requests.
105 // Notify the ResourceDispatcherHostImpl of a new resource context.
106 void AddResourceContext(ResourceContext
* context
);
108 // Notify the ResourceDispatcherHostImpl of a resource context destruction.
109 void RemoveResourceContext(ResourceContext
* context
);
111 // Force cancels any pending requests for the given |context|. This is
112 // necessary to ensure that before |context| goes away, all requests
114 void CancelRequestsForContext(ResourceContext
* context
);
116 // Returns true if the message was a resource message that was processed.
117 bool OnMessageReceived(const IPC::Message
& message
,
118 ResourceMessageFilter
* filter
);
120 // Initiates a save file from the browser process (as opposed to a resource
121 // request from the renderer or another child process).
122 void BeginSaveFile(const GURL
& url
,
123 const Referrer
& referrer
,
126 ResourceContext
* context
);
128 // Cancels the given request if it still exists.
129 void CancelRequest(int child_id
, int request_id
);
131 // Marks the request as "parked". This happens if a request is
132 // redirected cross-site and needs to be resumed by a new render view.
133 void MarkAsTransferredNavigation(const GlobalRequestID
& id
);
135 // Cancels a request previously marked as being transferred, for use when a
136 // navigation was cancelled.
137 void CancelTransferringNavigation(const GlobalRequestID
& id
);
139 // Resumes the request without transferring it to a new render view.
140 void ResumeDeferredNavigation(const GlobalRequestID
& id
);
142 // Returns the number of pending requests. This is designed for the unittests
143 int pending_requests() const {
144 return static_cast<int>(pending_loaders_
.size());
147 // Intended for unit-tests only. Overrides the outstanding requests bound.
148 void set_max_outstanding_requests_cost_per_process(int limit
) {
149 max_outstanding_requests_cost_per_process_
= limit
;
151 void set_max_num_in_flight_requests_per_process(int limit
) {
152 max_num_in_flight_requests_per_process_
= limit
;
154 void set_max_num_in_flight_requests(int limit
) {
155 max_num_in_flight_requests_
= limit
;
158 // The average private bytes increase of the browser for each new pending
159 // request. Experimentally obtained.
160 static const int kAvgBytesPerOutstandingRequest
= 4400;
162 SaveFileManager
* save_file_manager() const {
163 return save_file_manager_
.get();
166 // Called when a RenderViewHost is created.
167 void OnRenderViewHostCreated(int child_id
,
172 // Called when a RenderViewHost is deleted.
173 void OnRenderViewHostDeleted(int child_id
, int route_id
);
175 // Called when a RenderViewHost starts or stops loading.
176 void OnRenderViewHostSetIsLoading(int child_id
,
180 // Called when a RenderViewHost is hidden.
181 void OnRenderViewHostWasHidden(int child_id
, int route_id
);
183 // Called when a RenderViewHost is shown.
184 void OnRenderViewHostWasShown(int child_id
, int route_id
);
186 // Called when an AudioRenderHost starts or stops playing.
187 void OnAudioRenderHostStreamStateChanged(int child_id
,
191 // Force cancels any pending requests for the given process.
192 void CancelRequestsForProcess(int child_id
);
194 void OnUserGesture(WebContentsImpl
* contents
);
196 // Retrieves a net::URLRequest. Must be called from the IO thread.
197 net::URLRequest
* GetURLRequest(const GlobalRequestID
& request_id
);
199 void RemovePendingRequest(int child_id
, int request_id
);
201 // Cancels any blocked request for the specified route id.
202 void CancelBlockedRequestsForRoute(int child_id
, int route_id
);
204 // Maintains a collection of temp files created in support of
205 // the download_to_file capability. Used to grant access to the
206 // child process and to defer deletion of the file until it's
208 void RegisterDownloadedTempFile(
209 int child_id
, int request_id
,
210 const base::FilePath
& file_path
);
211 void UnregisterDownloadedTempFile(int child_id
, int request_id
);
213 // Needed for the sync IPC message dispatcher macros.
214 bool Send(IPC::Message
* message
);
216 // Indicates whether third-party sub-content can pop-up HTTP basic auth
218 bool allow_cross_origin_auth_prompt();
220 ResourceDispatcherHostDelegate
* delegate() {
224 // Must be called after the ResourceRequestInfo has been created
225 // and associated with the request.
226 // |id| should be |content::DownloadItem::kInvalidId| to request automatic
227 // assignment. This is marked virtual so it can be overriden in testing.
228 virtual scoped_ptr
<ResourceHandler
> CreateResourceHandlerForDownload(
229 net::URLRequest
* request
,
230 bool is_content_initiated
,
233 scoped_ptr
<DownloadSaveInfo
> save_info
,
234 const DownloadUrlParameters::OnStartedCallback
& started_cb
);
236 // Must be called after the ResourceRequestInfo has been created
237 // and associated with the request. If |payload| is set to a non-empty value,
238 // the value will be sent to the old resource handler instead of canceling
239 // it, except on HTTP errors. This is marked virtual so it can be overriden in
241 virtual scoped_ptr
<ResourceHandler
> MaybeInterceptAsStream(
242 net::URLRequest
* request
,
243 ResourceResponse
* response
,
244 std::string
* payload
);
246 ResourceScheduler
* scheduler() { return scheduler_
.get(); }
248 // Called by a ResourceHandler when it's ready to start reading data and
249 // sending it to the renderer. Returns true if there are enough file
250 // descriptors available for the shared memory buffer. If false is returned,
251 // the request should cancel.
252 bool HasSufficientResourcesForRequest(net::URLRequest
* request
);
254 // Called by a ResourceHandler after it has finished its request and is done
255 // using its shared memory buffer. Frees up that file descriptor to be used
257 void FinishedWithResourcesForRequest(net::URLRequest
* request
);
259 // PlzNavigate: Begins a request for NavigationURLLoader. |loader| is the
260 // loader to attach to the leaf resource handler.
261 void BeginNavigationRequest(ResourceContext
* resource_context
,
262 int frame_tree_node_id
,
263 const NavigationRequestInfo
& info
,
264 NavigationURLLoaderImplCore
* loader
);
267 friend class ResourceDispatcherHostTest
;
269 FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest
,
270 TestBlockedRequestsProcessDies
);
271 FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest
,
272 CalculateApproximateMemoryCost
);
273 FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest
,
274 DetachableResourceTimesOut
);
275 FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest
,
276 TestProcessCancelDetachableTimesOut
);
278 struct OustandingRequestsStats
{
283 friend class ShutdownTask
;
284 friend class ResourceMessageDelegate
;
286 // Information about status of a ResourceLoader.
289 net::LoadStateWithParam load_state
;
290 uint64 upload_position
;
294 // Map from ProcessID+RouteID pair to the "most interesting" LoadState.
295 typedef std::map
<GlobalRoutingID
, LoadInfo
> LoadInfoMap
;
297 // ResourceLoaderDelegate implementation:
298 ResourceDispatcherHostLoginDelegate
* CreateLoginDelegate(
299 ResourceLoader
* loader
,
300 net::AuthChallengeInfo
* auth_info
) override
;
301 bool HandleExternalProtocol(ResourceLoader
* loader
, const GURL
& url
) override
;
302 void DidStartRequest(ResourceLoader
* loader
) override
;
303 void DidReceiveRedirect(ResourceLoader
* loader
, const GURL
& new_url
) override
;
304 void DidReceiveResponse(ResourceLoader
* loader
) override
;
305 void DidFinishLoading(ResourceLoader
* loader
) override
;
307 // An init helper that runs on the IO thread.
310 // A shutdown helper that runs on the IO thread.
313 // Helper function for regular and download requests.
314 void BeginRequestInternal(scoped_ptr
<net::URLRequest
> request
,
315 scoped_ptr
<ResourceHandler
> handler
);
317 void StartLoading(ResourceRequestInfoImpl
* info
,
318 const linked_ptr
<ResourceLoader
>& loader
);
320 // We keep track of how much memory each request needs and how many requests
321 // are issued by each renderer. These are known as OustandingRequestStats.
322 // Memory limits apply to all requests sent to us by the renderers. There is a
323 // limit for each renderer. File descriptor limits apply to requests that are
324 // receiving their body. These are known as in-flight requests. There is a
325 // global limit that applies for the browser process. Each render is allowed
326 // to use up to a fraction of that.
328 // Returns the OustandingRequestsStats for |info|'s renderer, or an empty
329 // struct if that renderer has no outstanding requests.
330 OustandingRequestsStats
GetOutstandingRequestsStats(
331 const ResourceRequestInfoImpl
& info
);
333 // Updates |outstanding_requests_stats_map_| with the specified |stats| for
334 // the renderer that made the request in |info|.
335 void UpdateOutstandingRequestsStats(const ResourceRequestInfoImpl
& info
,
336 const OustandingRequestsStats
& stats
);
338 // Called every time an outstanding request is created or deleted. |count|
339 // indicates whether the request is new or deleted. |count| must be 1 or -1.
340 OustandingRequestsStats
IncrementOutstandingRequestsMemory(
342 const ResourceRequestInfoImpl
& info
);
344 // Called when an in flight request allocates or releases a shared memory
345 // buffer. |count| indicates whether the request is issuing or finishing.
346 // |count| must be 1 or -1.
347 OustandingRequestsStats
IncrementOutstandingRequestsCount(
349 ResourceRequestInfoImpl
* info
);
351 // Estimate how much heap space |request| will consume to run.
352 static int CalculateApproximateMemoryCost(net::URLRequest
* request
);
354 // Force cancels any pending requests for the given route id. This method
355 // acts like CancelRequestsForProcess when route_id is -1.
356 void CancelRequestsForRoute(int child_id
, int route_id
);
358 // The list of all requests that we have pending. This list is not really
359 // optimized, and assumes that we have relatively few requests pending at once
360 // since some operations require brute-force searching of the list.
362 // It may be enhanced in the future to provide some kind of prioritization
363 // mechanism. We should also consider a hashtable or binary tree if it turns
364 // out we have a lot of things here.
365 typedef std::map
<GlobalRequestID
, linked_ptr
<ResourceLoader
> > LoaderMap
;
367 // Deletes the pending request identified by the iterator passed in.
368 // This function will invalidate the iterator passed in. Callers should
369 // not rely on this iterator being valid on return.
370 void RemovePendingLoader(const LoaderMap::iterator
& iter
);
372 // This function returns true if the LoadInfo of |a| is "more interesting"
373 // than the LoadInfo of |b|. The load that is currently sending the larger
374 // request body is considered more interesting. If neither request is
375 // sending a body (Neither request has a body, or any request that has a body
376 // is not currently sending the body), the request that is further along is
377 // considered more interesting.
379 // This takes advantage of the fact that the load states are an enumeration
380 // listed in the order in which they usually occur during the lifetime of a
381 // request, so states with larger numeric values are generally further along
382 // toward completion.
384 // For example, by this measure "tranferring data" is a more interesting state
385 // than "resolving host" because when transferring data something is being
386 // done that corresponds to changes that the user might observe, whereas
387 // waiting for a host name to resolve implies being stuck.
388 static bool LoadInfoIsMoreInteresting(const LoadInfo
& a
, const LoadInfo
& b
);
390 // Used to marshal calls to LoadStateChanged from the IO to UI threads. All
391 // are done as a single callback to avoid spamming the UI thread.
392 static void UpdateLoadInfoOnUIThread(scoped_ptr
<LoadInfoMap
> info_map
);
394 // Gets the most interesting LoadInfo for each GlobalRoutingID.
395 scoped_ptr
<LoadInfoMap
> GetLoadInfoForAllRoutes();
397 // Checks all pending requests and updates the load info if necessary.
398 void UpdateLoadInfo();
400 // Resumes or cancels (if |cancel_requests| is true) any blocked requests.
401 void ProcessBlockedRequestsForRoute(int child_id
,
403 bool cancel_requests
);
405 void OnRequestResource(int routing_id
,
407 const ResourceHostMsg_Request
& request_data
);
408 void OnSyncLoad(int request_id
,
409 const ResourceHostMsg_Request
& request_data
,
410 IPC::Message
* sync_result
);
412 // Update the ResourceRequestInfo and internal maps when a request is
413 // transferred from one process to another.
414 void UpdateRequestForTransfer(int child_id
,
417 const ResourceHostMsg_Request
& request_data
,
418 const linked_ptr
<ResourceLoader
>& loader
);
420 void BeginRequest(int request_id
,
421 const ResourceHostMsg_Request
& request_data
,
422 IPC::Message
* sync_result
, // only valid for sync
423 int route_id
); // only valid for async
425 // Creates a ResourceHandler to be used by BeginRequest() for normal resource
427 scoped_ptr
<ResourceHandler
> CreateResourceHandler(
428 net::URLRequest
* request
,
429 const ResourceHostMsg_Request
& request_data
,
430 IPC::Message
* sync_result
,
434 ResourceContext
* resource_context
);
436 // Wraps |handler| in the standard resource handlers for normal resource
437 // loading and navigation requests. This adds MimeTypeResourceHandler and
438 // ResourceThrottles.
439 scoped_ptr
<ResourceHandler
> AddStandardHandlers(
440 net::URLRequest
* request
,
441 ResourceType resource_type
,
442 ResourceContext
* resource_context
,
443 AppCacheService
* appcache_service
,
446 scoped_ptr
<ResourceHandler
> handler
);
448 void OnDataDownloadedACK(int request_id
);
449 void OnUploadProgressACK(int request_id
);
450 void OnCancelRequest(int request_id
);
451 void OnReleaseDownloadedFile(int request_id
);
453 // Creates ResourceRequestInfoImpl for a download or page save.
454 // |download| should be true if the request is a file download.
455 ResourceRequestInfoImpl
* CreateRequestInfo(
459 ResourceContext
* context
);
461 // Relationship of resource being authenticated with the top level page.
462 enum HttpAuthRelationType
{
463 HTTP_AUTH_RELATION_TOP
, // Top-level page itself
464 HTTP_AUTH_RELATION_SAME_DOMAIN
, // Sub-content from same domain
465 HTTP_AUTH_RELATION_BLOCKED_CROSS
, // Blocked Sub-content from cross domain
466 HTTP_AUTH_RELATION_ALLOWED_CROSS
, // Allowed Sub-content per command line
467 HTTP_AUTH_RELATION_LAST
470 HttpAuthRelationType
HttpAuthRelationTypeOf(const GURL
& request_url
,
471 const GURL
& first_party
);
473 // Returns whether the URLRequest identified by |transferred_request_id| is
474 // currently in the process of being transferred to a different renderer.
475 // This happens if a request is redirected cross-site and needs to be resumed
476 // by a new render view.
477 bool IsTransferredNavigation(
478 const GlobalRequestID
& transferred_request_id
) const;
480 ResourceLoader
* GetLoader(const GlobalRequestID
& id
) const;
481 ResourceLoader
* GetLoader(int child_id
, int request_id
) const;
483 // Registers |delegate| to receive resource IPC messages targeted to the
485 void RegisterResourceMessageDelegate(const GlobalRequestID
& id
,
486 ResourceMessageDelegate
* delegate
);
487 void UnregisterResourceMessageDelegate(const GlobalRequestID
& id
,
488 ResourceMessageDelegate
* delegate
);
490 int BuildLoadFlagsForRequest(const ResourceHostMsg_Request
& request_data
,
494 LoaderMap pending_loaders_
;
496 // Collection of temp files downloaded for child processes via
497 // the download_to_file mechanism. We avoid deleting them until
498 // the client no longer needs them.
499 typedef std::map
<int, scoped_refptr
<storage::ShareableFileReference
> >
500 DeletableFilesMap
; // key is request id
501 typedef std::map
<int, DeletableFilesMap
>
502 RegisteredTempFiles
; // key is child process id
503 RegisteredTempFiles registered_temp_files_
;
505 // A timer that periodically calls UpdateLoadInfo while pending_loaders_ is
506 // not empty and at least one RenderViewHost is loading.
507 scoped_ptr
<base::RepeatingTimer
<ResourceDispatcherHostImpl
> >
508 update_load_states_timer_
;
510 // We own the save file manager.
511 scoped_refptr
<SaveFileManager
> save_file_manager_
;
513 // Request ID for browser initiated requests. request_ids generated by
514 // child processes are counted up from 0, while browser created requests
515 // start at -2 and go down from there. (We need to start at -2 because -1 is
516 // used as a special value all over the resource_dispatcher_host for
517 // uninitialized variables.) This way, we no longer have the unlikely (but
518 // observed in the real world!) event where we have two requests with the same
522 // True if the resource dispatcher host has been shut down.
525 typedef std::vector
<linked_ptr
<ResourceLoader
> > BlockedLoadersList
;
526 typedef std::map
<GlobalRoutingID
, BlockedLoadersList
*> BlockedLoadersMap
;
527 BlockedLoadersMap blocked_loaders_map_
;
529 // Maps the child_ids to the approximate number of bytes
530 // being used to service its resource requests. No entry implies 0 cost.
531 typedef std::map
<int, OustandingRequestsStats
> OutstandingRequestsStatsMap
;
532 OutstandingRequestsStatsMap outstanding_requests_stats_map_
;
534 // |num_in_flight_requests_| is the total number of requests currently issued
535 // summed across all renderers.
536 int num_in_flight_requests_
;
538 // |max_num_in_flight_requests_| is the upper bound on how many requests
539 // can be in flight at once. It's based on the maximum number of file
540 // descriptors open per process. We need a global limit for the browser
542 int max_num_in_flight_requests_
;
544 // |max_num_in_flight_requests_| is the upper bound on how many requests
545 // can be issued at once. It's based on the maximum number of file
546 // descriptors open per process. We need a per-renderer limit so that no
547 // single renderer can hog the browser's limit.
548 int max_num_in_flight_requests_per_process_
;
550 // |max_outstanding_requests_cost_per_process_| is the upper bound on how
551 // many outstanding requests can be issued per child process host.
552 // The constraint is expressed in terms of bytes (where the cost of
553 // individual requests is given by CalculateApproximateMemoryCost).
554 // The total number of outstanding requests is roughly:
555 // (max_outstanding_requests_cost_per_process_ /
556 // kAvgBytesPerOutstandingRequest)
557 int max_outstanding_requests_cost_per_process_
;
559 // Time of the last user gesture. Stored so that we can add a load
560 // flag to requests occurring soon after a gesture to indicate they
561 // may be because of explicit user action.
562 base::TimeTicks last_user_gesture_time_
;
564 // Used during IPC message dispatching so that the handlers can get a pointer
565 // to the source of the message.
566 ResourceMessageFilter
* filter_
;
568 ResourceDispatcherHostDelegate
* delegate_
;
570 bool allow_cross_origin_auth_prompt_
;
572 // http://crbug.com/90971 - Assists in tracking down use-after-frees on
574 std::set
<const ResourceContext
*> active_resource_contexts_
;
576 typedef std::map
<GlobalRequestID
,
577 base::ObserverList
<ResourceMessageDelegate
>*> DelegateMap
;
578 DelegateMap delegate_map_
;
580 scoped_ptr
<ResourceScheduler
> scheduler_
;
582 DISALLOW_COPY_AND_ASSIGN(ResourceDispatcherHostImpl
);
585 } // namespace content
587 #endif // CONTENT_BROWSER_LOADER_RESOURCE_DISPATCHER_HOST_IMPL_H_