sandbox/win/src/job_unittest.cc

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 // This file contains unit tests for the job object.
   6
   7 #include "base/win/scoped_process_information.h"
   8 #include "sandbox/win/src/job.h"
   9 #include "testing/gtest/include/gtest/gtest.h"
  10
  11 namespace sandbox {
  12
  13 // Tests the creation and destruction of the job.
  14 TEST(JobTest, TestCreation) {
  15   // Scope the creation of Job.
  16   {
  17     // Create the job.
  18     Job job;
  19     ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0, 0));
  20
  21     // check if the job exists.
  22     HANDLE job_handle = ::OpenJobObjectW(GENERIC_ALL, FALSE,
  23                                          L"my_test_job_name");
  24     ASSERT_TRUE(job_handle != NULL);
  25
  26     if (job_handle)
  27       CloseHandle(job_handle);
  28   }
  29
  30   // Check if the job is destroyed when the object goes out of scope.
  31   HANDLE job_handle = ::OpenJobObjectW(GENERIC_ALL, FALSE, L"my_test_job_name");
  32   ASSERT_TRUE(job_handle == NULL);
  33   ASSERT_EQ(ERROR_FILE_NOT_FOUND, ::GetLastError());
  34 }
  35
  36 // Tests the method "Take".
  37 TEST(JobTest, Take) {
  38   base::win::ScopedHandle job_handle;
  39   // Scope the creation of Job.
  40   {
  41     // Create the job.
  42     Job job;
  43     ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0, 0));
  44
  45     job_handle = job.Take();
  46     ASSERT_TRUE(job_handle.IsValid());
  47   }
  48
  49   // Check to be sure that the job is still alive even after the object is gone
  50   // out of scope.
  51   HANDLE job_handle_dup = ::OpenJobObjectW(GENERIC_ALL, FALSE,
  52                                            L"my_test_job_name");
  53   ASSERT_TRUE(job_handle_dup != NULL);
  54
  55   // Remove all references.
  56   if (job_handle_dup)
  57     ::CloseHandle(job_handle_dup);
  58
  59   job_handle.Close();
  60
  61   // Check if the jbo is really dead.
  62   job_handle_dup = ::OpenJobObjectW(GENERIC_ALL, FALSE, L"my_test_job_name");
  63   ASSERT_TRUE(job_handle_dup == NULL);
  64   ASSERT_EQ(ERROR_FILE_NOT_FOUND, ::GetLastError());
  65 }
  66
  67 // Tests the ui exceptions
  68 TEST(JobTest, TestExceptions) {
  69   base::win::ScopedHandle job_handle;
  70   // Scope the creation of Job.
  71   {
  72     // Create the job.
  73     Job job;
  74     ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name",
  75                                       JOB_OBJECT_UILIMIT_READCLIPBOARD, 0));
  76
  77     job_handle = job.Take();
  78     ASSERT_TRUE(job_handle.IsValid());
  79
  80     JOBOBJECT_BASIC_UI_RESTRICTIONS jbur = {0};
  81     DWORD size = sizeof(jbur);
  82     BOOL result = ::QueryInformationJobObject(job_handle.Get(),
  83                                               JobObjectBasicUIRestrictions,
  84                                               &jbur, size, &size);
  85     ASSERT_TRUE(result);
  86
  87     ASSERT_EQ(jbur.UIRestrictionsClass & JOB_OBJECT_UILIMIT_READCLIPBOARD, 0);
  88     job_handle.Close();
  89   }
  90
  91   // Scope the creation of Job.
  92   {
  93     // Create the job.
  94     Job job;
  95     ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0, 0));
  96
  97     job_handle = job.Take();
  98     ASSERT_TRUE(job_handle.IsValid());
  99
 100     JOBOBJECT_BASIC_UI_RESTRICTIONS jbur = {0};
 101     DWORD size = sizeof(jbur);
 102     BOOL result = ::QueryInformationJobObject(job_handle.Get(),
 103                                               JobObjectBasicUIRestrictions,
 104                                               &jbur, size, &size);
 105     ASSERT_TRUE(result);
 106
 107     ASSERT_EQ(jbur.UIRestrictionsClass & JOB_OBJECT_UILIMIT_READCLIPBOARD,
 108               JOB_OBJECT_UILIMIT_READCLIPBOARD);
 109   }
 110 }
 111
 112 // Tests the error case when the job is initialized twice.
 113 TEST(JobTest, DoubleInit) {
 114   // Create the job.
 115   Job job;
 116   ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0, 0));
 117   ASSERT_EQ(ERROR_ALREADY_INITIALIZED, job.Init(JOB_LOCKDOWN, L"test", 0, 0));
 118 }
 119
 120 // Tests the error case when we use a method and the object is not yet
 121 // initialized.
 122 TEST(JobTest, NoInit) {
 123   Job job;
 124   ASSERT_EQ(ERROR_NO_DATA, job.UserHandleGrantAccess(NULL));
 125   ASSERT_EQ(ERROR_NO_DATA, job.AssignProcessToJob(NULL));
 126   ASSERT_FALSE(job.Take().IsValid());
 127 }
 128
 129 // Tests the initialization of the job with different security level.
 130 TEST(JobTest, SecurityLevel) {
 131   Job job1;
 132   ASSERT_EQ(ERROR_SUCCESS, job1.Init(JOB_LOCKDOWN, L"job1", 0, 0));
 133
 134   Job job2;
 135   ASSERT_EQ(ERROR_SUCCESS, job2.Init(JOB_RESTRICTED, L"job2", 0, 0));
 136
 137   Job job3;
 138   ASSERT_EQ(ERROR_SUCCESS, job3.Init(JOB_LIMITED_USER, L"job3", 0, 0));
 139
 140   Job job4;
 141   ASSERT_EQ(ERROR_SUCCESS, job4.Init(JOB_INTERACTIVE, L"job4", 0, 0));
 142
 143   Job job5;
 144   ASSERT_EQ(ERROR_SUCCESS, job5.Init(JOB_UNPROTECTED, L"job5", 0, 0));
 145
 146   // JOB_NONE means we run without a job object so Init should fail.
 147   Job job6;
 148   ASSERT_EQ(ERROR_BAD_ARGUMENTS, job6.Init(JOB_NONE, L"job6", 0, 0));
 149
 150   Job job7;
 151   ASSERT_EQ(ERROR_BAD_ARGUMENTS, job7.Init(
 152       static_cast<JobLevel>(JOB_NONE+1), L"job7", 0, 0));
 153 }
 154
 155 // Tests the method "AssignProcessToJob".
 156 TEST(JobTest, ProcessInJob) {
 157   // Create the job.
 158   Job job;
 159   ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_UNPROTECTED, L"job_test_process", 0,
 160                                     0));
 161
 162   BOOL result = FALSE;
 163
 164   wchar_t notepad[] = L"notepad";
 165   STARTUPINFO si = { sizeof(si) };
 166   PROCESS_INFORMATION temp_process_info = {};
 167   result = ::CreateProcess(NULL, notepad, NULL, NULL, FALSE, 0, NULL, NULL, &si,
 168                            &temp_process_info);
 169   ASSERT_TRUE(result);
 170   base::win::ScopedProcessInformation pi(temp_process_info);
 171   ASSERT_EQ(ERROR_SUCCESS, job.AssignProcessToJob(pi.process_handle()));
 172
 173   // Get the job handle.
 174   base::win::ScopedHandle job_handle = job.Take();
 175
 176   // Check if the process is in the job.
 177   JOBOBJECT_BASIC_PROCESS_ID_LIST jbpidl = {0};
 178   DWORD size = sizeof(jbpidl);
 179   result = ::QueryInformationJobObject(job_handle.Get(),
 180                                        JobObjectBasicProcessIdList,
 181                                        &jbpidl, size, &size);
 182   EXPECT_TRUE(result);
 183
 184   EXPECT_EQ(1, jbpidl.NumberOfAssignedProcesses);
 185   EXPECT_EQ(1, jbpidl.NumberOfProcessIdsInList);
 186   EXPECT_EQ(pi.process_id(), jbpidl.ProcessIdList[0]);
 187
 188   EXPECT_TRUE(::TerminateProcess(pi.process_handle(), 0));
 189 }
 190
 191 }  // namespace sandbox