| // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "sandbox/win/src/sync_interception.h" |
| |
| #include "sandbox/win/src/crosscall_client.h" |
| #include "sandbox/win/src/ipc_tags.h" |
| #include "sandbox/win/src/policy_params.h" |
| #include "sandbox/win/src/policy_target.h" |
| #include "sandbox/win/src/sandbox_factory.h" |
| #include "sandbox/win/src/sandbox_nt_util.h" |
| #include "sandbox/win/src/sharedmem_ipc_client.h" |
| #include "sandbox/win/src/target_services.h" |
| |
| namespace sandbox { |
| |
| ResultCode ProxyCreateEvent(LPCWSTR name, |
| BOOL initial_state, |
| BOOL manual_reset, |
| CrossCallReturn* answer) { |
| void* memory = GetGlobalIPCMemory(); |
| if (!memory) |
| return SBOX_ERROR_GENERIC; |
| |
| CountedParameterSet<NameBased> params; |
| params[NameBased::NAME] = ParamPickerMake(name); |
| |
| if (!QueryBroker(IPC_CREATEEVENT_TAG, params.GetBase())) |
| return SBOX_ERROR_GENERIC; |
| |
| SharedMemIPCClient ipc(memory); |
| ResultCode code = CrossCall(ipc, IPC_CREATEEVENT_TAG, name, manual_reset, |
| initial_state, answer); |
| return code; |
| } |
| |
| ResultCode ProxyOpenEvent(LPCWSTR name, |
| ACCESS_MASK desired_access, |
| BOOL inherit_handle, |
| CrossCallReturn* answer) { |
| void* memory = GetGlobalIPCMemory(); |
| if (!memory) |
| return SBOX_ERROR_GENERIC; |
| |
| uint32 inherit_handle_ipc = inherit_handle; |
| CountedParameterSet<OpenEventParams> params; |
| params[OpenEventParams::NAME] = ParamPickerMake(name); |
| params[OpenEventParams::ACCESS] = ParamPickerMake(desired_access); |
| |
| if (!QueryBroker(IPC_OPENEVENT_TAG, params.GetBase())) |
| return SBOX_ERROR_GENERIC; |
| |
| SharedMemIPCClient ipc(memory); |
| ResultCode code = CrossCall(ipc, IPC_OPENEVENT_TAG, name, desired_access, |
| inherit_handle_ipc, answer); |
| |
| return code; |
| } |
| |
| HANDLE WINAPI TargetCreateEventW(CreateEventWFunction orig_CreateEvent, |
| LPSECURITY_ATTRIBUTES security_attributes, |
| BOOL manual_reset, |
| BOOL initial_state, |
| LPCWSTR name) { |
| // Check if the process can create it first. |
| HANDLE handle = orig_CreateEvent(security_attributes, manual_reset, |
| initial_state, name); |
| if (handle || !name) |
| return handle; |
| |
| // We don't trust that the IPC can work this early. |
| if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled()) |
| return NULL; |
| |
| DWORD original_error = ::GetLastError(); |
| |
| CrossCallReturn answer = {0}; |
| ResultCode code = ProxyCreateEvent(name, initial_state, manual_reset, |
| &answer); |
| |
| if (code == SBOX_ALL_OK) { |
| ::SetLastError(answer.win32_result); |
| return answer.handle; |
| } |
| ::SetLastError(original_error); |
| return NULL; |
| } |
| |
| HANDLE WINAPI TargetCreateEventA(CreateEventAFunction orig_CreateEvent, |
| LPSECURITY_ATTRIBUTES security_attributes, |
| BOOL manual_reset, |
| BOOL initial_state, |
| LPCSTR name) { |
| // Check if the process can create it first. |
| HANDLE handle = orig_CreateEvent(security_attributes, manual_reset, |
| initial_state, name); |
| if (handle || !name) |
| return handle; |
| |
| // We don't trust that the IPC can work this early. |
| if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled()) |
| return NULL; |
| |
| DWORD original_error = ::GetLastError(); |
| |
| UNICODE_STRING* wide_name = AnsiToUnicode(name); |
| if (!wide_name) |
| return NULL; |
| |
| CrossCallReturn answer = {0}; |
| ResultCode code = ProxyCreateEvent(wide_name->Buffer, initial_state, |
| manual_reset, &answer); |
| operator delete(wide_name, NT_ALLOC); |
| |
| if (code == SBOX_ALL_OK) { |
| ::SetLastError(answer.win32_result); |
| return answer.handle; |
| } |
| ::SetLastError(original_error); |
| return NULL; |
| } |
| |
| // Interception of OpenEventW on the child process. |
| // It should never be called directly |
| HANDLE WINAPI TargetOpenEventW(OpenEventWFunction orig_OpenEvent, |
| DWORD desired_access, |
| BOOL inherit_handle, |
| LPCWSTR name) { |
| // Check if the process can open it first. |
| HANDLE handle = orig_OpenEvent(desired_access, inherit_handle, name); |
| if (handle || !name) |
| return handle; |
| |
| // We don't trust that the IPC can work this early. |
| if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled()) |
| return NULL; |
| |
| DWORD original_error = ::GetLastError(); |
| |
| CrossCallReturn answer = {0}; |
| |
| ResultCode code = ProxyOpenEvent(name, desired_access, inherit_handle, |
| &answer); |
| if (code == SBOX_ALL_OK) { |
| ::SetLastError(answer.win32_result); |
| return answer.handle; |
| } |
| ::SetLastError(original_error); |
| return NULL; |
| } |
| |
| HANDLE WINAPI TargetOpenEventA(OpenEventAFunction orig_OpenEvent, |
| DWORD desired_access, |
| BOOL inherit_handle, |
| LPCSTR name) { |
| // Check if the process can open it first. |
| HANDLE handle = orig_OpenEvent(desired_access, inherit_handle, name); |
| if (handle || !name) |
| return handle; |
| |
| // We don't trust that the IPC can work this early. |
| if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled()) |
| return NULL; |
| |
| DWORD original_error = ::GetLastError(); |
| |
| UNICODE_STRING* wide_name = AnsiToUnicode(name); |
| if (!wide_name) |
| return NULL; |
| |
| CrossCallReturn answer = {0}; |
| ResultCode code = ProxyOpenEvent(wide_name->Buffer, desired_access, |
| inherit_handle, &answer); |
| operator delete(wide_name, NT_ALLOC); |
| |
| if (code == SBOX_ALL_OK) { |
| ::SetLastError(answer.win32_result); |
| return answer.handle; |
| } |
| ::SetLastError(original_error); |
| return NULL; |
| } |
| |
| } // namespace sandbox |