2016-07-14 16:16:42 +00:00
|
|
|
# -*- Mode: python; indent-tabs-mode: nil; tab-width: 40 -*-
|
2013-08-12 19:58:35 +00:00
|
|
|
# vim: set filetype=python:
|
|
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
|
2017-01-11 06:01:03 +00:00
|
|
|
BROWSER_CHROME_MANIFESTS += ['test/browser.ini']
|
|
|
|
|
2015-03-10 08:03:12 +00:00
|
|
|
with Files('**'):
|
|
|
|
BUG_COMPONENT = ('Core', 'Security: Process Sandboxing')
|
|
|
|
|
2017-05-12 21:04:42 +00:00
|
|
|
DIRS += ['common']
|
|
|
|
|
2013-10-28 21:54:36 +00:00
|
|
|
if CONFIG['OS_ARCH'] == 'Linux':
|
|
|
|
DIRS += ['linux']
|
2014-08-08 16:55:22 +00:00
|
|
|
elif CONFIG['OS_ARCH'] == 'Darwin':
|
|
|
|
DIRS += ['mac']
|
2013-10-28 21:54:36 +00:00
|
|
|
elif CONFIG['OS_ARCH'] == 'WINNT':
|
2014-09-03 05:10:54 +00:00
|
|
|
Library('sandbox_s')
|
2013-10-30 23:58:45 +00:00
|
|
|
FORCE_STATIC_LIB = True
|
|
|
|
|
2014-02-14 16:07:16 +00:00
|
|
|
DIRS += [
|
|
|
|
'win/src/sandboxbroker',
|
2017-02-14 23:08:40 +00:00
|
|
|
'win/src/sandboxpermissions',
|
2014-02-14 16:07:16 +00:00
|
|
|
'win/src/sandboxtarget',
|
|
|
|
]
|
2013-08-12 19:58:35 +00:00
|
|
|
|
2014-11-29 17:12:18 +00:00
|
|
|
EXPORTS.mozilla.sandboxing += [
|
2015-01-22 08:37:30 +00:00
|
|
|
'chromium-shim/sandbox/win/loggingCallbacks.h',
|
|
|
|
'chromium-shim/sandbox/win/loggingTypes.h',
|
2017-02-14 23:08:40 +00:00
|
|
|
'chromium-shim/sandbox/win/permissionsService.h',
|
2015-01-22 08:37:30 +00:00
|
|
|
'chromium-shim/sandbox/win/sandboxLogging.h',
|
2016-05-15 15:35:22 +00:00
|
|
|
'win/SandboxInitialization.h',
|
2014-11-29 17:12:18 +00:00
|
|
|
]
|
2014-06-11 14:32:37 +00:00
|
|
|
|
2016-05-15 15:23:57 +00:00
|
|
|
SOURCES += [
|
2016-09-06 07:57:21 +00:00
|
|
|
'chromium-shim/base/files/file_path.cpp',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium-shim/base/logging.cpp',
|
2017-02-14 23:08:40 +00:00
|
|
|
'chromium-shim/sandbox/win/permissionsService.cpp',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium-shim/sandbox/win/sandboxLogging.cpp',
|
|
|
|
'chromium/base/at_exit.cc',
|
|
|
|
'chromium/base/base_switches.cc',
|
|
|
|
'chromium/base/callback_internal.cc',
|
|
|
|
'chromium/base/cpu.cc',
|
|
|
|
'chromium/base/debug/alias.cc',
|
|
|
|
'chromium/base/debug/profiler.cc',
|
|
|
|
'chromium/base/hash.cc',
|
|
|
|
'chromium/base/lazy_instance.cc',
|
|
|
|
'chromium/base/location.cc',
|
|
|
|
'chromium/base/memory/ref_counted.cc',
|
2017-03-29 13:23:17 +00:00
|
|
|
'chromium/base/memory/shared_memory_handle_win.cc',
|
|
|
|
'chromium/base/memory/shared_memory_win.cc',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium/base/memory/singleton.cc',
|
2017-03-29 13:23:17 +00:00
|
|
|
'chromium/base/process/process_handle_win.cc',
|
|
|
|
'chromium/base/rand_util_win.cc',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium/base/strings/nullable_string16.cc',
|
|
|
|
'chromium/base/strings/string_number_conversions.cc',
|
|
|
|
'chromium/base/strings/string_piece.cc',
|
|
|
|
'chromium/base/strings/string_split.cc',
|
|
|
|
'chromium/base/strings/string_util.cc',
|
|
|
|
'chromium/base/strings/string_util_constants.cc',
|
|
|
|
'chromium/base/strings/stringprintf.cc',
|
|
|
|
'chromium/base/strings/utf_string_conversion_utils.cc',
|
|
|
|
'chromium/base/strings/utf_string_conversions.cc',
|
|
|
|
'chromium/base/synchronization/lock.cc',
|
|
|
|
'chromium/base/synchronization/lock_impl_win.cc',
|
|
|
|
'chromium/base/third_party/dmg_fp/dtoa.cc',
|
|
|
|
'chromium/base/third_party/dmg_fp/g_fmt.cc',
|
|
|
|
'chromium/base/third_party/icu/icu_utf.cc',
|
|
|
|
'chromium/base/third_party/superfasthash/superfasthash.c',
|
|
|
|
'chromium/base/threading/platform_thread_win.cc',
|
|
|
|
'chromium/base/threading/thread_collision_warner.cc',
|
|
|
|
'chromium/base/threading/thread_id_name_manager.cc',
|
2017-03-29 13:23:17 +00:00
|
|
|
'chromium/base/threading/thread_local_storage.cc',
|
|
|
|
'chromium/base/threading/thread_local_storage_win.cc',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium/base/threading/thread_restrictions.cc',
|
|
|
|
'chromium/base/time/time.cc',
|
|
|
|
'chromium/base/time/time_win.cc',
|
|
|
|
'chromium/base/win/pe_image.cc',
|
|
|
|
'chromium/base/win/scoped_handle.cc',
|
|
|
|
'chromium/base/win/scoped_process_information.cc',
|
|
|
|
'chromium/base/win/startup_information.cc',
|
|
|
|
'chromium/base/win/windows_version.cc',
|
|
|
|
'chromium/sandbox/win/src/acl.cc',
|
|
|
|
'chromium/sandbox/win/src/broker_services.cc',
|
|
|
|
'chromium/sandbox/win/src/crosscall_server.cc',
|
|
|
|
'chromium/sandbox/win/src/eat_resolver.cc',
|
|
|
|
'chromium/sandbox/win/src/filesystem_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/filesystem_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/filesystem_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/handle_closer.cc',
|
|
|
|
'chromium/sandbox/win/src/handle_closer_agent.cc',
|
|
|
|
'chromium/sandbox/win/src/handle_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/handle_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/handle_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/interception.cc',
|
|
|
|
'chromium/sandbox/win/src/interception_agent.cc',
|
|
|
|
'chromium/sandbox/win/src/job.cc',
|
|
|
|
'chromium/sandbox/win/src/named_pipe_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/named_pipe_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/named_pipe_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/policy_broker.cc',
|
|
|
|
'chromium/sandbox/win/src/policy_engine_opcodes.cc',
|
|
|
|
'chromium/sandbox/win/src/policy_engine_processor.cc',
|
|
|
|
'chromium/sandbox/win/src/policy_low_level.cc',
|
|
|
|
'chromium/sandbox/win/src/policy_target.cc',
|
|
|
|
'chromium/sandbox/win/src/process_mitigations.cc',
|
|
|
|
'chromium/sandbox/win/src/process_mitigations_win32k_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/process_mitigations_win32k_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/process_mitigations_win32k_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/process_thread_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/process_thread_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/process_thread_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/registry_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/registry_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/registry_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/resolver.cc',
|
|
|
|
'chromium/sandbox/win/src/restricted_token.cc',
|
|
|
|
'chromium/sandbox/win/src/restricted_token_utils.cc',
|
|
|
|
'chromium/sandbox/win/src/sandbox.cc',
|
|
|
|
'chromium/sandbox/win/src/sandbox_globals.cc',
|
|
|
|
'chromium/sandbox/win/src/sandbox_nt_util.cc',
|
|
|
|
'chromium/sandbox/win/src/sandbox_policy_base.cc',
|
2016-09-06 07:57:21 +00:00
|
|
|
'chromium/sandbox/win/src/sandbox_rand.cc',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium/sandbox/win/src/sandbox_utils.cc',
|
|
|
|
'chromium/sandbox/win/src/service_resolver.cc',
|
|
|
|
'chromium/sandbox/win/src/sharedmem_ipc_client.cc',
|
|
|
|
'chromium/sandbox/win/src/sharedmem_ipc_server.cc',
|
|
|
|
'chromium/sandbox/win/src/sid.cc',
|
|
|
|
'chromium/sandbox/win/src/sync_dispatcher.cc',
|
|
|
|
'chromium/sandbox/win/src/sync_interception.cc',
|
|
|
|
'chromium/sandbox/win/src/sync_policy.cc',
|
|
|
|
'chromium/sandbox/win/src/target_interceptions.cc',
|
|
|
|
'chromium/sandbox/win/src/target_process.cc',
|
|
|
|
'chromium/sandbox/win/src/target_services.cc',
|
2016-09-06 07:57:21 +00:00
|
|
|
'chromium/sandbox/win/src/top_level_dispatcher.cc',
|
2016-05-15 15:23:57 +00:00
|
|
|
'chromium/sandbox/win/src/win2k_threadpool.cc',
|
|
|
|
'chromium/sandbox/win/src/win_utils.cc',
|
|
|
|
'chromium/sandbox/win/src/window.cc',
|
2016-05-15 15:35:22 +00:00
|
|
|
'win/SandboxInitialization.cpp',
|
2016-05-15 15:23:57 +00:00
|
|
|
]
|
|
|
|
|
|
|
|
if CONFIG['CPU_ARCH'] == 'x86_64':
|
|
|
|
SOURCES += [
|
|
|
|
'chromium/sandbox/win/src/interceptors_64.cc',
|
|
|
|
'chromium/sandbox/win/src/resolver_64.cc',
|
|
|
|
'chromium/sandbox/win/src/service_resolver_64.cc',
|
|
|
|
]
|
|
|
|
else:
|
|
|
|
SOURCES += [
|
|
|
|
'chromium/sandbox/win/src/resolver_32.cc',
|
|
|
|
'chromium/sandbox/win/src/service_resolver_32.cc',
|
|
|
|
'chromium/sandbox/win/src/sidestep/ia32_modrm_map.cpp',
|
|
|
|
'chromium/sandbox/win/src/sidestep/ia32_opcode_map.cpp',
|
|
|
|
'chromium/sandbox/win/src/sidestep/mini_disassembler.cpp',
|
|
|
|
'chromium/sandbox/win/src/sidestep/preamble_patcher_with_stub.cpp',
|
|
|
|
'chromium/sandbox/win/src/sidestep_resolver.cc',
|
|
|
|
]
|
2014-03-28 04:59:16 +00:00
|
|
|
|
2013-11-27 13:55:07 +00:00
|
|
|
for var in ('UNICODE', '_UNICODE', 'NS_NO_XPCOM', 'SANDBOX_EXPORTS',
|
2015-08-03 01:07:09 +00:00
|
|
|
'_CRT_RAND_S', 'CHROMIUM_SANDBOX_BUILD'):
|
2013-11-27 13:55:07 +00:00
|
|
|
DEFINES[var] = True
|
2014-02-18 13:49:12 +00:00
|
|
|
|
2015-01-22 08:37:30 +00:00
|
|
|
LOCAL_INCLUDES += ['/security/sandbox/chromium-shim']
|
2014-02-18 13:49:12 +00:00
|
|
|
LOCAL_INCLUDES += ['/security/sandbox/chromium']
|
|
|
|
LOCAL_INCLUDES += ['/nsprpub']
|
2014-03-05 00:39:06 +00:00
|
|
|
|
|
|
|
DISABLE_STL_WRAPPING = True
|
2014-08-09 21:25:24 +00:00
|
|
|
|
|
|
|
# Suppress warnings in third-party code.
|
|
|
|
if CONFIG['_MSC_VER']:
|
|
|
|
CXXFLAGS += [
|
|
|
|
'-wd4275', # non dll-interface class exception used as base for dll-interface class
|
|
|
|
'-wd4717', # recursive on all control paths, function will cause runtime stack overflow
|
2014-08-19 19:09:03 +00:00
|
|
|
'-wd4996', # 'GetVersionExW': was declared deprecated
|
2016-03-15 00:00:09 +00:00
|
|
|
'-wd4302', # 'reinterpret_cast': truncation from 'LPCSTR' to 'WORD'
|
2016-03-15 18:28:52 +00:00
|
|
|
'-wd4311', # 'reinterpret_cast': pointer truncation from 'LPOVERLAPPED' to 'DWORD'
|
|
|
|
'-wd4312', # 'reinterpret_cast': conversion from 'DWORD' to 'LPOVERLAPPED' of greater size
|
2014-08-09 21:25:24 +00:00
|
|
|
]
|