mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-19 08:15:31 +00:00
23e61114cf
This patch contains the core changes to make this all work across e10s: * We clarify the naming of path variables to be more specific as to whether they are NT paths or DOS paths; * We add IPC `ParamTraits` that are necessary for `UntrustedModulesData` types; * We implement `ProcessModuleLoadQueue` for child processes. Because of sandboxing, we need to split this sequence into multiple async operations: ** Initial queue processing; ** Sending the list of modules to the parent process to determine trustworthiness (via `GetModulesTrust`); ** Receiving the results from the parent process and producing a final result (via `CompleteProcessing`). * We implement the `GetModulesTrust` function for the parent process, which evaluates the trust of child process modules; * We change all hash tables to be keyed using NT paths. Because resolving DOS paths may not be permitted in sandboxed processes, we need to standardize on NT paths as the "universal path" across processes. * We add `WinDllServices::StartUntrustedModulesProcessor` to separate untrusted modules startup from `WinDllServices` construction: ** While we now start `WinDllServices` across all child process types, only specific process types will support untrusted modules. ** Furthermore, untrusted modules must be started at a very specific point that is dependent on the type of child process. ** We add those calls to `StartUntrustedModulesProcessor` in subsequent patches. Differential Revision: https://phabricator.services.mozilla.com/D53680 --HG-- extra : moz-landing-system : lando
57 lines
1.6 KiB
C++
57 lines
1.6 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at https://mozilla.org/MPL/2.0/. */
|
|
|
|
#ifndef mozilla_WinDllServices_h
|
|
#define mozilla_WinDllServices_h
|
|
|
|
#include "mozilla/glue/WindowsDllServices.h"
|
|
#include "mozilla/Maybe.h"
|
|
#include "mozilla/MozPromise.h"
|
|
#include "mozilla/RefPtr.h"
|
|
|
|
namespace mozilla {
|
|
|
|
class UntrustedModulesData;
|
|
class UntrustedModulesProcessor;
|
|
|
|
using UntrustedModulesPromise =
|
|
MozPromise<Maybe<UntrustedModulesData>, nsresult, true>;
|
|
|
|
struct ModulePaths;
|
|
class ModulesMapResult;
|
|
|
|
using ModulesTrustPromise = MozPromise<ModulesMapResult, nsresult, true>;
|
|
|
|
class DllServices : public glue::DllServices {
|
|
public:
|
|
static DllServices* Get();
|
|
|
|
virtual void DisableFull() override;
|
|
|
|
static const char* kTopicDllLoadedMainThread;
|
|
static const char* kTopicDllLoadedNonMainThread;
|
|
|
|
void StartUntrustedModulesProcessor();
|
|
|
|
RefPtr<UntrustedModulesPromise> GetUntrustedModulesData();
|
|
|
|
RefPtr<ModulesTrustPromise> GetModulesTrust(ModulePaths&& aModPaths,
|
|
bool aRunAtNormalPriority);
|
|
|
|
private:
|
|
DllServices() = default;
|
|
~DllServices() = default;
|
|
|
|
void NotifyDllLoad(glue::EnhancedModuleLoadInfo&& aModLoadInfo) override;
|
|
void NotifyModuleLoadBacklog(ModuleLoadInfoVec&& aEvents) override;
|
|
|
|
RefPtr<UntrustedModulesProcessor> mUntrustedModulesProcessor;
|
|
};
|
|
|
|
} // namespace mozilla
|
|
|
|
#endif // mozilla_WinDllServices_h
|