summaryrefslogtreecommitdiffstats
path: root/sandbox/src
Commit message (Collapse)AuthorAgeFilesLines
* Emergency revert; rietveld broke; tree brokeerg@google.com2012-07-13160-0/+28218
| | | | git-svn-id: svn://svn.chromium.org/chrome/trunk/src@146646 0039d316-1c4b-4281-b951-d872f2087c98
* Move Windows sandboxjln@chromium.org2012-07-13160-28218/+0
| | | | | | | - Move Windows sandbox to sandbox/win - Update sandbox_win.gypi git-svn-id: svn://svn.chromium.org/chrome/trunk/src@146625 0039d316-1c4b-4281-b951-d872f2087c98
* Suppress STATUS_INVALID_HANDLE (0xc0000008) exceptions triggered by ↵alexeypa@chromium.org2012-07-121-7/+27
| | | | | | | | | | | | | HandleCloserAgent. Dereferncing an invalid handle generates the STATUS_INVALID_HANDLE exception when handle tracing is enabled (by AppVerifier for example). HandleCloserAgent is expected to probe invalid handles, so this CL suppresses STATUS_INVALID_HANDLE exceptions triggered by HandleCloserAgent to make debugging easier. BUG=131699 Review URL: https://chromiumcodereview.appspot.com/10689081 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@146470 0039d316-1c4b-4281-b951-d872f2087c98
* Remove the rest of #pragma once in one big CL.ajwong@chromium.org2012-07-111-1/+0
| | | | | | | | | For context see this thread: https://groups.google.com/a/chromium.org/forum/?fromgroups#!topic/chromium-dev/RMcVNGjB4II TBR=thakis,pkasting,jam git-svn-id: svn://svn.chromium.org/chrome/trunk/src@146163 0039d316-1c4b-4281-b951-d872f2087c98
* Force the interception agent trampoline into the random rangejschuh@chromium.org2012-06-291-6/+19
| | | | | | Review URL: https://chromiumcodereview.appspot.com/10686007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144861 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Move code around.rvargas@google.com2012-06-283-218/+236
| | | | | | | | | | | This is mostly a NOP, except for the initialization of ui_exceptions_. BUG=none TEST=none Review URL: https://chromiumcodereview.appspot.com/10697013 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144804 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Two files were left behind when changing the uservargas@google.com2012-06-282-3/+4
| | | | | | | | | | | of scoped handles (r144571), because they were not part of the original (backed out) CL. BUG=none TEST=none Review URL: https://chromiumcodereview.appspot.com/10703012 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144803 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Use ScopedProcessInformation.rvargas@google.com2012-06-278-186/+176
| | | | | | | | | | | | This is a partial reland of 130716 - Use ScopedProcessInformation and other RAII types in sandbox - minus the bugs introduced by that cl. BUG=127931 TEST=none Review URL: https://chromiumcodereview.appspot.com/10605002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144571 0039d316-1c4b-4281-b951-d872f2087c98
* Make chrome compile with the win8 sdk cpu@chromium.org2012-06-265-7/+7
| | | | | | | | | | | | | | | | | | | | | So we can move the metro bits to \src THREAD_INFORMATION_CLASS is now defined with unrelated values as follows: typedef enum _THREAD_INFORMATION_CLASS { ThreadMemoryPriority, ThreadAbsoluteCpuPriority, ThreadInformationClassMax } THREAD_INFORMATION_CLASS; BUG=127799 TEST= it builds, current test suffice Review URL: https://chromiumcodereview.appspot.com/10669027 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144217 0039d316-1c4b-4281-b951-d872f2087c98
* Add eight more bits of entropy to the sandbox intercept trampolinejschuh@chromium.org2012-06-252-8/+44
| | | | | | Review URL: https://chromiumcodereview.appspot.com/10666018 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@144031 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Add support for the latest version of windows' servicervargas@google.com2012-06-211-6/+49
| | | | | | | | | | stub on 64 bit systems. BUG=133633 TEST=current sbox tests. Review URL: https://chromiumcodereview.appspot.com/10581031 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@143428 0039d316-1c4b-4281-b951-d872f2087c98
* Don't break sandboxed sub-processes out of jobs on Win8.siggi@chromium.org2012-06-142-4/+18
| | | | | | | | | | | | | | It's not necessary to break out of the parent process' job on Windows 8, as nested jobs are supported. Under Metro, breaking sub-processes out of the parent process' job prevents them from being suspended with the application. R=rvargas@chromium.org BUG=129697 TEST=Sub-processes are suspended with browser on Metro. Review URL: https://chromiumcodereview.appspot.com/10535167 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@142237 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 130716 - Use ScopedProcessInformation and other RAII types in sandbox.rvargas@google.com2012-06-019-163/+168
| | | | | | | | | | | | | | | | | | | BUG=127931 TBR=cpu ------- See http://codereview.chromium.org/9700038/ for the definition of ScopedProcessInformation. BUG=None TEST=None Review URL: https://chromiumcodereview.appspot.com/9959018 TBR=erikwright@chromium.org Review URL: https://chromiumcodereview.appspot.com/10493002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@140105 0039d316-1c4b-4281-b951-d872f2087c98
* Retain permissions on duplicated handle in DuplicateHandleProxyjschuh@chromium.org2012-05-241-1/+1
| | | | | | | | | This is a speculative fix because I think we may be dying due to a hook outside our control. BUG=129434 Review URL: https://chromiumcodereview.appspot.com/10447006 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@138710 0039d316-1c4b-4281-b951-d872f2087c98
* Disable UnloadAviCapDllNoPatching because it is flaky.vandebo@chromium.org2012-05-231-7/+3
| | | | | | | | | BUG=80569 TEST=NONE Review URL: https://chromiumcodereview.appspot.com/10421008 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@138490 0039d316-1c4b-4281-b951-d872f2087c98
* Add a sandbox policy for duplicating handles into the broker.jschuh@chromium.org2012-05-195-16/+71
| | | | | | Review URL: https://chromiumcodereview.appspot.com/10389210 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@138008 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Limit the memory buffers of the Sandbox IP to 32 bits.rvargas@google.com2012-05-1410-89/+107
| | | | | | | | BUG=123875 TEST=sbox_uniitests Review URL: https://chromiumcodereview.appspot.com/10369002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@136987 0039d316-1c4b-4281-b951-d872f2087c98
* win: Fix a few minor issues found by clang.thakis@chromium.org2012-05-024-5/+5
| | | | | | | | | | | | No intended functionality change. BUG=82385 TEST=compiles Review URL: http://codereview.chromium.org/10332002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@134988 0039d316-1c4b-4281-b951-d872f2087c98
* win: Fix some preprocessor confusion clang complains about.thakis@chromium.org2012-05-022-7/+7
| | | | | | | | | | | | No intended functionality change. BUG=82385 TEST=compiles Review URL: http://codereview.chromium.org/10341002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@134966 0039d316-1c4b-4281-b951-d872f2087c98
* win sandbox: Fix minor c++ violation, no functionality changethakis@chromium.org2012-05-011-3/+2
| | | | | | | | | | BUG=none TEST=none Review URL: http://codereview.chromium.org/10268021 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@134660 0039d316-1c4b-4281-b951-d872f2087c98
* Mark UnloadAviCapDllNoPatching flakyjbates@chromium.org2012-04-191-1/+1
| | | | | | | | | BUG=80569 TBR=cpu@chromium.org Review URL: https://chromiumcodereview.appspot.com/10125014 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@133026 0039d316-1c4b-4281-b951-d872f2087c98
* Sandbox: Add support for interceptions on Windows 8.rvargas@google.com2012-04-174-25/+169
| | | | | | | | BUG=123068 TEST=sbox_unittests, sbox_integration_tests Review URL: https://chromiumcodereview.appspot.com/10021033 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@132680 0039d316-1c4b-4281-b951-d872f2087c98
* Prevent sandboxed processes from opening each other jschuh@chromium.org2012-04-162-12/+6
| | | | | | | | | | TBR=brettw BUG=117627 BUG=119150 TEST=sbox_validation_tests Review URL: https://chromiumcodereview.appspot.com/9716027 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@132477 0039d316-1c4b-4281-b951-d872f2087c98
* Add sandbox support for associating peer processes jschuh@chromium.org2012-04-134-13/+138
| | | | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=131940 Review URL: https://chromiumcodereview.appspot.com/9960045 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@132112 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 131940 - Add sandbox support for associating peer processes jbauman@chromium.org2012-04-124-123/+12
| | | | | | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: http://codereview.chromium.org/9960045 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/10065007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131944 0039d316-1c4b-4281-b951-d872f2087c98
* Add sandbox support for associating peer processes jschuh@chromium.org2012-04-124-12/+123
| | | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: http://codereview.chromium.org/9960045 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131940 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 131778 - Add sandbox support for associating peer processes jschuh@chromium.org2012-04-114-128/+12
| | | | | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: https://chromiumcodereview.appspot.com/9960045 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/10054013 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131782 0039d316-1c4b-4281-b951-d872f2087c98
* Add sandbox support for associating peer processes jschuh@chromium.org2012-04-114-12/+128
| | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: https://chromiumcodereview.appspot.com/9960045 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131778 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 131671 - Add sandbox support for associating peer processesjschuh@chromium.org2012-04-114-128/+12
| | | | | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: https://chromiumcodereview.appspot.com/9960045 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/10052001 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131684 0039d316-1c4b-4281-b951-d872f2087c98
* Add sandbox support for associating peer processesjschuh@chromium.org2012-04-104-12/+128
| | | | | | | TEST=HandlePolicyTest.DuplicatePeerHandle Review URL: https://chromiumcodereview.appspot.com/9960045 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@131671 0039d316-1c4b-4281-b951-d872f2087c98
* Use ScopedProcessInformation and other RAII types in sandbox.erikwright@chromium.org2012-04-049-168/+163
| | | | | | | | | | | See http://codereview.chromium.org/9700038/ for the definition of ScopedProcessInformation. BUG=None TEST=None Review URL: https://chromiumcodereview.appspot.com/9959018 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@130716 0039d316-1c4b-4281-b951-d872f2087c98
* Fix race in CrossCallParamsEx::CreateFromBuffercpu@chromium.org2012-04-031-0/+6
| | | | | | | | | | | | | Credit goes to Willem Pinckaers / Matasano No unittest because to trigger this codepath you need to win a very thight race. BUG=121726 TEST=none Review URL: https://chromiumcodereview.appspot.com/9965117 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@130505 0039d316-1c4b-4281-b951-d872f2087c98
* Fix some grammar in comments, error messages and documentation.gavinp@chromium.org2012-04-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Thanks to all my reviewers, you are legion. I hope I didn't waste too much of your time. BUG=None Review URL: http://codereview.chromium.org/9854039 Review URL: http://codereview.chromium.org/9854043 Review URL: http://codereview.chromium.org/9863058 Review URL: http://codereview.chromium.org/9863059 Review URL: http://codereview.chromium.org/9887005 Review URL: http://codereview.chromium.org/9890002 Review URL: http://codereview.chromium.org/9891002 Review URL: http://codereview.chromium.org/9895003 Review URL: http://codereview.chromium.org/9896002 Review URL: http://codereview.chromium.org/9896003 Review URL: http://codereview.chromium.org/9897002 Review URL: http://codereview.chromium.org/9897003 Review URL: http://codereview.chromium.org/9903004 Review URL: http://codereview.chromium.org/9904003 Review URL: http://codereview.chromium.org/9904002 Review URL: http://codereview.chromium.org/9904004 Review URL: http://codereview.chromium.org/9906002 Review URL: http://codereview.chromium.org/9906001 Review URL: http://codereview.chromium.org/9906003 Review URL: http://codereview.chromium.org/9909001 Review URL: http://codereview.chromium.org/9909002 Review URL: http://codereview.chromium.org/9909003 Review URL: http://codereview.chromium.org/9909004 Review URL: http://codereview.chromium.org/9910001 Review URL: http://codereview.chromium.org/9910002 Review URL: http://codereview.chromium.org/9910010 Review URL: http://codereview.chromium.org/9911001 Review URL: http://codereview.chromium.org/9912001 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@130359 0039d316-1c4b-4281-b951-d872f2087c98
* Add a sandbox API for broker handle duplication jschuh@chromium.org2012-03-3115-10/+451
| | | | | | | | BUG=119250 Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=129627 Review URL: https://chromiumcodereview.appspot.com/9838083 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@130029 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 129627 - Add a sandbox API for broker handle duplicationjschuh@chromium.org2012-03-2915-451/+10
| | | | | | | | | | BUG=119250 Review URL: https://chromiumcodereview.appspot.com/9838083 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/9924010 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@129629 0039d316-1c4b-4281-b951-d872f2087c98
* Add a sandbox API for broker handle duplicationjschuh@chromium.org2012-03-2915-10/+451
| | | | | | | BUG=119250 Review URL: https://chromiumcodereview.appspot.com/9838083 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@129627 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 128016 - Make sandbox explicitly block opening broker and sandboxed ↵jschuh@chromium.org2012-03-236-107/+9
| | | | | | | | | | | | | | | processes BUG=117627 BUG=119150 TEST=sbox_validation_tests Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=127795 Review URL: https://chromiumcodereview.appspot.com/9716027 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/9834065 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@128583 0039d316-1c4b-4281-b951-d872f2087c98
* Make sandbox explicitly block opening broker and sandboxed processesjschuh@chromium.org2012-03-216-9/+107
| | | | | | | | | | BUG=117627 BUG=119150 TEST=sbox_validation_tests Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=127795 Review URL: https://chromiumcodereview.appspot.com/9716027 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@128016 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 127836 - Revert 127820 - Revert 127795 - Make sandbox explicitly ↵zmo@google.com2012-03-216-107/+9
| | | | | | | | | | | | | | | | | | | | | block opening broker and sandboxed processes BUG=119182 BUG=117627 BUG=119150 TEST=sbox_validation_tests Review URL: https://chromiumcodereview.appspot.com/9716027 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/9796002 TBR=zmo@google.com Review URL: https://chromiumcodereview.appspot.com/9801003 TBR=zmo@google.com Review URL: https://chromiumcodereview.appspot.com/9796005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127840 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 127820 - Revert 127795 - Make sandbox explicitly block opening broker ↵zmo@google.com2012-03-206-9/+107
| | | | | | | | | | | | | | | | | | and sandboxed processes BUG=119182 BUG=117627 BUG=119150 TEST=sbox_validation_tests Review URL: https://chromiumcodereview.appspot.com/9716027 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/9796002 TBR=zmo@google.com Review URL: https://chromiumcodereview.appspot.com/9801003 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127836 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 127795 - Make sandbox explicitly block opening broker and sandboxed ↵zmo@google.com2012-03-206-107/+9
| | | | | | | | | | | | | | | processes BUG=119182 BUG=117627 BUG=119150 TEST=sbox_validation_tests Review URL: https://chromiumcodereview.appspot.com/9716027 TBR=jschuh@chromium.org Review URL: https://chromiumcodereview.appspot.com/9796002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127820 0039d316-1c4b-4281-b951-d872f2087c98
* Make sandbox explicitly block opening broker and sandboxed processesjschuh@chromium.org2012-03-206-9/+107
| | | | | | | | | BUG=117627 BUG=119150 TEST=sbox_validation_tests Review URL: https://chromiumcodereview.appspot.com/9716027 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127795 0039d316-1c4b-4281-b951-d872f2087c98
* Fix sidestep licensessteveblock@chromium.org2012-03-206-114/+17
| | | | | | Review URL: http://codereview.chromium.org/9733004 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@127665 0039d316-1c4b-4281-b951-d872f2087c98
* Reserve the bottom of the address space to prevent predictable alocations.jschuh@chromium.org2012-02-281-1/+24
| | | | | | | | BUG=113891 Review URL: http://codereview.chromium.org/9447078 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@123920 0039d316-1c4b-4281-b951-d872f2087c98
* Flakiness cleanup: disable remaining flaky tests in src/evan@chromium.org2012-02-151-2/+2
| | | | | | | | | | | See https://groups.google.com/a/chromium.org/group/chromium-dev/browse_thread/thread/fcec09fc659f39a6 BUG=114386,109405,38404 TBR=sky Review URL: http://codereview.chromium.org/9405024 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@122168 0039d316-1c4b-4281-b951-d872f2087c98
* Eliminated memory growth issue by removing null objects from a list that was ↵erikghill@gmail.com2012-01-262-22/+18
| | | | | | | | accumulating them. Now, the objects are removed from the list when they are no longer needed, instead of being set to null.BUG=110459TEST=1. Go to any webpage 2. Go to a different webpage 3. Go back to step 1 and repeat many times. Before the fix pool_objects_ in win2k_threadpool grows with each new webpage visited. After the fix pool_objects_.size() is bounded even as new webpages are visited. Review URL: http://codereview.chromium.org/9243014 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@119287 0039d316-1c4b-4281-b951-d872f2087c98
* Fix memory dealocatiom mismatch by using scoped_ptr_malloccpu@chromium.org2012-01-122-8/+9
| | | | | | | | | | | - Flagged by almost all tools BUG=101717 TEST= sandbox tests in the waterfall are green. Review URL: http://codereview.chromium.org/9107029 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@117476 0039d316-1c4b-4281-b951-d872f2087c98
* ake string_util::WriteInto() DCHECK() that the supplied |length_with_null| > ↵pkasting@chromium.org2011-11-293-33/+4
| | | | | | | | | | | | 1, meaning that the without-'\0' string is non-empty. This replaces the conditional code added recently that makes this case return NULL. It's easier to understand if it's simply an error to call WriteInto() in this case at all. Add DCHECK()s or conditionals as appropriate to callers in order to ensure this assertion holds. BUG=none TEST=none Review URL: http://codereview.chromium.org/8418034 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@112005 0039d316-1c4b-4281-b951-d872f2087c98
* Replace all usages of FRIEND_TEST() with FRIEND_TEST_ALL_PREFIXES()robertshield@chromium.org2011-11-292-11/+11
| | | | | | | | BUG=105287 TEST=NONE Review URL: http://codereview.chromium.org/8678017 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@111935 0039d316-1c4b-4281-b951-d872f2087c98
* Cleanup: Remove unneeded forward declarations in printing, sandbox, and skia.thestig@chromium.org2011-11-143-9/+6
| | | | | | | | | BUG=none TEST=none Review URL: http://codereview.chromium.org/8538001 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@109961 0039d316-1c4b-4281-b951-d872f2087c98