// Copyright (c) 2009 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "chrome/plugin/webplugin_proxy.h" #include "build/build_config.h" #include "app/gfx/canvas.h" #if defined(OS_WIN) #include "app/gfx/gdi_util.h" #include "app/win_util.h" #endif #include "app/gfx/blit.h" #if defined(OS_MACOSX) #include "base/mac_util.h" #endif #include "base/scoped_handle.h" #include "base/shared_memory.h" #include "base/singleton.h" #include "build/build_config.h" #include "chrome/common/child_process_logging.h" #include "chrome/common/plugin_messages.h" #include "chrome/common/url_constants.h" #include "chrome/plugin/npobject_proxy.h" #include "chrome/plugin/npobject_util.h" #include "chrome/plugin/plugin_channel.h" #include "chrome/plugin/plugin_thread.h" #include "chrome/plugin/webplugin_delegate_stub.h" #include "skia/ext/platform_device.h" #include "third_party/WebKit/WebKit/chromium/public/WebBindings.h" #include "webkit/glue/plugins/webplugin_delegate_impl.h" using WebKit::WebBindings; using webkit_glue::WebPluginResourceClient; typedef std::map ContextMap; static ContextMap& GetContextMap() { return *Singleton::get(); } WebPluginProxy::WebPluginProxy( PluginChannel* channel, int route_id, const GURL& page_url, gfx::NativeViewId containing_window, int host_render_view_routing_id) : channel_(channel), route_id_(route_id), cp_browsing_context_(0), window_npobject_(NULL), plugin_element_(NULL), delegate_(NULL), waiting_for_paint_(false), containing_window_(containing_window), page_url_(page_url), host_render_view_routing_id_(host_render_view_routing_id), ALLOW_THIS_IN_INITIALIZER_LIST(runnable_method_factory_(this)) { } WebPluginProxy::~WebPluginProxy() { if (cp_browsing_context_) GetContextMap().erase(cp_browsing_context_); } bool WebPluginProxy::Send(IPC::Message* msg) { return channel_->Send(msg); } void WebPluginProxy::SetWindow(gfx::PluginWindowHandle window) { Send(new PluginHostMsg_SetWindow(route_id_, window)); } void WebPluginProxy::WillDestroyWindow(gfx::PluginWindowHandle window) { #if defined(OS_WIN) PluginThread::current()->Send( new PluginProcessHostMsg_PluginWindowDestroyed( window, ::GetParent(window))); #elif defined(OS_LINUX) // Nothing to do. #else NOTIMPLEMENTED(); #endif } #if defined(OS_WIN) void WebPluginProxy::SetWindowlessPumpEvent(HANDLE pump_messages_event) { HANDLE pump_messages_event_for_renderer = NULL; DuplicateHandle(GetCurrentProcess(), pump_messages_event, channel_->renderer_handle(), &pump_messages_event_for_renderer, 0, FALSE, DUPLICATE_SAME_ACCESS); DCHECK(pump_messages_event_for_renderer != NULL); Send(new PluginHostMsg_SetWindowlessPumpEvent( route_id_, pump_messages_event_for_renderer)); } #endif void WebPluginProxy::CancelResource(int id) { Send(new PluginHostMsg_CancelResource(route_id_, id)); resource_clients_.erase(id); } void WebPluginProxy::Invalidate() { gfx::Rect rect(0, 0, delegate_->GetRect().width(), delegate_->GetRect().height()); InvalidateRect(rect); } void WebPluginProxy::InvalidateRect(const gfx::Rect& rect) { #if defined(OS_MACOSX) // Some plugins will send invalidates larger than their own rect when // offscreen, so constrain invalidates to the plugin rect. gfx::Rect plugin_rect = delegate_->GetRect(); plugin_rect.set_origin(gfx::Point(0, 0)); const gfx::Rect invalidate_rect(rect.Intersect(plugin_rect)); #else const gfx::Rect invalidate_rect(rect); #endif damaged_rect_ = damaged_rect_.Union(invalidate_rect); // Ignore NPN_InvalidateRect calls with empty rects. Also don't send an // invalidate if it's outside the clipping region, since if we did it won't // lead to a paint and we'll be stuck waiting forever for a DidPaint response. // // TODO(piman): There is a race condition here, because this test assumes // that when the paint actually occurs, the clip rect will not have changed. // This is not true because scrolling (or window resize) could occur and be // handled by the renderer before it receives the InvalidateRect message, // changing the clip rect and then not painting. if (invalidate_rect.IsEmpty() || !delegate_->GetClipRect().Intersects(invalidate_rect)) return; // Only send a single InvalidateRect message at a time. From DidPaint we // will dispatch an additional InvalidateRect message if necessary. if (!waiting_for_paint_) { waiting_for_paint_ = true; // Invalidates caused by calls to NPN_InvalidateRect/NPN_InvalidateRgn // need to be painted asynchronously as per the NPAPI spec. MessageLoop::current()->PostTask(FROM_HERE, runnable_method_factory_.NewRunnableMethod( &WebPluginProxy::OnPaint, damaged_rect_)); damaged_rect_ = gfx::Rect(); } } NPObject* WebPluginProxy::GetWindowScriptNPObject() { if (window_npobject_) return WebBindings::retainObject(window_npobject_); int npobject_route_id = channel_->GenerateRouteID(); bool success = false; intptr_t npobject_ptr; Send(new PluginHostMsg_GetWindowScriptNPObject( route_id_, npobject_route_id, &success, &npobject_ptr)); if (!success) return NULL; window_npobject_ = NPObjectProxy::Create( channel_, npobject_route_id, npobject_ptr, containing_window_, page_url_); return window_npobject_; } NPObject* WebPluginProxy::GetPluginElement() { if (plugin_element_) return WebBindings::retainObject(plugin_element_); int npobject_route_id = channel_->GenerateRouteID(); bool success = false; intptr_t npobject_ptr; Send(new PluginHostMsg_GetPluginElement( route_id_, npobject_route_id, &success, &npobject_ptr)); if (!success) return NULL; plugin_element_ = NPObjectProxy::Create( channel_, npobject_route_id, npobject_ptr, containing_window_, page_url_); return plugin_element_; } void WebPluginProxy::SetCookie(const GURL& url, const GURL& first_party_for_cookies, const std::string& cookie) { Send(new PluginHostMsg_SetCookie(route_id_, url, first_party_for_cookies, cookie)); } std::string WebPluginProxy::GetCookies(const GURL& url, const GURL& first_party_for_cookies) { std::string cookies; Send(new PluginHostMsg_GetCookies(route_id_, url, first_party_for_cookies, &cookies)); return cookies; } void WebPluginProxy::ShowModalHTMLDialog(const GURL& url, int width, int height, const std::string& json_arguments, std::string* json_retval) { PluginHostMsg_ShowModalHTMLDialog* msg = new PluginHostMsg_ShowModalHTMLDialog( route_id_, url, width, height, json_arguments, json_retval); // Pump messages while waiting for a response (which won't come until the // dialog is closed). This avoids a deadlock. msg->EnableMessagePumping(); Send(msg); } void WebPluginProxy::OnMissingPluginStatus(int status) { Send(new PluginHostMsg_MissingPluginStatus(route_id_, status)); } CPBrowsingContext WebPluginProxy::GetCPBrowsingContext() { if (cp_browsing_context_ == 0) { Send(new PluginHostMsg_GetCPBrowsingContext(route_id_, &cp_browsing_context_)); GetContextMap()[cp_browsing_context_] = this; } return cp_browsing_context_; } WebPluginProxy* WebPluginProxy::FromCPBrowsingContext( CPBrowsingContext context) { return GetContextMap()[context]; } WebPluginResourceClient* WebPluginProxy::GetResourceClient(int id) { ResourceClientMap::iterator iterator = resource_clients_.find(id); // The IPC messages which deal with streams are now asynchronous. It is // now possible to receive stream messages from the renderer for streams // which may have been cancelled by the plugin. if (iterator == resource_clients_.end()) { return NULL; } return iterator->second; } int WebPluginProxy::GetRendererId() { if (channel_.get()) return channel_->renderer_id(); return -1; } void WebPluginProxy::DidPaint() { // If we have an accumulated damaged rect, then check to see if we need to // send out another InvalidateRect message. waiting_for_paint_ = false; if (!damaged_rect_.IsEmpty()) InvalidateRect(damaged_rect_); } void WebPluginProxy::OnResourceCreated(int resource_id, HANDLE cookie) { WebPluginResourceClient* resource_client = reinterpret_cast(cookie); if (!resource_client) { NOTREACHED(); return; } DCHECK(resource_clients_.find(resource_id) == resource_clients_.end()); resource_clients_[resource_id] = resource_client; } void WebPluginProxy::HandleURLRequest(const char *method, bool is_javascript_url, const char* target, unsigned int len, const char* buf, bool is_file_data, bool notify, const char* url, intptr_t notify_data, bool popups_allowed) { if (!url) { NOTREACHED(); return; } if (!target && (0 == base::strcasecmp(method, "GET"))) { // Please refer to https://bugzilla.mozilla.org/show_bug.cgi?id=366082 // for more details on this. if (delegate_->GetQuirks() & WebPluginDelegateImpl::PLUGIN_QUIRK_BLOCK_NONSTANDARD_GETURL_REQUESTS) { GURL request_url(url); if (!request_url.SchemeIs(chrome::kHttpScheme) && !request_url.SchemeIs(chrome::kHttpsScheme) && !request_url.SchemeIs(chrome::kFtpScheme)) { return; } } } PluginHostMsg_URLRequest_Params params; params.method = method; params.is_javascript_url = is_javascript_url; if (target) params.target = std::string(target); if (len) { params.buffer.resize(len); memcpy(¶ms.buffer.front(), buf, len); } params.is_file_data = is_file_data; params.notify = notify; params.url = url; params.notify_data = notify_data; params.popups_allowed = popups_allowed; Send(new PluginHostMsg_URLRequest(route_id_, params)); } bool WebPluginProxy::GetDragData(struct NPObject* event, bool add_data, int32* identity, int32* event_id, std::string* type, std::string* data) { DCHECK(event); NPObjectProxy* proxy = NPObjectProxy::GetProxy(event); if (!proxy) // NPObject* event should have/be a renderer proxy. return false; NPVariant_Param event_param; event_param.type = NPVARIANT_PARAM_OBJECT_POINTER; event_param.npobject_pointer = proxy->npobject_ptr(); if (!event_param.npobject_pointer) return false; std::vector values; bool success = false; Send(new PluginHostMsg_GetDragData(route_id_, event_param, add_data, &values, &success)); if (!success) return false; DCHECK(values.size() == 4); DCHECK(values[0].type == NPVARIANT_PARAM_INT); *identity = static_cast(values[0].int_value); DCHECK(values[1].type == NPVARIANT_PARAM_INT); *event_id = static_cast(values[1].int_value); DCHECK(values[2].type == NPVARIANT_PARAM_STRING); type->swap(values[2].string_value); if (add_data && (values[3].type == NPVARIANT_PARAM_STRING)) data->swap(values[3].string_value); return true; } bool WebPluginProxy::SetDropEffect(struct NPObject* event, int effect) { DCHECK(event); NPObjectProxy* proxy = NPObjectProxy::GetProxy(event); if (!proxy) // NPObject* event should have/be a renderer proxy. return false; NPVariant_Param event_param; event_param.type = NPVARIANT_PARAM_OBJECT_POINTER; event_param.npobject_pointer = proxy->npobject_ptr(); if (!event_param.npobject_pointer) return false; bool success = false; Send(new PluginHostMsg_SetDropEffect(route_id_, event_param, effect, &success)); return success; } void WebPluginProxy::Paint(const gfx::Rect& rect) { #if defined(OS_WIN) || defined(OS_LINUX) if (!windowless_canvas_.get()) return; #elif defined(OS_MACOSX) if (!windowless_context_.get()) return; #endif // Clear the damaged area so that if the plugin doesn't paint there we won't // end up with the old values. gfx::Rect offset_rect = rect; offset_rect.Offset(delegate_->GetRect().origin()); #if defined(OS_WIN) || defined(OS_LINUX) windowless_canvas_->save(); // The given clip rect is relative to the plugin coordinate system. SkRect sk_rect = { SkIntToScalar(rect.x()), SkIntToScalar(rect.y()), SkIntToScalar(rect.right()), SkIntToScalar(rect.bottom()) }; windowless_canvas_->clipRect(sk_rect); // Setup the background. if (background_canvas_.get()) { // When a background canvas is given, we're in transparent mode. This means // the plugin wants to have the image of the page in the canvas it's drawing // into (which is windowless_canvas_) so it can do blending. So we copy the // background bitmap into the windowless_canvas_. const SkBitmap& background_bitmap = background_canvas_->getTopPlatformDevice().accessBitmap(false); windowless_canvas_->drawBitmap(background_bitmap, 0, 0); } else { // In non-transparent mode, the plugin doesn't care what's underneath, so we // can just give it black. SkPaint black_fill_paint; black_fill_paint.setARGB(0xFF, 0x00, 0x00, 0x00); windowless_canvas_->drawPaint(black_fill_paint); } // Bring the windowless_canvas_ into the window coordinate system, which is // how the plugin expects to draw (since the windowless API was originally // designed just for scribbling over the web page). windowless_canvas_->translate(SkIntToScalar(-delegate_->GetRect().x()), SkIntToScalar(-delegate_->GetRect().y())); // Before we send the invalidate, paint so that renderer uses the updated // bitmap. delegate_->Paint(windowless_canvas_.get(), offset_rect); windowless_canvas_->restore(); #elif defined(OS_MACOSX) CGContextSaveGState(windowless_context_); if (!background_context_.get()) { CGContextSetFillColorWithColor(windowless_context_, CGColorGetConstantColor(kCGColorBlack)); CGContextFillRect(windowless_context_, rect.ToCGRect()); } else { scoped_cftyperef image( CGBitmapContextCreateImage(background_context_)); CGRect source_rect = rect.ToCGRect(); // Flip the rect we use to pull from the canvas, since it's upside-down. source_rect.origin.y = CGImageGetHeight(image) - rect.y() - rect.height(); scoped_cftyperef sub_image( CGImageCreateWithImageInRect(image, source_rect)); CGContextDrawImage(windowless_context_, rect.ToCGRect(), sub_image); } CGContextClipToRect(windowless_context_, rect.ToCGRect()); delegate_->Paint(windowless_context_, rect); CGContextRestoreGState(windowless_context_); #endif } void WebPluginProxy::UpdateGeometry( const gfx::Rect& window_rect, const gfx::Rect& clip_rect, const TransportDIB::Handle& windowless_buffer, const TransportDIB::Handle& background_buffer #if defined(OS_MACOSX) , int ack_key #endif ) { gfx::Rect old = delegate_->GetRect(); gfx::Rect old_clip_rect = delegate_->GetClipRect(); delegate_->UpdateGeometry(window_rect, clip_rect); if (TransportDIB::is_valid(windowless_buffer)) { // The plugin's rect changed, so now we have a new buffer to draw into. SetWindowlessBuffer(windowless_buffer, background_buffer); } // Send over any pending invalidates which occured when the plugin was // off screen. if (delegate_->IsWindowless() && !clip_rect.IsEmpty() && old_clip_rect.IsEmpty() && !damaged_rect_.IsEmpty()) { InvalidateRect(damaged_rect_); } #if defined(OS_MACOSX) // The renderer is expecting an ACK message if ack_key is not -1. if (ack_key != -1) { Send(new PluginHostMsg_UpdateGeometry_ACK(route_id_, ack_key)); } #endif } #if defined(OS_WIN) void WebPluginProxy::SetWindowlessBuffer( const TransportDIB::Handle& windowless_buffer, const TransportDIB::Handle& background_buffer) { // Create a canvas that will reference the shared bits. We have to handle // errors here since we're mapping a large amount of memory that may not fit // in our address space, or go wrong in some other way. windowless_canvas_.reset(new skia::PlatformCanvas); if (!windowless_canvas_->initialize( delegate_->GetRect().width(), delegate_->GetRect().height(), true, win_util::GetSectionFromProcess(windowless_buffer, channel_->renderer_handle(), false))) { windowless_canvas_.reset(); background_canvas_.reset(); return; } if (background_buffer) { background_canvas_.reset(new skia::PlatformCanvas); if (!background_canvas_->initialize( delegate_->GetRect().width(), delegate_->GetRect().height(), true, win_util::GetSectionFromProcess(background_buffer, channel_->renderer_handle(), false))) { windowless_canvas_.reset(); background_canvas_.reset(); return; } } } #elif defined(OS_MACOSX) void WebPluginProxy::SetWindowlessBuffer( const TransportDIB::Handle& windowless_buffer, const TransportDIB::Handle& background_buffer) { // Convert the shared memory handle to a handle that works in our process, // and then use that to create a CGContextRef. windowless_dib_.reset(TransportDIB::Map(windowless_buffer)); background_dib_.reset(TransportDIB::Map(background_buffer)); windowless_context_.reset(CGBitmapContextCreate( windowless_dib_->memory(), delegate_->GetRect().width(), delegate_->GetRect().height(), 8, 4 * delegate_->GetRect().width(), mac_util::GetSystemColorSpace(), kCGImageAlphaPremultipliedFirst | kCGBitmapByteOrder32Host)); CGContextTranslateCTM(windowless_context_, 0, delegate_->GetRect().height()); CGContextScaleCTM(windowless_context_, 1, -1); if (background_dib_.get()) { background_context_.reset(CGBitmapContextCreate( background_dib_->memory(), delegate_->GetRect().width(), delegate_->GetRect().height(), 8, 4 * delegate_->GetRect().width(), mac_util::GetSystemColorSpace(), kCGImageAlphaPremultipliedFirst | kCGBitmapByteOrder32Host)); CGContextTranslateCTM(background_context_, 0, delegate_->GetRect().height()); CGContextScaleCTM(background_context_, 1, -1); } static_cast(delegate_)->UpdateContext( windowless_context_); } #elif defined(OS_LINUX) void WebPluginProxy::SetWindowlessBuffer( const TransportDIB::Handle& windowless_buffer, const TransportDIB::Handle& background_buffer) { int width = delegate_->GetRect().width(); int height = delegate_->GetRect().height(); windowless_dib_.reset(TransportDIB::Map(windowless_buffer)); if (windowless_dib_.get()) { windowless_canvas_.reset(windowless_dib_->GetPlatformCanvas(width, height)); } else { // This can happen if the renderer has already destroyed the TransportDIB // by the time we receive the handle, e.g. in case of multiple resizes. windowless_canvas_.reset(); } background_dib_.reset(TransportDIB::Map(background_buffer)); if (background_dib_.get()) { background_canvas_.reset(background_dib_->GetPlatformCanvas(width, height)); } else { background_canvas_.reset(); } } #endif void WebPluginProxy::CancelDocumentLoad() { Send(new PluginHostMsg_CancelDocumentLoad(route_id_)); } void WebPluginProxy::InitiateHTTPRangeRequest(const char* url, const char* range_info, intptr_t existing_stream, bool notify_needed, intptr_t notify_data) { Send(new PluginHostMsg_InitiateHTTPRangeRequest(route_id_, url, range_info, existing_stream, notify_needed, notify_data)); } void WebPluginProxy::SetDeferResourceLoading(int resource_id, bool defer) { Send(new PluginHostMsg_DeferResourceLoading(route_id_, resource_id, defer)); } void WebPluginProxy::OnPaint(const gfx::Rect& damaged_rect) { child_process_logging::SetActiveURL(page_url_); Paint(damaged_rect); Send(new PluginHostMsg_InvalidateRect(route_id_, damaged_rect)); } bool WebPluginProxy::IsOffTheRecord() { return channel_->off_the_record(); } void WebPluginProxy::ResourceClientDeleted( WebPluginResourceClient* resource_client) { ResourceClientMap::iterator index = resource_clients_.begin(); while (index != resource_clients_.end()) { WebPluginResourceClient* client = (*index).second; if (client == resource_client) { resource_clients_.erase(index++); } else { index++; } } }