1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/common/nacl_fork_delegate_linux.h"
#include <signal.h>
#include <stdlib.h>
#include <sys/socket.h>
#include "base/basictypes.h"
#include "base/command_line.h"
#include "base/eintr_wrapper.h"
#include "base/logging.h"
#include "base/file_path.h"
#include "base/path_service.h"
#include "base/process_util.h"
#include "base/third_party/dynamic_annotations/dynamic_annotations.h"
#include "content/common/unix_domain_socket_posix.h"
#include "content/common/zygote_fork_delegate_linux.h"
#include "chrome/common/chrome_paths.h"
#include "chrome/common/chrome_switches.h"
#include "chrome/common/nacl_helper_linux.h"
NaClForkDelegate::NaClForkDelegate()
: ready_(false),
sandboxed_(false),
fd_(-1) {}
const char kNaClHelperAtZero[] = "--at-zero";
void NaClForkDelegate::Init(const bool sandboxed,
const int browserdesc,
const int sandboxdesc) {
VLOG(1) << "NaClForkDelegate::Init()";
int fds[2];
sandboxed_ = sandboxed;
// Confirm a couple hard-wired assumptions.
// The NaCl constants are from chrome/nacl/nacl_linux_helper.h
DCHECK(kNaClBrowserDescriptor == browserdesc);
DCHECK(kNaClSandboxDescriptor == sandboxdesc);
CHECK(socketpair(PF_UNIX, SOCK_SEQPACKET, 0, fds) == 0);
base::file_handle_mapping_vector fds_to_map;
fds_to_map.push_back(std::make_pair(fds[1], kNaClZygoteDescriptor));
fds_to_map.push_back(std::make_pair(sandboxdesc, kNaClSandboxDescriptor));
ready_ = false;
return; // disabling nacl_helper for now
FilePath helper_exe;
FilePath helper_bootstrap_exe;
if (PathService::Get(chrome::FILE_NACL_HELPER, &helper_exe) &&
PathService::Get(chrome::FILE_NACL_HELPER_BOOTSTRAP,
&helper_bootstrap_exe) &&
!RunningOnValgrind()) {
CommandLine cmd_line(helper_bootstrap_exe);
cmd_line.AppendArgPath(helper_exe);
cmd_line.AppendArgNative(kNaClHelperAtZero);
base::LaunchOptions options;
options.fds_to_remap = &fds_to_map;
options.clone_flags = CLONE_FS | SIGCHLD;
ready_ = base::LaunchProcess(cmd_line.argv(), options, NULL);
// parent and error cases are handled below
}
if (HANDLE_EINTR(close(fds[1])) != 0)
LOG(ERROR) << "close(fds[1]) failed";
if (ready_) {
const ssize_t kExpectedLength = strlen(kNaClHelperStartupAck);
char buf[kExpectedLength];
// Wait for ack from nacl_helper, indicating it is ready to help
const ssize_t nread = HANDLE_EINTR(read(fds[0], buf, sizeof(buf)));
if (nread == kExpectedLength &&
memcmp(buf, kNaClHelperStartupAck, nread) == 0) {
// all is well
fd_ = fds[0];
return;
}
LOG(ERROR) << "Bad NaCl helper startup ack (" << nread << " bytes)";
}
// TODO(bradchen): Make this LOG(ERROR) when the NaCl helper
// becomes the default.
ready_ = false;
fd_ = -1;
if (HANDLE_EINTR(close(fds[0])) != 0)
LOG(ERROR) << "close(fds[0]) failed";
}
NaClForkDelegate::~NaClForkDelegate() {
// side effect of close: delegate process will terminate
if (ready_) {
if (HANDLE_EINTR(close(fd_)) != 0)
LOG(ERROR) << "close(fd_) failed";
}
}
bool NaClForkDelegate::CanHelp(const std::string& process_type) {
return (process_type == switches::kNaClLoaderProcess && ready_);
}
pid_t NaClForkDelegate::Fork(const std::vector<int>& fds) {
base::ProcessId naclchild;
VLOG(1) << "NaClForkDelegate::Fork";
DCHECK(fds.size() == kNaClParentFDIndex + 1);
if (!UnixDomainSocket::SendMsg(fd_, kNaClForkRequest,
strlen(kNaClForkRequest), fds)) {
LOG(ERROR) << "NaClForkDelegate::Fork: SendMsg failed";
return -1;
}
int nread = HANDLE_EINTR(read(fd_, &naclchild, sizeof(naclchild)));
if (nread != sizeof(naclchild)) {
LOG(ERROR) << "NaClForkDelegate::Fork: read failed";
return -1;
}
VLOG(1) << "nacl_child is " << naclchild << " (" << nread << " bytes)";
return naclchild;
}
bool NaClForkDelegate::AckChild(const int fd,
const std::string& channel_switch) {
int nwritten = HANDLE_EINTR(write(fd, channel_switch.c_str(),
channel_switch.length()));
if (nwritten != static_cast<int>(channel_switch.length())) {
return false;
}
return true;
}
|
