1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef PPAPI_C_PRIVATE_PPB_NACL_UTIL_PRIVATE_H_
#define PPAPI_C_PRIVATE_PPB_NACL_UTIL_PRIVATE_H_
#include "ppapi/c/pp_resource.h"
#include "ppapi/c/pp_stdint.h"
#define PPB_NACL_PRIVATE_INTERFACE "PPB_NaCl(Private);0.3"
struct PPB_NaCl_Private {
// This function launches NaCl's sel_ldr process. On success, the function
// returns true, otherwise it returns false. When it returns true, it will
// write |socket_count| nacl::Handles to imc_handles and will write the
// nacl::Handle of the created process to |nacl_process_handle|. Finally,
// the function will write the process ID of the created process to
// |nacl_process_id|. Unless EnableBackgroundSelLdrLaunch is called, this
// method must be invoked from the main thread.
bool (*LaunchSelLdr)(const char* alleged_url, int socket_count,
void* imc_handles, void* nacl_process_handle,
int* nacl_process_id);
// On POSIX systems, this function returns the file descriptor of
// /dev/urandom. On non-POSIX systems, this function returns 0.
int (*UrandomFD)(void);
// Whether the Pepper 3D interfaces should be disabled in the NaCl PPAPI
// proxy. This is so paranoid admins can effectively prevent untrusted shader
// code to be processed by the graphics stack.
bool (*Are3DInterfacesDisabled)();
// Enables the creation of sel_ldr processes from other than the main thread.
void (*EnableBackgroundSelLdrLaunch)();
// This is Windows-specific. This is a replacement for
// DuplicateHandle() for use inside the Windows sandbox. Note that
// we provide this via dependency injection only to avoid the
// linkage problems that occur because the NaCl plugin is built as a
// separate DLL/DSO (see
// http://code.google.com/p/chromium/issues/detail?id=114439#c8).
// We use void* rather than the Windows HANDLE type to avoid an
// #ifdef here. We use int rather than PP_Bool/bool so that this is
// usable with NaClSetBrokerDuplicateHandleFunc() without further
// wrapping.
int (*BrokerDuplicateHandle)(void* source_handle,
uint32_t process_id,
void** target_handle,
uint32_t desired_access,
uint32_t options);
};
#endif // PPAPI_C_PRIVATE_PPB_NACL_PRIVATE_H_
|
