1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "sandbox/src/sync_interception.h"
#include "sandbox/src/crosscall_client.h"
#include "sandbox/src/ipc_tags.h"
#include "sandbox/src/policy_params.h"
#include "sandbox/src/policy_target.h"
#include "sandbox/src/sandbox_factory.h"
#include "sandbox/src/sandbox_nt_util.h"
#include "sandbox/src/sharedmem_ipc_client.h"
#include "sandbox/src/target_services.h"
namespace sandbox {
HANDLE WINAPI TargetCreateEventW(CreateEventWFunction orig_CreateEvent,
LPSECURITY_ATTRIBUTES security_attributes,
BOOL manual_reset, BOOL initial_state,
LPCWSTR name) {
// Check if the process can create it first.
HANDLE handle = orig_CreateEvent(security_attributes, manual_reset,
initial_state, name);
DWORD original_error = ::GetLastError();
if (NULL != handle)
return handle;
// We don't trust that the IPC can work this early.
if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled())
return NULL;
do {
if (security_attributes)
break;
void* memory = GetGlobalIPCMemory();
if (NULL == memory)
break;
CountedParameterSet<NameBased> params;
params[NameBased::NAME] = ParamPickerMake(name);
if (!QueryBroker(IPC_CREATEEVENT_TAG, params.GetBase()))
break;
SharedMemIPCClient ipc(memory);
CrossCallReturn answer = {0};
ResultCode code = CrossCall(ipc, IPC_CREATEEVENT_TAG, name, manual_reset,
initial_state, &answer);
if (SBOX_ALL_OK != code)
break;
::SetLastError(answer.win32_result);
return answer.handle;
} while (false);
::SetLastError(original_error);
return NULL;
}
// Interception of OpenEventW on the child process.
// It should never be called directly
HANDLE WINAPI TargetOpenEventW(OpenEventWFunction orig_OpenEvent,
ACCESS_MASK desired_access, BOOL inherit_handle,
LPCWSTR name) {
// Check if the process can open it first.
HANDLE handle = orig_OpenEvent(desired_access, inherit_handle, name);
DWORD original_error = ::GetLastError();
if (NULL != handle)
return handle;
// We don't trust that the IPC can work this early.
if (!SandboxFactory::GetTargetServices()->GetState()->InitCalled())
return NULL;
do {
void* memory = GetGlobalIPCMemory();
if (NULL == memory)
break;
uint32 inherit_handle_ipc = inherit_handle;
CountedParameterSet<OpenEventParams> params;
params[OpenEventParams::NAME] = ParamPickerMake(name);
params[OpenEventParams::ACCESS] = ParamPickerMake(desired_access);
if (!QueryBroker(IPC_OPENEVENT_TAG, params.GetBase()))
break;
SharedMemIPCClient ipc(memory);
CrossCallReturn answer = {0};
ResultCode code = CrossCall(ipc, IPC_OPENEVENT_TAG, name, desired_access,
inherit_handle_ipc, &answer);
if (SBOX_ALL_OK != code)
break;
::SetLastError(answer.win32_result);
return answer.handle;
} while (false);
::SetLastError(original_error);
return NULL;
}
} // namespace sandbox
|
