mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
125 lines
3.4 KiB
C++
125 lines
3.4 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*-
|
|
* vim: set sw=4 ts=8 et tw=80 :
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "mozilla/ipc/IOThreadChild.h"
|
|
|
|
#include "ContentProcess.h"
|
|
|
|
#if defined(XP_WIN) && defined(MOZ_CONTENT_SANDBOX)
|
|
#include "mozilla/Preferences.h"
|
|
#include "nsDirectoryService.h"
|
|
#include "nsDirectoryServiceDefs.h"
|
|
#endif
|
|
|
|
using mozilla::ipc::IOThreadChild;
|
|
|
|
namespace mozilla {
|
|
namespace dom {
|
|
|
|
#if defined(XP_WIN) && defined(MOZ_CONTENT_SANDBOX)
|
|
static already_AddRefed<nsIFile>
|
|
GetLowIntegrityTemp()
|
|
{
|
|
MOZ_ASSERT(nsDirectoryService::gService,
|
|
"GetLowIntegrityTemp relies on nsDirectoryService being initialized");
|
|
|
|
// A low integrity temp only currently makes sense for sandbox pref level 1.
|
|
if (Preferences::GetInt("security.sandbox.content.level") != 1) {
|
|
return nullptr;
|
|
}
|
|
|
|
nsCOMPtr<nsIFile> lowIntegrityTemp;
|
|
nsresult rv = nsDirectoryService::gService->Get(NS_WIN_LOW_INTEGRITY_TEMP,
|
|
NS_GET_IID(nsIFile),
|
|
getter_AddRefs(lowIntegrityTemp));
|
|
if (NS_WARN_IF(NS_FAILED(rv))) {
|
|
return nullptr;
|
|
}
|
|
|
|
return lowIntegrityTemp.forget();
|
|
}
|
|
|
|
static void
|
|
SetUpSandboxEnvironment()
|
|
{
|
|
MOZ_ASSERT(nsDirectoryService::gService,
|
|
"SetUpSandboxEnvironment relies on nsDirectoryService being initialized");
|
|
|
|
// Setup to use a low integrity temp if available.
|
|
nsCOMPtr<nsIFile> lowIntegrityTemp = GetLowIntegrityTemp();
|
|
if (!lowIntegrityTemp) {
|
|
return;
|
|
}
|
|
|
|
// Undefine returns a failure if the property is not already set.
|
|
unused << nsDirectoryService::gService->Undefine(NS_OS_TEMP_DIR);
|
|
nsresult rv = nsDirectoryService::gService->Set(NS_OS_TEMP_DIR, lowIntegrityTemp);
|
|
if (NS_WARN_IF(NS_FAILED(rv))) {
|
|
return;
|
|
}
|
|
|
|
// Set TEMP and TMP environment variables.
|
|
nsAutoString lowIntegrityTempPath;
|
|
rv = lowIntegrityTemp->GetPath(lowIntegrityTempPath);
|
|
if (NS_WARN_IF(NS_FAILED(rv))) {
|
|
return;
|
|
}
|
|
|
|
bool setOK = SetEnvironmentVariableW(L"TEMP", lowIntegrityTempPath.get());
|
|
NS_WARN_IF_FALSE(setOK, "Failed to set TEMP to low integrity temp path");
|
|
setOK = SetEnvironmentVariableW(L"TMP", lowIntegrityTempPath.get());
|
|
NS_WARN_IF_FALSE(setOK, "Failed to set TMP to low integrity temp path");
|
|
}
|
|
|
|
static void
|
|
CleanUpSandboxEnvironment()
|
|
{
|
|
// Remove low integrity temp if it exists.
|
|
nsCOMPtr<nsIFile> lowIntegrityTemp = GetLowIntegrityTemp();
|
|
if (!lowIntegrityTemp) {
|
|
return;
|
|
}
|
|
|
|
// Don't check the return value as the directory will only have been created
|
|
// if it has been used.
|
|
unused << lowIntegrityTemp->Remove(/* aRecursive */ true);
|
|
}
|
|
#endif
|
|
|
|
void
|
|
ContentProcess::SetAppDir(const nsACString& aPath)
|
|
{
|
|
mXREEmbed.SetAppDir(aPath);
|
|
}
|
|
|
|
bool
|
|
ContentProcess::Init()
|
|
{
|
|
mContent.Init(IOThreadChild::message_loop(),
|
|
ParentPid(),
|
|
IOThreadChild::channel());
|
|
mXREEmbed.Start();
|
|
mContent.InitXPCOM();
|
|
|
|
#if defined(XP_WIN) && defined(MOZ_CONTENT_SANDBOX)
|
|
SetUpSandboxEnvironment();
|
|
#endif
|
|
|
|
return true;
|
|
}
|
|
|
|
void
|
|
ContentProcess::CleanUp()
|
|
{
|
|
#if defined(XP_WIN) && defined(MOZ_CONTENT_SANDBOX)
|
|
CleanUpSandboxEnvironment();
|
|
#endif
|
|
mXREEmbed.Stop();
|
|
}
|
|
|
|
} // namespace dom
|
|
} // namespace mozilla
|