mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
f99be51d16
I did this wrong before. Making this a SecurityWrapper means that the caller does not subsumes the target, and that the target therefore needs to be protected from the caller. But GentlyOpaque was supposed to be an analog of PermissiveXray for use when no useful XrayTraits exist, so it should behave similarly. If we make this a Filtering Security Wrapper, we get a bunch of assertions where we expect CheckedUnwrap to succeed for a chrome-side wrapper. And we can't making it a Filtering Non-Security Wrapper, because then the filtering policy isn't even consulted (an optimization in jsproxy.cpp). Really, we want all of the Xray machinery (like the ability to waive and to place expandos), and we just don't want to resolve any properties. This patch does this.
226 lines
9.8 KiB
C++
226 lines
9.8 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
|
|
/* vim: set ts=8 sts=4 et sw=4 tw=99: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#ifndef XrayWrapper_h
|
|
#define XrayWrapper_h
|
|
|
|
#include "mozilla/Attributes.h"
|
|
|
|
#include "jswrapper.h"
|
|
|
|
// Xray wrappers re-resolve the original native properties on the native
|
|
// object and always directly access to those properties.
|
|
// Because they work so differently from the rest of the wrapper hierarchy,
|
|
// we pull them out of the Wrapper inheritance hierarchy and create a
|
|
// little world around them.
|
|
|
|
namespace xpc {
|
|
|
|
bool
|
|
holder_get(JSContext *cx, JS::HandleObject holder, JS::HandleId id, JS::MutableHandleValue vp);
|
|
bool
|
|
holder_set(JSContext *cx, JS::HandleObject holder, JS::HandleId id, bool strict,
|
|
JS::MutableHandleValue vp);
|
|
|
|
namespace XrayUtils {
|
|
|
|
bool IsXPCWNHolderClass(const JSClass *clasp);
|
|
|
|
bool CloneExpandoChain(JSContext *cx, JSObject *src, JSObject *dst);
|
|
|
|
bool
|
|
IsTransparent(JSContext *cx, JS::HandleObject wrapper, JS::HandleId id);
|
|
|
|
JSObject *
|
|
GetNativePropertiesObject(JSContext *cx, JSObject *wrapper);
|
|
|
|
bool
|
|
IsXrayResolving(JSContext *cx, JS::HandleObject wrapper, JS::HandleId id);
|
|
|
|
bool
|
|
HasNativeProperty(JSContext *cx, JS::HandleObject wrapper, JS::HandleId id,
|
|
bool *hasProp);
|
|
}
|
|
|
|
class XrayTraits;
|
|
class XPCWrappedNativeXrayTraits;
|
|
class DOMXrayTraits;
|
|
class JSXrayTraits;
|
|
class OpaqueXrayTraits;
|
|
|
|
|
|
enum XrayType {
|
|
XrayForDOMObject,
|
|
XrayForWrappedNative,
|
|
XrayForJSObject,
|
|
XrayForOpaqueObject,
|
|
NotXray
|
|
};
|
|
|
|
XrayType GetXrayType(JSObject *obj);
|
|
XrayTraits* GetXrayTraits(JSObject *obj);
|
|
|
|
// NB: Base *must* derive from JSProxyHandler
|
|
template <typename Base, typename Traits = XPCWrappedNativeXrayTraits >
|
|
class XrayWrapper : public Base {
|
|
public:
|
|
XrayWrapper(unsigned flags);
|
|
virtual ~XrayWrapper();
|
|
|
|
/* Fundamental proxy traps. */
|
|
virtual bool isExtensible(JSContext *cx, JS::Handle<JSObject*> wrapper, bool *extensible) const MOZ_OVERRIDE;
|
|
virtual bool preventExtensions(JSContext *cx, JS::Handle<JSObject*> wrapper) const MOZ_OVERRIDE;
|
|
virtual bool getPropertyDescriptor(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<jsid> id,
|
|
JS::MutableHandle<JSPropertyDescriptor> desc) const MOZ_OVERRIDE;
|
|
virtual bool getOwnPropertyDescriptor(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<jsid> id,
|
|
JS::MutableHandle<JSPropertyDescriptor> desc) const MOZ_OVERRIDE;
|
|
virtual bool defineProperty(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<jsid> id,
|
|
JS::MutableHandle<JSPropertyDescriptor> desc) const MOZ_OVERRIDE;
|
|
virtual bool getOwnPropertyNames(JSContext *cx, JS::Handle<JSObject*> wrapper,
|
|
JS::AutoIdVector &props) const MOZ_OVERRIDE;
|
|
virtual bool delete_(JSContext *cx, JS::Handle<JSObject*> wrapper,
|
|
JS::Handle<jsid> id, bool *bp) const MOZ_OVERRIDE;
|
|
virtual bool enumerate(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::AutoIdVector &props) const MOZ_OVERRIDE;
|
|
|
|
/* Derived proxy traps. */
|
|
virtual bool get(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<JSObject*> receiver,
|
|
JS::Handle<jsid> id, JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
virtual bool set(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<JSObject*> receiver,
|
|
JS::Handle<jsid> id, bool strict, JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
virtual bool has(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<jsid> id,
|
|
bool *bp) const MOZ_OVERRIDE;
|
|
virtual bool hasOwn(JSContext *cx, JS::Handle<JSObject*> wrapper, JS::Handle<jsid> id,
|
|
bool *bp) const MOZ_OVERRIDE;
|
|
virtual bool keys(JSContext *cx, JS::Handle<JSObject*> wrapper,
|
|
JS::AutoIdVector &props) const MOZ_OVERRIDE;
|
|
virtual bool iterate(JSContext *cx, JS::Handle<JSObject*> wrapper, unsigned flags,
|
|
JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
|
|
virtual bool call(JSContext *cx, JS::Handle<JSObject*> wrapper,
|
|
const JS::CallArgs &args) const MOZ_OVERRIDE;
|
|
virtual bool construct(JSContext *cx, JS::Handle<JSObject*> wrapper,
|
|
const JS::CallArgs &args) const MOZ_OVERRIDE;
|
|
|
|
virtual const char *className(JSContext *cx, JS::HandleObject proxy) const MOZ_OVERRIDE;
|
|
virtual bool defaultValue(JSContext *cx, JS::HandleObject wrapper,
|
|
JSType hint, JS::MutableHandleValue vp)
|
|
const MOZ_OVERRIDE;
|
|
|
|
virtual bool getPrototypeOf(JSContext *cx, JS::HandleObject wrapper,
|
|
JS::MutableHandleObject protop) const MOZ_OVERRIDE;
|
|
virtual bool setPrototypeOf(JSContext *cx, JS::HandleObject wrapper,
|
|
JS::HandleObject proto, bool *bp) const MOZ_OVERRIDE;
|
|
|
|
static const XrayWrapper singleton;
|
|
|
|
private:
|
|
template <bool HasPrototype>
|
|
typename mozilla::EnableIf<HasPrototype, bool>::Type
|
|
getPrototypeOfHelper(JSContext *cx, JS::HandleObject wrapper,
|
|
JS::HandleObject target, JS::MutableHandleObject protop) const
|
|
{
|
|
return Traits::singleton.getPrototypeOf(cx, wrapper, target, protop);
|
|
}
|
|
template <bool HasPrototype>
|
|
typename mozilla::EnableIf<!HasPrototype, bool>::Type
|
|
getPrototypeOfHelper(JSContext *cx, JS::HandleObject wrapper,
|
|
JS::HandleObject target, JS::MutableHandleObject protop) const
|
|
{
|
|
return Base::getPrototypeOf(cx, wrapper, protop);
|
|
}
|
|
bool getPrototypeOfHelper(JSContext *cx, JS::HandleObject wrapper,
|
|
JS::HandleObject target, JS::MutableHandleObject protop) const
|
|
{
|
|
return getPrototypeOfHelper<Traits::HasPrototype>(cx, wrapper, target,
|
|
protop);
|
|
}
|
|
|
|
bool enumerate(JSContext *cx, JS::Handle<JSObject*> wrapper, unsigned flags,
|
|
JS::AutoIdVector &props) const;
|
|
};
|
|
|
|
#define PermissiveXrayXPCWN xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::XPCWrappedNativeXrayTraits>
|
|
#define SecurityXrayXPCWN xpc::XrayWrapper<js::CrossCompartmentSecurityWrapper, xpc::XPCWrappedNativeXrayTraits>
|
|
#define PermissiveXrayDOM xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::DOMXrayTraits>
|
|
#define SecurityXrayDOM xpc::XrayWrapper<js::CrossCompartmentSecurityWrapper, xpc::DOMXrayTraits>
|
|
#define PermissiveXrayJS xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::JSXrayTraits>
|
|
#define PermissiveXrayOpaque xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::OpaqueXrayTraits>
|
|
#define SCSecurityXrayXPCWN xpc::XrayWrapper<js::SameCompartmentSecurityWrapper, xpc::XPCWrappedNativeXrayTraits>
|
|
|
|
class SandboxProxyHandler : public js::Wrapper {
|
|
public:
|
|
SandboxProxyHandler() : js::Wrapper(0)
|
|
{
|
|
}
|
|
|
|
virtual bool getPropertyDescriptor(JSContext *cx, JS::Handle<JSObject*> proxy,
|
|
JS::Handle<jsid> id,
|
|
JS::MutableHandle<JSPropertyDescriptor> desc) const MOZ_OVERRIDE;
|
|
virtual bool getOwnPropertyDescriptor(JSContext *cx, JS::Handle<JSObject*> proxy,
|
|
JS::Handle<jsid> id,
|
|
JS::MutableHandle<JSPropertyDescriptor> desc) const MOZ_OVERRIDE;
|
|
|
|
// We just forward the derived traps to the BaseProxyHandler versions which
|
|
// implement them in terms of the fundamental traps.
|
|
virtual bool has(JSContext *cx, JS::Handle<JSObject*> proxy, JS::Handle<jsid> id,
|
|
bool *bp) const MOZ_OVERRIDE;
|
|
virtual bool hasOwn(JSContext *cx, JS::Handle<JSObject*> proxy, JS::Handle<jsid> id,
|
|
bool *bp) const MOZ_OVERRIDE;
|
|
virtual bool get(JSContext *cx, JS::Handle<JSObject*> proxy, JS::Handle<JSObject*> receiver,
|
|
JS::Handle<jsid> id, JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
virtual bool set(JSContext *cx, JS::Handle<JSObject*> proxy, JS::Handle<JSObject*> receiver,
|
|
JS::Handle<jsid> id, bool strict, JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
virtual bool keys(JSContext *cx, JS::Handle<JSObject*> proxy,
|
|
JS::AutoIdVector &props) const MOZ_OVERRIDE;
|
|
virtual bool iterate(JSContext *cx, JS::Handle<JSObject*> proxy, unsigned flags,
|
|
JS::MutableHandle<JS::Value> vp) const MOZ_OVERRIDE;
|
|
};
|
|
|
|
extern const SandboxProxyHandler sandboxProxyHandler;
|
|
|
|
// A proxy handler that lets us wrap callables and invoke them with
|
|
// the correct this object, while forwarding all other operations down
|
|
// to them directly.
|
|
class SandboxCallableProxyHandler : public js::Wrapper {
|
|
public:
|
|
SandboxCallableProxyHandler() : js::Wrapper(0)
|
|
{
|
|
}
|
|
|
|
virtual bool call(JSContext *cx, JS::Handle<JSObject*> proxy,
|
|
const JS::CallArgs &args) const MOZ_OVERRIDE;
|
|
};
|
|
|
|
extern const SandboxCallableProxyHandler sandboxCallableProxyHandler;
|
|
|
|
class AutoSetWrapperNotShadowing;
|
|
class XPCWrappedNativeXrayTraits;
|
|
|
|
class MOZ_STACK_CLASS ResolvingId {
|
|
public:
|
|
ResolvingId(JSContext *cx, JS::HandleObject wrapper, JS::HandleId id);
|
|
~ResolvingId();
|
|
|
|
bool isXrayShadowing(jsid id);
|
|
bool isResolving(jsid id);
|
|
static ResolvingId* getResolvingId(JSObject *holder);
|
|
static JSObject* getHolderObject(JSObject *wrapper);
|
|
static ResolvingId *getResolvingIdFromWrapper(JSObject *wrapper);
|
|
|
|
private:
|
|
friend class AutoSetWrapperNotShadowing;
|
|
friend class XPCWrappedNativeXrayTraits;
|
|
|
|
JS::HandleId mId;
|
|
JS::RootedObject mHolder;
|
|
ResolvingId *mPrev;
|
|
bool mXrayShadowing;
|
|
};
|
|
|
|
}
|
|
|
|
#endif
|