brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 1 | // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 2 | // Use of this source code is governed by a BSD-style license that can be |
| 3 | // found in the LICENSE file. |
| 4 | |
| 5 | #ifndef IPC_IPC_CHANNEL_POSIX_H_ |
| 6 | #define IPC_IPC_CHANNEL_POSIX_H_ |
| 7 | |
| 8 | #include "ipc/ipc_channel.h" |
| 9 | |
| 10 | #include <sys/socket.h> // for CMSG macros |
| 11 | |
| 12 | #include <queue> |
hubbe@chromium.org | 683920d | 2013-10-15 09:07:00 +0900 | [diff] [blame] | 13 | #include <set> |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 14 | #include <string> |
| 15 | #include <vector> |
| 16 | |
morrita | 39722a3 | 2014-09-30 07:25:54 +0900 | [diff] [blame] | 17 | #include "base/files/scoped_file.h" |
avi@chromium.org | a29af56 | 2013-07-18 08:00:30 +0900 | [diff] [blame] | 18 | #include "base/message_loop/message_loop.h" |
rsesek@chromium.org | 1931971 | 2013-07-24 14:15:24 +0900 | [diff] [blame] | 19 | #include "base/process/process.h" |
brettw@chromium.org | 0e9d0a1 | 2012-03-08 21:30:28 +0900 | [diff] [blame] | 20 | #include "ipc/ipc_channel_reader.h" |
morrita | 33a3590 | 2015-01-15 06:17:06 +0900 | [diff] [blame] | 21 | #include "ipc/ipc_message_attachment_set.h" |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 22 | |
| 23 | namespace IPC { |
| 24 | |
morrita@chromium.org | 844f1c3 | 2014-06-07 15:15:53 +0900 | [diff] [blame] | 25 | class IPC_EXPORT ChannelPosix : public Channel, |
| 26 | public internal::ChannelReader, |
| 27 | public base::MessageLoopForIO::Watcher { |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 28 | public: |
erikchen | 99b3dc0 | 2015-06-17 06:21:04 +0900 | [diff] [blame] | 29 | // |broker| must outlive the newly created object. |
| 30 | ChannelPosix(const IPC::ChannelHandle& channel_handle, |
| 31 | Mode mode, |
| 32 | Listener* listener, |
| 33 | AttachmentBroker* broker); |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 34 | ~ChannelPosix() override; |
morrita@chromium.org | fde2b6b | 2014-06-07 05:13:51 +0900 | [diff] [blame] | 35 | |
| 36 | // Channel implementation |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 37 | bool Connect() override; |
| 38 | void Close() override; |
| 39 | bool Send(Message* message) override; |
erikchen | 99b3dc0 | 2015-06-17 06:21:04 +0900 | [diff] [blame] | 40 | AttachmentBroker* GetAttachmentBroker() override; |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 41 | base::ProcessId GetPeerPID() const override; |
| 42 | base::ProcessId GetSelfPID() const override; |
| 43 | int GetClientFileDescriptor() const override; |
| 44 | base::ScopedFD TakeClientFileDescriptor() override; |
morrita@chromium.org | 844f1c3 | 2014-06-07 15:15:53 +0900 | [diff] [blame] | 45 | |
| 46 | // Returns true if the channel supports listening for connections. |
| 47 | bool AcceptsConnections() const; |
| 48 | |
| 49 | // Returns true if the channel supports listening for connections and is |
| 50 | // currently connected. |
| 51 | bool HasAcceptedConnection() const; |
| 52 | |
| 53 | // Closes any currently connected socket, and returns to a listening state |
| 54 | // for more connections. |
| 55 | void ResetToAcceptingConnectionState(); |
| 56 | |
| 57 | // Returns true if the peer process' effective user id can be determined, in |
| 58 | // which case the supplied peer_euid is updated with it. |
| 59 | bool GetPeerEuid(uid_t* peer_euid) const; |
morrita@chromium.org | fde2b6b | 2014-06-07 05:13:51 +0900 | [diff] [blame] | 60 | |
phajdan.jr@chromium.org | af9455b | 2011-09-20 02:08:12 +0900 | [diff] [blame] | 61 | void CloseClientFileDescriptor(); |
morrita@chromium.org | fde2b6b | 2014-06-07 05:13:51 +0900 | [diff] [blame] | 62 | |
kkania@chromium.org | f37b4e5 | 2011-08-09 15:46:06 +0900 | [diff] [blame] | 63 | static bool IsNamedServerInitialized(const std::string& channel_id); |
perkj | 596cc35 | 2014-12-12 02:27:58 +0900 | [diff] [blame] | 64 | #if defined(OS_LINUX) |
| 65 | static void SetGlobalPid(int pid); |
| 66 | #endif // OS_LINUX |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 67 | |
| 68 | private: |
dmaclach@chromium.org | f146c29 | 2011-02-04 05:35:09 +0900 | [diff] [blame] | 69 | bool CreatePipe(const IPC::ChannelHandle& channel_handle); |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 70 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 71 | bool ProcessOutgoingMessages(); |
| 72 | |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 73 | bool AcceptConnection(); |
| 74 | void ClosePipeOnError(); |
morrita@chromium.org | 15996aa | 2014-08-05 08:44:17 +0900 | [diff] [blame] | 75 | int GetHelloMessageProcId() const; |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 76 | void QueueHelloMessage(); |
hubbe@chromium.org | 683920d | 2013-10-15 09:07:00 +0900 | [diff] [blame] | 77 | void CloseFileDescriptors(Message* msg); |
| 78 | void QueueCloseFDMessage(int fd, int hops); |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 79 | |
brettw@chromium.org | 0e9d0a1 | 2012-03-08 21:30:28 +0900 | [diff] [blame] | 80 | // ChannelReader implementation. |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 81 | ReadState ReadData(char* buffer, int buffer_len, int* bytes_read) override; |
erikchen | f295bbc | 2015-07-28 03:26:14 +0900 | [diff] [blame] | 82 | bool ShouldDispatchInputMessage(Message* msg) override; |
| 83 | bool GetNonBrokeredAttachments(Message* msg) override; |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 84 | bool DidEmptyInputBuffers() override; |
| 85 | void HandleInternalMessage(const Message& msg) override; |
erikchen | cc6ccfc | 2015-07-29 08:16:48 +0900 | [diff] [blame] | 86 | base::ProcessId GetSenderPID() override; |
erikchen | ca630d7 | 2015-07-31 07:26:08 +0900 | [diff] [blame] | 87 | bool IsAttachmentBrokerEndpoint() override; |
brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 88 | |
brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 89 | // Finds the set of file descriptors in the given message. On success, |
| 90 | // appends the descriptors to the input_fds_ member and returns true |
| 91 | // |
| 92 | // Returns false if the message was truncated. In this case, any handles that |
| 93 | // were sent will be closed. |
| 94 | bool ExtractFileDescriptorsFromMsghdr(msghdr* msg); |
| 95 | |
| 96 | // Closes all handles in the input_fds_ list and clears the list. This is |
| 97 | // used to clean up handles in error conditions to avoid leaking the handles. |
| 98 | void ClearInputFDs(); |
| 99 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 100 | // MessageLoopForIO::Watcher implementation. |
dcheng | ef7721a | 2014-10-22 11:29:52 +0900 | [diff] [blame] | 101 | void OnFileCanReadWithoutBlocking(int fd) override; |
| 102 | void OnFileCanWriteWithoutBlocking(int fd) override; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 103 | |
| 104 | Mode mode_; |
| 105 | |
jschuh@chromium.org | a5cd076 | 2012-04-05 11:38:34 +0900 | [diff] [blame] | 106 | base::ProcessId peer_pid_; |
| 107 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 108 | // After accepting one client connection on our server socket we want to |
| 109 | // stop listening. |
xhwang@chromium.org | 0b2c2a5 | 2013-05-01 05:55:03 +0900 | [diff] [blame] | 110 | base::MessageLoopForIO::FileDescriptorWatcher |
| 111 | server_listen_connection_watcher_; |
| 112 | base::MessageLoopForIO::FileDescriptorWatcher read_watcher_; |
| 113 | base::MessageLoopForIO::FileDescriptorWatcher write_watcher_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 114 | |
| 115 | // Indicates whether we're currently blocked waiting for a write to complete. |
| 116 | bool is_blocked_on_write_; |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 117 | bool waiting_connect_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 118 | |
| 119 | // If sending a message blocks then we use this variable |
| 120 | // to keep track of where we are. |
| 121 | size_t message_send_bytes_written_; |
| 122 | |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 123 | // File descriptor we're listening on for new connections if we listen |
| 124 | // for connections. |
morrita | 39722a3 | 2014-09-30 07:25:54 +0900 | [diff] [blame] | 125 | base::ScopedFD server_listen_pipe_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 126 | |
| 127 | // The pipe used for communication. |
morrita | 39722a3 | 2014-09-30 07:25:54 +0900 | [diff] [blame] | 128 | base::ScopedFD pipe_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 129 | |
| 130 | // For a server, the client end of our socketpair() -- the other end of our |
| 131 | // pipe_ that is passed to the client. |
morrita | 39722a3 | 2014-09-30 07:25:54 +0900 | [diff] [blame] | 132 | base::ScopedFD client_pipe_; |
morrita@chromium.org | fde2b6b | 2014-06-07 05:13:51 +0900 | [diff] [blame] | 133 | mutable base::Lock client_pipe_lock_; // Lock that protects |client_pipe_|. |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 134 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 135 | // The "name" of our pipe. On Windows this is the global identifier for |
| 136 | // the pipe. On POSIX it's used as a key in a local map of file descriptors. |
| 137 | std::string pipe_name_; |
| 138 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 139 | // Messages to be sent are queued here. |
| 140 | std::queue<Message*> output_queue_; |
| 141 | |
pkasting@chromium.org | 9687a8f | 2011-09-01 09:50:13 +0900 | [diff] [blame] | 142 | // We assume a worst case: kReadBufferSize bytes of messages, where each |
| 143 | // message has no payload and a full complement of descriptors. |
| 144 | static const size_t kMaxReadFDs = |
| 145 | (Channel::kReadBufferSize / sizeof(IPC::Message::Header)) * |
morrita | 33a3590 | 2015-01-15 06:17:06 +0900 | [diff] [blame] | 146 | MessageAttachmentSet::kMaxDescriptorsPerMessage; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 147 | |
brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 148 | // Buffer size for file descriptors used for recvmsg. On Mac the CMSG macros |
bratell | 88511de | 2015-05-29 22:19:01 +0900 | [diff] [blame] | 149 | // are not constant so we have to pick a "large enough" padding for headers. |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 150 | #if defined(OS_MACOSX) |
bratell | 88511de | 2015-05-29 22:19:01 +0900 | [diff] [blame] | 151 | static const size_t kMaxReadFDBuffer = 1024 + sizeof(int) * kMaxReadFDs; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 152 | #else |
brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 153 | static const size_t kMaxReadFDBuffer = CMSG_SPACE(sizeof(int) * kMaxReadFDs); |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 154 | #endif |
bratell | 88511de | 2015-05-29 22:19:01 +0900 | [diff] [blame] | 155 | static_assert(kMaxReadFDBuffer <= 8192, |
| 156 | "kMaxReadFDBuffer too big for a stack buffer"); |
brettw@chromium.org | 293988a | 2012-03-01 07:48:14 +0900 | [diff] [blame] | 157 | |
| 158 | // File descriptors extracted from messages coming off of the channel. The |
| 159 | // handles may span messages and come off different channels from the message |
| 160 | // data (in the case of READWRITE), and are processed in FIFO here. |
fischman@chromium.org | 8b60dfa | 2012-04-10 06:40:44 +0900 | [diff] [blame] | 161 | // NOTE: The implementation assumes underlying storage here is contiguous, so |
| 162 | // don't change to something like std::deque<> without changing the |
| 163 | // implementation! |
| 164 | std::vector<int> input_fds_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 165 | |
morrita | e491a7b | 2015-01-28 05:05:53 +0900 | [diff] [blame] | 166 | |
| 167 | void ResetSafely(base::ScopedFD* fd); |
| 168 | bool in_dtor_; |
| 169 | |
hubbe@chromium.org | 683920d | 2013-10-15 09:07:00 +0900 | [diff] [blame] | 170 | #if defined(OS_MACOSX) |
| 171 | // On OSX, sent FDs must not be closed until we get an ack. |
| 172 | // Keep track of sent FDs here to make sure the remote is not |
| 173 | // trying to bamboozle us. |
| 174 | std::set<int> fds_to_close_; |
| 175 | #endif |
| 176 | |
dmaclach@chromium.org | c1d3d42 | 2010-12-20 15:59:23 +0900 | [diff] [blame] | 177 | // True if we are responsible for unlinking the unix domain socket file. |
| 178 | bool must_unlink_; |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 179 | |
perkj | 596cc35 | 2014-12-12 02:27:58 +0900 | [diff] [blame] | 180 | #if defined(OS_LINUX) |
| 181 | // If non-zero, overrides the process ID sent in the hello message. |
| 182 | static int global_pid_; |
| 183 | #endif // OS_LINUX |
| 184 | |
erikchen | 99b3dc0 | 2015-06-17 06:21:04 +0900 | [diff] [blame] | 185 | // |broker_| must outlive this instance. |
| 186 | AttachmentBroker* broker_; |
| 187 | |
morrita@chromium.org | fde2b6b | 2014-06-07 05:13:51 +0900 | [diff] [blame] | 188 | DISALLOW_IMPLICIT_CONSTRUCTORS(ChannelPosix); |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 189 | }; |
| 190 | |
agl@chromium.org | 1c6dcf2 | 2009-07-23 08:57:21 +0900 | [diff] [blame] | 191 | } // namespace IPC |
| 192 | |
| 193 | #endif // IPC_IPC_CHANNEL_POSIX_H_ |