1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef MOJO_PUBLIC_CPP_PLATFORM_PLATFORM_HANDLE_SECURITY_UTIL_WIN_H_
#define MOJO_PUBLIC_CPP_PLATFORM_PLATFORM_HANDLE_SECURITY_UTIL_WIN_H_
#include "base/component_export.h"
#include "base/functional/callback.h"
#include "base/win/windows_types.h"
namespace mojo {
using FileHandleSecurityErrorCallback = base::RepeatingCallback<bool()>;
// This function DCHECKs if `handle` is to a writeable file that can be mapped
// executable. If so, this is a security risk. In non-DCHECK builds only basic
// validation is done to verify that the handle is of a valid type to be
// transferred across processes.
COMPONENT_EXPORT(MOJO_CPP_PLATFORM)
void MaybeCheckIfHandleIsUnsafe(HANDLE handle);
// Sets a callback for testing that will be called before DCHECKing inside
// DcheckIfFileHandleIsUnsafe because of an insecure handle. If the callback has
// been set, and returns true, then the error has been successfully handled and
// a DCHECK will not happen, otherwise DcheckIfFileHandleIsUnsafe will DCHECK as
// normal.
COMPONENT_EXPORT(MOJO_CPP_PLATFORM)
void SetUnsafeFileHandleCallbackForTesting(
FileHandleSecurityErrorCallback callback);
} // namespace mojo
#endif // MOJO_PUBLIC_CPP_PLATFORM_PLATFORM_HANDLE_SECURITY_UTIL_WIN_H_
|
