blob: 9a52266a9b964af64dc7089f8c5498d5fa0f04c2 [file] [log] [blame]
// Copyright 2013 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "remoting/host/native_messaging/native_messaging_writer.h"
#include <string>
#include <utility>
#include "base/containers/span.h"
#include "base/json/json_writer.h"
#include "base/logging.h"
#include "base/numerics/safe_conversions.h"
namespace {
// 4-byte type used for the message header.
using MessageLengthType = std::uint32_t;
// Limit the size of sent messages, since Chrome will not accept messages
// larger than 1MB, and this helps deal with the problem of integer overflow
// when passing sizes to net::FileStream APIs that take |int| parameters.
// This is defined as size_t (unsigned type) so it can be compared with the
// result of std::string::length() without compiler warnings.
constexpr std::size_t kMaximumMessageSize = 1024 * 1024;
} // namespace
namespace remoting {
NativeMessagingWriter::NativeMessagingWriter(base::File file)
: write_stream_(std::move(file)), fail_(false) {}
NativeMessagingWriter::~NativeMessagingWriter() = default;
bool NativeMessagingWriter::WriteMessage(base::ValueView message) {
if (fail_) {
LOG(ERROR) << "Stream marked as corrupt.";
return false;
}
std::string message_json = base::WriteJson(message).value_or("");
CHECK_LE(message_json.length(), kMaximumMessageSize);
// Cast from std::size_t to the proper header type, checking this won't
// overflow.
MessageLengthType message_length =
base::checked_cast<MessageLengthType>(message_json.length());
if (!write_stream_.WriteAtCurrentPosAndCheck(
base::byte_span_from_ref(message_length))) {
LOG(ERROR) << "Failed to send message header";
fail_ = true;
return false;
}
if (!write_stream_.WriteAtCurrentPosAndCheck(
base::as_byte_span(message_json))) {
LOG(ERROR) << "Failed to send message body";
fail_ = true;
return false;
}
return true;
}
} // namespace remoting