blob: 53f4fb7cd5d08f74a6fc7abbbf3489def857a948 [file] [log] [blame]
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "ppapi/shared_impl/ppb_instance_shared.h"
#include <string>
#include "base/threading/platform_thread.h"
#include "base/trace_event/trace_event.h"
#include "ppapi/c/pp_errors.h"
#include "ppapi/c/ppb_input_event.h"
#include "ppapi/shared_impl/ppapi_globals.h"
#include "ppapi/shared_impl/ppb_image_data_shared.h"
#include "ppapi/shared_impl/var.h"
#include "ppapi/thunk/enter.h"
#include "ppapi/thunk/ppb_image_data_api.h"
namespace ppapi {
// static
const int PPB_Instance_Shared::kExtraCharsForTextInput = 100;
PPB_Instance_Shared::~PPB_Instance_Shared() {}
void PPB_Instance_Shared::Log(PP_Instance instance,
PP_LogLevel level,
PP_Var value) {
LogWithSource(instance, level, PP_MakeUndefined(), value);
void PPB_Instance_Shared::LogWithSource(PP_Instance instance,
PP_LogLevel level,
PP_Var source,
PP_Var value) {
// The source defaults to empty if it's not a string. The PpapiGlobals
// implementation will convert the empty string to the module name if
// possible.
std::string source_str;
if (source.type == PP_VARTYPE_STRING)
source_str = Var::PPVarToLogString(source);
std::string value_str = Var::PPVarToLogString(value);
PpapiGlobals::Get()->LogWithSource(instance, level, source_str, value_str);
int32_t PPB_Instance_Shared::ValidateRequestInputEvents(
bool is_filtering,
uint32_t event_classes) {
// See if any bits are set we don't know about.
if (event_classes & ~static_cast<uint32_t>(PP_INPUTEVENT_CLASS_MOUSE |
// Everything else is valid.
return PP_OK;
bool PPB_Instance_Shared::ValidateSetCursorParams(PP_MouseCursor_Type type,
PP_Resource image,
const PP_Point* hot_spot) {
if (static_cast<int>(type) < static_cast<int>(PP_MOUSECURSOR_TYPE_CUSTOM) ||
static_cast<int>(type) > static_cast<int>(PP_MOUSECURSOR_TYPE_GRABBING))
return false; // Cursor type out of range.
// The image must not be specified if the type isn't custom. However, we
// don't require that the hot spot be null since the C++ wrappers and proxy
// pass the point by reference and it will normally be specified.
return image == 0;
if (!hot_spot)
return false; // Hot spot must be specified for custom cursor.
thunk::EnterResourceNoLock<thunk::PPB_ImageData_API> enter(image, true);
if (enter.failed())
return false; // Invalid image resource.
// Validate the image size. A giant cursor can arbitrarily overwrite parts
// of the screen resulting in potential spoofing attacks. So we force the
// cursor to be a reasonably-sized image.
PP_ImageDataDesc desc;
if (!PP_ToBool(enter.object()->Describe(&desc)))
return false;
if (desc.size.width > 32 || desc.size.height > 32)
return false;
// Validate image format.
if (desc.format != PPB_ImageData_Shared::GetNativeImageDataFormat())
return false;
// Validate the hot spot location.
if (hot_spot->x < 0 || hot_spot->x >= desc.size.width || hot_spot->y < 0 ||
hot_spot->y >= desc.size.height)
return false;
return true;
} // namespace ppapi