blob: d6e9a7064687abfcf5fa874ee0a454806586db04 [file] [log] [blame]
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/renderer/renderer_main_platform_delegate.h"
#include <Carbon/Carbon.h>
#import <Cocoa/Cocoa.h>
#include <objc/runtime.h>
#include <stdint.h>
#include "base/bind.h"
#include "base/callback.h"
#include "base/command_line.h"
#include "base/logging.h"
#include "base/mac/mac_util.h"
#include "base/mac/scoped_cftyperef.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/sys_string_conversions.h"
#include "content/public/common/content_switches.h"
#include "content/public/common/sandbox_init.h"
#include "sandbox/mac/seatbelt.h"
#include "sandbox/mac/system_services.h"
#include "services/service_manager/sandbox/mac/sandbox_mac.h"
extern "C" {
CGError CGSSetDenyWindowServerConnections(bool);
namespace content {
namespace {
// This tells Core Graphics not to attempt to connect to the WindowServer (and
// verifies there are no existing open connections), and then indicates that
// Chrome should continue execution without access to launchservicesd.
void DisableSystemServices() {
// Tell the WindowServer that we don't want to make any future connections.
// This will return Success as long as there are no open connections, which
// is what we want.
CGError result = CGSSetDenyWindowServerConnections(true);
CHECK_EQ(result, kCGErrorSuccess);
// You are about to read a pretty disgusting hack. In a static initializer,
// CoreFoundation decides to connect with cfprefsd(8) using Mach IPC. There is
// no public way to close this Mach port after-the-fact, nor a way to stop it
// from happening since it is done pre-main in dyld. But the address of the
// CFMachPort can be found in the run loop's string description. Below, that
// address is parsed, cast, and then used to invalidate the Mach port to
// disable communication with cfprefsd.
void DisconnectCFNotificationCenter() {
base::ScopedCFTypeRef<CFStringRef> run_loop_description(
const CFIndex length = CFStringGetLength(run_loop_description);
for (CFIndex i = 0; i < length; ) {
// Find the start of a CFMachPort run loop source, which looks like this,
// without new lines:
// 1 : <CFRunLoopSource 0x7d16ea90 [0xa160af80]>{signalled = No,
// valid = Yes, order = 0, context =
// <CFMachPort 0x7d16fe00 [0xa160af80]>{valid = Yes, port = 3a0f,
// source = 0x7d16ea90, callout =
// _ZL14MessageHandlerP12__CFMachPortPvlS1_ (0x96df59c2), context =
// <CFMachPort context 0x1475b>}}
CFRange run_loop_source_context_range;
if (!CFStringFindWithOptions(run_loop_description,
CFSTR(", context = <CFMachPort "), CFRangeMake(i, length - i),
0, &run_loop_source_context_range)) {
i = run_loop_source_context_range.location +
// The address of the CFMachPort is the first hexadecimal address after the
// CF type name.
CFRange port_address_range = CFRangeMake(i, 0);
for (CFIndex j = port_address_range.location; j < length; ++j) {
UniChar c = CFStringGetCharacterAtIndex(run_loop_description, j);
if (c == ' ')
base::ScopedCFTypeRef<CFStringRef> port_address_string(
CFStringCreateWithSubstring(NULL, run_loop_description,
if (!port_address_string)
// Convert the string to an address.
std::string port_address_std_string =
uint64_t port_address = 0;
if (!base::HexStringToUInt64(port_address_std_string, &port_address))
// Cast the address to an object.
CFMachPortRef mach_port = reinterpret_cast<CFMachPortRef>(port_address);
if (CFGetTypeID(mach_port) != CFMachPortGetTypeID())
// Verify that this is the Mach port that needs to be disconnected by the
// name of its callout function. Example description (no new lines):
// <CFMachPort 0x7d16fe00 [0xa160af80]>{valid = Yes, port = 3a0f, source =
// 0x7d16ea90, callout = __CFXNotificationReceiveFromServer (0x96df59c2),
// context = <CFMachPort context 0x1475b>}
base::ScopedCFTypeRef<CFStringRef> port_description(
if (CFStringFindWithOptions(port_description,
CFSTR(", callout = __CFXNotificationReceiveFromServer ("),
CFRangeMake(0, CFStringGetLength(port_description)),
NULL)) {
} // namespace
const MainFunctionParams& parameters) {}
RendererMainPlatformDelegate::~RendererMainPlatformDelegate() {
// TODO(mac-port): Any code needed to initialize a process for purposes of
// running a renderer needs to also be reflected in for
// --single-process support.
void RendererMainPlatformDelegate::PlatformInitialize() {
if (![NSThread isMultiThreaded]) {
NSString* string = @"";
[NSThread detachNewThreadSelector:@selector(length)
void RendererMainPlatformDelegate::PlatformUninitialize() {
bool RendererMainPlatformDelegate::EnableSandbox() {
bool sandbox_initialized = sandbox::Seatbelt::IsSandboxed();
// If the sandbox is already engaged, just disable system services.
if (sandbox_initialized) {
} else {
sandbox_initialized =
// The sandbox is now engaged. Make sure that the renderer has not connected
// itself to Cocoa.
CHECK(NSApp == nil);
return sandbox_initialized;
} // namespace content