blob: 78b533106af6da45e42765b46a5fab25796ddce5 [file] [log] [blame]
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "base/bind.h"
#include "base/command_line.h"
#include "base/debug/leak_annotations.h"
#include "base/optional.h"
#include "base/power_monitor/power_monitor.h"
#include "base/run_loop.h"
#include "base/task/single_thread_task_executor.h"
#include "base/threading/platform_thread.h"
#include "base/timer/hi_res_timer_manager.h"
#include "build/build_config.h"
#include "content/child/child_process.h"
#include "content/common/content_switches_internal.h"
#include "content/public/common/content_switches.h"
#include "content/public/common/main_function_params.h"
#include "content/public/common/sandbox_init.h"
#include "content/utility/utility_thread_impl.h"
#include "services/service_manager/sandbox/sandbox.h"
#if defined(OS_LINUX)
#include "services/audio/audio_sandbox_hook_linux.h"
#include "services/network/network_sandbox_hook_linux.h"
#include "services/service_manager/sandbox/linux/sandbox_linux.h"
#endif
#if defined(OS_CHROMEOS)
#include "chromeos/services/ime/ime_sandbox_hook.h"
#endif
#if defined(OS_MACOSX)
#include "base/message_loop/message_pump_mac.h"
#endif
#if defined(OS_WIN)
#include "base/rand_util.h"
#include "sandbox/win/src/sandbox.h"
sandbox::TargetServices* g_utility_target_services = nullptr;
#endif
namespace content {
// Mainline routine for running as the utility process.
int UtilityMain(const MainFunctionParams& parameters) {
const base::MessagePump::Type message_pump_type =
parameters.command_line.HasSwitch(switches::kMessageLoopTypeUi)
? base::MessagePump::Type::UI
: base::MessagePump::Type::DEFAULT;
#if defined(OS_MACOSX)
// On Mac, the TYPE_UI pump for the main thread is an NSApplication loop. In
// a sandboxed utility process, NSApp attempts to acquire more Mach resources
// than a restrictive sandbox policy should allow. Services that require a
// TYPE_UI pump generally just need a NS/CFRunLoop to pump system work
// sources, so choose that pump type instead. A NSRunLoop MessagePump is used
// for TYPE_UI MessageLoops on non-main threads.
base::MessagePump::OverrideMessagePumpForUIFactory(
[]() -> std::unique_ptr<base::MessagePump> {
return std::make_unique<base::MessagePumpNSRunLoop>();
});
#endif
// The main task executor of the utility process.
base::SingleThreadTaskExecutor main_thread_task_executor(message_pump_type);
base::PlatformThread::SetName("CrUtilityMain");
if (parameters.command_line.HasSwitch(switches::kUtilityStartupDialog))
WaitForDebugger("Utility");
#if defined(OS_LINUX)
// Initializes the sandbox before any threads are created.
// TODO(jorgelo): move this after GTK initialization when we enable a strict
// Seccomp-BPF policy.
auto sandbox_type =
service_manager::SandboxTypeFromCommandLine(parameters.command_line);
if (parameters.zygote_child ||
sandbox_type == service_manager::SANDBOX_TYPE_NETWORK ||
#if defined(OS_CHROMEOS)
sandbox_type == service_manager::SANDBOX_TYPE_IME ||
#endif // OS_CHROMEOS
sandbox_type == service_manager::SANDBOX_TYPE_AUDIO) {
service_manager::SandboxLinux::PreSandboxHook pre_sandbox_hook;
if (sandbox_type == service_manager::SANDBOX_TYPE_NETWORK)
pre_sandbox_hook = base::BindOnce(&network::NetworkPreSandboxHook);
else if (sandbox_type == service_manager::SANDBOX_TYPE_AUDIO)
pre_sandbox_hook = base::BindOnce(&audio::AudioPreSandboxHook);
#if defined(OS_CHROMEOS)
else if (sandbox_type == service_manager::SANDBOX_TYPE_IME)
pre_sandbox_hook = base::BindOnce(&chromeos::ime::ImePreSandboxHook);
#endif // OS_CHROMEOS
service_manager::Sandbox::Initialize(
sandbox_type, std::move(pre_sandbox_hook),
service_manager::SandboxLinux::Options());
}
#elif defined(OS_WIN)
g_utility_target_services = parameters.sandbox_info->target_services;
#endif
ChildProcess utility_process;
base::RunLoop run_loop;
utility_process.set_main_thread(
new UtilityThreadImpl(run_loop.QuitClosure()));
// Both utility process and service utility process would come
// here, but the later is launched without connection to service manager, so
// there has no base::PowerMonitor be created(See ChildThreadImpl::Init()).
// As base::PowerMonitor is necessary to base::HighResolutionTimerManager, for
// such case we just disable base::HighResolutionTimerManager for now.
// Note that disabling base::HighResolutionTimerManager means high resolution
// timer is always disabled no matter on battery or not, but it should have
// no any bad influence because currently service utility process is not using
// any high resolution timer.
// TODO(leonhsl): Once http://crbug.com/646833 got resolved, re-enable
// base::HighResolutionTimerManager here for future possible usage of high
// resolution timer in service utility process.
base::Optional<base::HighResolutionTimerManager> hi_res_timer_manager;
if (base::PowerMonitor::IsInitialized()) {
hi_res_timer_manager.emplace();
}
#if defined(OS_WIN)
auto sandbox_type =
service_manager::SandboxTypeFromCommandLine(parameters.command_line);
if (!service_manager::IsUnsandboxedSandboxType(sandbox_type) &&
sandbox_type != service_manager::SANDBOX_TYPE_CDM) {
if (!g_utility_target_services)
return false;
char buffer;
// Ensure RtlGenRandom is warm before the token is lowered; otherwise,
// base::RandBytes() will CHECK fail when v8 is initialized.
base::RandBytes(&buffer, sizeof(buffer));
g_utility_target_services->LowerToken();
}
#endif
run_loop.Run();
#if defined(LEAK_SANITIZER)
// Invoke LeakSanitizer before shutting down the utility thread, to avoid
// reporting shutdown-only leaks.
__lsan_do_leak_check();
#endif
return 0;
}
} // namespace content