| OLD | NEW |
| 1 /* | 1 /* |
| 2 * This file is part of Adblock Plus <https://adblockplus.org/>, | 2 * This file is part of Adblock Plus <https://adblockplus.org/>, |
| 3 * Copyright (C) 2006-2015 Eyeo GmbH | 3 * Copyright (C) 2006-2015 Eyeo GmbH |
| 4 * | 4 * |
| 5 * Adblock Plus is free software: you can redistribute it and/or modify | 5 * Adblock Plus is free software: you can redistribute it and/or modify |
| 6 * it under the terms of the GNU General Public License version 3 as | 6 * it under the terms of the GNU General Public License version 3 as |
| 7 * published by the Free Software Foundation. | 7 * published by the Free Software Foundation. |
| 8 * | 8 * |
| 9 * Adblock Plus is distributed in the hope that it will be useful, | 9 * Adblock Plus is distributed in the hope that it will be useful, |
| 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of | 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 12 * GNU General Public License for more details. | 12 * GNU General Public License for more details. |
| 13 * | 13 * |
| 14 * You should have received a copy of the GNU General Public License | 14 * You should have received a copy of the GNU General Public License |
| 15 * along with Adblock Plus. If not, see <http://www.gnu.org/licenses/>. | 15 * along with Adblock Plus. If not, see <http://www.gnu.org/licenses/>. |
| 16 */ | 16 */ |
| 17 | 17 |
| 18 #include "PluginStdAfx.h" | 18 #include "PluginStdAfx.h" |
| 19 #include "AdblockPlusClient.h" | 19 #include "AdblockPlusClient.h" |
| 20 #include "PluginSettings.h" | 20 #include "PluginSettings.h" |
| 21 #include "PluginSystem.h" | 21 #include "PluginSystem.h" |
| 22 #include "PluginFilter.h" | 22 #include "PluginFilter.h" |
| 23 #include "PluginMutex.h" | 23 #include "PluginMutex.h" |
| 24 #include "PluginClass.h" | 24 #include "PluginClass.h" |
| 25 #include "../shared/Utils.h" | 25 #include "../shared/Utils.h" |
| 26 | 26 |
| 27 namespace | 27 namespace |
| 28 { | 28 { |
| 29 class ScopedProcessInformation : public PROCESS_INFORMATION { |
| 30 public: |
| 31 ScopedProcessInformation() |
| 32 { |
| 33 hProcess = hThread = 0; |
| 34 dwProcessId = dwThreadId = 0; |
| 35 } |
| 36 ~ScopedProcessInformation() |
| 37 { |
| 38 if (hThread != nullptr) |
| 39 { |
| 40 CloseHandle(hThread); |
| 41 } |
| 42 if (hProcess != nullptr) |
| 43 { |
| 44 CloseHandle(hProcess); |
| 45 } |
| 46 } |
| 47 }; |
| 48 |
| 29 void SpawnAdblockPlusEngine() | 49 void SpawnAdblockPlusEngine() |
| 30 { | 50 { |
| 31 std::wstring engineExecutablePath = GetDllDir() + L"AdblockPlusEngine.exe"; | 51 std::wstring engineExecutablePath = GetDllDir() + L"AdblockPlusEngine.exe"; |
| 32 CString params = ToCString(L"AdblockPlusEngine.exe " + GetBrowserLanguage())
; | 52 std::wstring params = L"AdblockPlusEngine.exe " + GetBrowserLanguage(); |
| 33 | 53 |
| 34 STARTUPINFO startupInfo = {}; | 54 STARTUPINFO startupInfo = {}; |
| 35 PROCESS_INFORMATION processInformation = {}; | 55 ScopedProcessInformation processInformation; |
| 36 | 56 |
| 37 HANDLE token; | 57 // We need to break out from AppContainer. Launch with default security - re
gistry entry will eat the user prompt |
| 38 OpenProcessToken(GetCurrentProcess(), TOKEN_DUPLICATE | TOKEN_ADJUST_DEFAULT
| TOKEN_QUERY | TOKEN_ASSIGN_PRIMARY, &token); | 58 // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_el
ebp |
| 39 | 59 BOOL createProcRes = CreateProcessW(engineExecutablePath.c_str(), ¶ms[0]
, |
| 40 TOKEN_APPCONTAINER_INFORMATION *acs = NULL; | 60 0, 0, false, 0, 0, 0, &startupInfo, &processInformation); |
| 41 DWORD length = 0; | |
| 42 | |
| 43 // Get AppContainer SID | |
| 44 if (!GetTokenInformation(token, TokenAppContainerSid, acs, 0, &length) && Ge
tLastError() == ERROR_INSUFFICIENT_BUFFER) | |
| 45 { | |
| 46 acs = (TOKEN_APPCONTAINER_INFORMATION*) HeapAlloc(GetProcessHeap(), HEAP
_ZERO_MEMORY, length); | |
| 47 if (acs != NULL) | |
| 48 { | |
| 49 GetTokenInformation(token, TokenAppContainerSid, acs, length, &length)
; | |
| 50 } | |
| 51 else | |
| 52 { | |
| 53 throw std::runtime_error("Out of memory"); | |
| 54 } | |
| 55 } | |
| 56 | |
| 57 BOOL createProcRes = 0; | |
| 58 // Running inside AppContainer or in Windows XP | |
| 59 if ((acs != NULL && acs->TokenAppContainer != NULL) || !IsWindowsVistaOrLate
r()) | |
| 60 { | |
| 61 // We need to break out from AppContainer. Launch with default security -
registry entry will eat the user prompt | |
| 62 // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_
elebp | |
| 63 createProcRes = CreateProcessW(engineExecutablePath.c_str(), params.GetBuf
fer(params.GetLength() + 1), | |
| 64 0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo,
&processInformation); | |
| 65 } | |
| 66 else | |
| 67 { | |
| 68 // Launch with Low Integrity explicitly | |
| 69 HANDLE newToken; | |
| 70 DuplicateTokenEx(token, 0, 0, SecurityImpersonation, TokenPrimary, &newTok
en); | |
| 71 | |
| 72 PSID integritySid = 0; | |
| 73 ConvertStringSidToSid(L"S-1-16-4096", &integritySid); | |
| 74 std::tr1::shared_ptr<SID> sharedIntegritySid(static_cast<SID*>(integritySi
d), FreeSid); // Just to simplify cleanup | |
| 75 | |
| 76 TOKEN_MANDATORY_LABEL tml = {}; | |
| 77 tml.Label.Attributes = SE_GROUP_INTEGRITY; | |
| 78 tml.Label.Sid = integritySid; | |
| 79 | |
| 80 // Set the process integrity level | |
| 81 SetTokenInformation(newToken, TokenIntegrityLevel, &tml, sizeof(tml)); | |
| 82 | |
| 83 STARTUPINFO startupInfo = {}; | |
| 84 PROCESS_INFORMATION processInformation = {}; | |
| 85 | |
| 86 createProcRes = CreateProcessAsUserW(newToken, engineExecutablePath.c_str(
), params.GetBuffer(params.GetLength() + 1), | |
| 87 0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo,
&processInformation); | |
| 88 } | |
| 89 | |
| 90 if (!createProcRes) | 61 if (!createProcRes) |
| 91 { | 62 { |
| 92 throw std::runtime_error("Failed to start Adblock Plus Engine"); | 63 throw std::runtime_error("Failed to start Adblock Plus Engine"); |
| 93 } | 64 } |
| 94 | |
| 95 CloseHandle(processInformation.hProcess); | |
| 96 CloseHandle(processInformation.hThread); | |
| 97 } | 65 } |
| 98 | 66 |
| 99 Communication::Pipe* OpenEnginePipe() | 67 Communication::Pipe* OpenEnginePipe() |
| 100 { | 68 { |
| 101 try | 69 try |
| 102 { | 70 { |
| 103 return new Communication::Pipe(Communication::pipeName, Communication::Pip
e::MODE_CONNECT); | 71 return new Communication::Pipe(Communication::pipeName, Communication::Pip
e::MODE_CONNECT); |
| 104 } | 72 } |
| 105 catch (Communication::PipeConnectionError e) | 73 catch (Communication::PipeConnectionError e) |
| 106 { | 74 { |
| (...skipping 458 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 565 DEBUG_GENERAL("CompareVersions"); | 533 DEBUG_GENERAL("CompareVersions"); |
| 566 Communication::OutputBuffer request; | 534 Communication::OutputBuffer request; |
| 567 request << Communication::PROC_COMPARE_VERSIONS << ToUtf8String(v1) << ToUtf8S
tring(v2); | 535 request << Communication::PROC_COMPARE_VERSIONS << ToUtf8String(v1) << ToUtf8S
tring(v2); |
| 568 Communication::InputBuffer response; | 536 Communication::InputBuffer response; |
| 569 if (!CallEngine(request, response)) | 537 if (!CallEngine(request, response)) |
| 570 return 0; | 538 return 0; |
| 571 int result; | 539 int result; |
| 572 response >> result; | 540 response >> result; |
| 573 return result; | 541 return result; |
| 574 } | 542 } |
| OLD | NEW |