OLD | NEW |
1 /* | 1 /* |
2 * This file is part of Adblock Plus <https://adblockplus.org/>, | 2 * This file is part of Adblock Plus <https://adblockplus.org/>, |
3 * Copyright (C) 2006-2015 Eyeo GmbH | 3 * Copyright (C) 2006-2015 Eyeo GmbH |
4 * | 4 * |
5 * Adblock Plus is free software: you can redistribute it and/or modify | 5 * Adblock Plus is free software: you can redistribute it and/or modify |
6 * it under the terms of the GNU General Public License version 3 as | 6 * it under the terms of the GNU General Public License version 3 as |
7 * published by the Free Software Foundation. | 7 * published by the Free Software Foundation. |
8 * | 8 * |
9 * Adblock Plus is distributed in the hope that it will be useful, | 9 * Adblock Plus is distributed in the hope that it will be useful, |
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of | 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
(...skipping 11 matching lines...) Expand all Loading... |
22 #include "PluginClientFactory.h" | 22 #include "PluginClientFactory.h" |
23 #include "PluginMutex.h" | 23 #include "PluginMutex.h" |
24 #include "PluginClass.h" | 24 #include "PluginClass.h" |
25 | 25 |
26 #include "AdblockPlusClient.h" | 26 #include "AdblockPlusClient.h" |
27 | 27 |
28 #include "../shared/Utils.h" | 28 #include "../shared/Utils.h" |
29 | 29 |
30 namespace | 30 namespace |
31 { | 31 { |
| 32 class ScopedProcessInformation : public PROCESS_INFORMATION { |
| 33 public: |
| 34 ScopedProcessInformation() |
| 35 { |
| 36 hProcess = hThread = 0; |
| 37 dwProcessId = dwThreadId = 0; |
| 38 } |
| 39 ~ScopedProcessInformation() |
| 40 { |
| 41 if (hThread != nullptr) |
| 42 { |
| 43 CloseHandle(hThread); |
| 44 } |
| 45 if (hProcess != nullptr) |
| 46 { |
| 47 CloseHandle(hProcess); |
| 48 } |
| 49 } |
| 50 }; |
| 51 |
32 void SpawnAdblockPlusEngine() | 52 void SpawnAdblockPlusEngine() |
33 { | 53 { |
34 std::wstring engineExecutablePath = GetDllDir() + L"AdblockPlusEngine.exe"; | 54 std::wstring engineExecutablePath = GetDllDir() + L"AdblockPlusEngine.exe"; |
35 CString params = ToCString(L"AdblockPlusEngine.exe " + GetBrowserLanguage())
; | 55 std::wstring params = L"AdblockPlusEngine.exe " + GetBrowserLanguage(); |
36 | 56 |
37 STARTUPINFO startupInfo = {}; | 57 STARTUPINFO startupInfo = {}; |
38 PROCESS_INFORMATION processInformation = {}; | 58 ScopedProcessInformation processInformation; |
39 | 59 |
40 HANDLE token; | 60 // We need to break out from AppContainer. Launch with default security - re
gistry entry will eat the user prompt |
41 OpenProcessToken(GetCurrentProcess(), TOKEN_DUPLICATE | TOKEN_ADJUST_DEFAULT
| TOKEN_QUERY | TOKEN_ASSIGN_PRIMARY, &token); | 61 // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_el
ebp |
42 | 62 BOOL createProcRes = CreateProcessW(engineExecutablePath.c_str(), ¶ms[0]
, |
43 TOKEN_APPCONTAINER_INFORMATION *acs = NULL; | 63 0, 0, false, 0, 0, 0, &startupInfo, &processInformation); |
44 DWORD length = 0; | |
45 | |
46 // Get AppContainer SID | |
47 if (!GetTokenInformation(token, TokenAppContainerSid, acs, 0, &length) && Ge
tLastError() == ERROR_INSUFFICIENT_BUFFER) | |
48 { | |
49 acs = (TOKEN_APPCONTAINER_INFORMATION*) HeapAlloc(GetProcessHeap(), HEAP
_ZERO_MEMORY, length); | |
50 if (acs != NULL) | |
51 { | |
52 GetTokenInformation(token, TokenAppContainerSid, acs, length, &length)
; | |
53 } | |
54 else | |
55 { | |
56 throw std::runtime_error("Out of memory"); | |
57 } | |
58 } | |
59 | |
60 BOOL createProcRes = 0; | |
61 // Running inside AppContainer or in Windows XP | |
62 if ((acs != NULL && acs->TokenAppContainer != NULL) || !IsWindowsVistaOrLate
r()) | |
63 { | |
64 // We need to break out from AppContainer. Launch with default security -
registry entry will eat the user prompt | |
65 // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_
elebp | |
66 createProcRes = CreateProcessW(engineExecutablePath.c_str(), params.GetBuf
fer(params.GetLength() + 1), | |
67 0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo,
&processInformation); | |
68 } | |
69 else | |
70 { | |
71 // Launch with Low Integrity explicitly | |
72 HANDLE newToken; | |
73 DuplicateTokenEx(token, 0, 0, SecurityImpersonation, TokenPrimary, &newTok
en); | |
74 | |
75 PSID integritySid = 0; | |
76 ConvertStringSidToSid(L"S-1-16-4096", &integritySid); | |
77 std::tr1::shared_ptr<SID> sharedIntegritySid(static_cast<SID*>(integritySi
d), FreeSid); // Just to simplify cleanup | |
78 | |
79 TOKEN_MANDATORY_LABEL tml = {}; | |
80 tml.Label.Attributes = SE_GROUP_INTEGRITY; | |
81 tml.Label.Sid = integritySid; | |
82 | |
83 // Set the process integrity level | |
84 SetTokenInformation(newToken, TokenIntegrityLevel, &tml, sizeof(tml)); | |
85 | |
86 STARTUPINFO startupInfo = {}; | |
87 PROCESS_INFORMATION processInformation = {}; | |
88 | |
89 createProcRes = CreateProcessAsUserW(newToken, engineExecutablePath.c_str(
), params.GetBuffer(params.GetLength() + 1), | |
90 0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo,
&processInformation); | |
91 } | |
92 | |
93 if (!createProcRes) | 64 if (!createProcRes) |
94 { | 65 { |
95 throw std::runtime_error("Failed to start Adblock Plus Engine"); | 66 throw std::runtime_error("Failed to start Adblock Plus Engine"); |
96 } | 67 } |
97 | |
98 CloseHandle(processInformation.hProcess); | |
99 CloseHandle(processInformation.hThread); | |
100 } | 68 } |
101 | 69 |
102 Communication::Pipe* OpenEnginePipe() | 70 Communication::Pipe* OpenEnginePipe() |
103 { | 71 { |
104 try | 72 try |
105 { | 73 { |
106 return new Communication::Pipe(Communication::pipeName, Communication::Pip
e::MODE_CONNECT); | 74 return new Communication::Pipe(Communication::pipeName, Communication::Pip
e::MODE_CONNECT); |
107 } | 75 } |
108 catch (Communication::PipeConnectionError e) | 76 catch (Communication::PipeConnectionError e) |
109 { | 77 { |
(...skipping 452 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
562 DEBUG_GENERAL("CompareVersions"); | 530 DEBUG_GENERAL("CompareVersions"); |
563 Communication::OutputBuffer request; | 531 Communication::OutputBuffer request; |
564 request << Communication::PROC_COMPARE_VERSIONS << v1 << v2; | 532 request << Communication::PROC_COMPARE_VERSIONS << v1 << v2; |
565 Communication::InputBuffer response; | 533 Communication::InputBuffer response; |
566 if (!CallEngine(request, response)) | 534 if (!CallEngine(request, response)) |
567 return 0; | 535 return 0; |
568 int result; | 536 int result; |
569 response >> result; | 537 response >> result; |
570 return result; | 538 return result; |
571 } | 539 } |
OLD | NEW |