forked from mirrors/gecko-dev
		
	 0ebcf6961e
			
		
	
	
		0ebcf6961e
		
	
	
	
	
		
			
			There are races which are more common after these patches where an implicit about:blank load races with a speculative parent process load's process switch. In this situation, bad behaviour can result as we process a navigation started by a process which we process-switched away from. By tracking the explicit ContentParent which is making the DocumentLoadListener request, we can catch situations like this and avoid navigations being started from the wrong processes. Differential Revision: https://phabricator.services.mozilla.com/D120672
		
			
				
	
	
		
			149 lines
		
	
	
	
		
			5.6 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
			
		
		
	
	
			149 lines
		
	
	
	
		
			5.6 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
| /* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
 | |
| /* vim: set sw=2 ts=8 et tw=80 : */
 | |
| 
 | |
| /* This Source Code Form is subject to the terms of the Mozilla Public
 | |
|  * License, v. 2.0. If a copy of the MPL was not distributed with this
 | |
|  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 | |
| 
 | |
| #include "DocumentChannelParent.h"
 | |
| 
 | |
| #include "mozilla/dom/BrowserParent.h"
 | |
| #include "mozilla/dom/CanonicalBrowsingContext.h"
 | |
| #include "mozilla/dom/ClientInfo.h"
 | |
| #include "mozilla/dom/ContentParent.h"
 | |
| #include "nsDocShellLoadState.h"
 | |
| 
 | |
| extern mozilla::LazyLogModule gDocumentChannelLog;
 | |
| #define LOG(fmt) MOZ_LOG(gDocumentChannelLog, mozilla::LogLevel::Verbose, fmt)
 | |
| 
 | |
| using namespace mozilla::dom;
 | |
| 
 | |
| namespace mozilla {
 | |
| namespace net {
 | |
| 
 | |
| DocumentChannelParent::DocumentChannelParent() {
 | |
|   LOG(("DocumentChannelParent ctor [this=%p]", this));
 | |
| }
 | |
| 
 | |
| DocumentChannelParent::~DocumentChannelParent() {
 | |
|   LOG(("DocumentChannelParent dtor [this=%p]", this));
 | |
| }
 | |
| 
 | |
| bool DocumentChannelParent::Init(dom::CanonicalBrowsingContext* aContext,
 | |
|                                  const DocumentChannelCreationArgs& aArgs) {
 | |
|   RefPtr<nsDocShellLoadState> loadState =
 | |
|       new nsDocShellLoadState(aArgs.loadState());
 | |
|   LOG(("DocumentChannelParent Init [this=%p, uri=%s]", this,
 | |
|        loadState->URI()->GetSpecOrDefault().get()));
 | |
| 
 | |
|   ContentParent* contentParent =
 | |
|       static_cast<ContentParent*>(Manager()->Manager());
 | |
| 
 | |
|   RefPtr<DocumentLoadListener::OpenPromise> promise;
 | |
|   if (loadState->GetChannelInitialized()) {
 | |
|     promise = DocumentLoadListener::ClaimParentLoad(
 | |
|         getter_AddRefs(mDocumentLoadListener), loadState->GetLoadIdentifier(),
 | |
|         Some(aArgs.channelId()));
 | |
|   }
 | |
|   if (!promise) {
 | |
|     bool isDocumentLoad =
 | |
|         aArgs.elementCreationArgs().type() ==
 | |
|         DocumentChannelElementCreationArgs::TDocumentCreationArgs;
 | |
|     mDocumentLoadListener = new DocumentLoadListener(aContext, isDocumentLoad);
 | |
| 
 | |
|     Maybe<ClientInfo> clientInfo;
 | |
|     if (aArgs.initialClientInfo().isSome()) {
 | |
|       clientInfo.emplace(ClientInfo(aArgs.initialClientInfo().ref()));
 | |
|     }
 | |
| 
 | |
|     nsresult rv = NS_ERROR_UNEXPECTED;
 | |
| 
 | |
|     if (isDocumentLoad) {
 | |
|       const DocumentCreationArgs& docArgs = aArgs.elementCreationArgs();
 | |
| 
 | |
|       promise = mDocumentLoadListener->OpenDocument(
 | |
|           loadState, aArgs.cacheKey(), Some(aArgs.channelId()),
 | |
|           aArgs.asyncOpenTime(), aArgs.timing().refOr(nullptr),
 | |
|           std::move(clientInfo), Some(docArgs.uriModified()),
 | |
|           Some(docArgs.isXFOError()), contentParent, &rv);
 | |
|     } else {
 | |
|       const ObjectCreationArgs& objectArgs = aArgs.elementCreationArgs();
 | |
| 
 | |
|       promise = mDocumentLoadListener->OpenObject(
 | |
|           loadState, aArgs.cacheKey(), Some(aArgs.channelId()),
 | |
|           aArgs.asyncOpenTime(), aArgs.timing().refOr(nullptr),
 | |
|           std::move(clientInfo), objectArgs.embedderInnerWindowId(),
 | |
|           objectArgs.loadFlags(), objectArgs.contentPolicyType(),
 | |
|           objectArgs.isUrgentStart(), contentParent,
 | |
|           this /* ObjectUpgradeHandler */, &rv);
 | |
|     }
 | |
| 
 | |
|     if (NS_FAILED(rv)) {
 | |
|       MOZ_ASSERT(!promise);
 | |
|       return SendFailedAsyncOpen(rv);
 | |
|     }
 | |
|   }
 | |
| 
 | |
|   RefPtr<DocumentChannelParent> self = this;
 | |
|   promise->Then(
 | |
|       GetCurrentSerialEventTarget(), __func__,
 | |
|       [self](DocumentLoadListener::OpenPromiseSucceededType&& aResolveValue) {
 | |
|         // The DLL is waiting for us to resolve the
 | |
|         // PDocumentChannel::RedirectToRealChannelPromise given as parameter.
 | |
|         auto promise = self->RedirectToRealChannel(
 | |
|             std::move(aResolveValue.mStreamFilterEndpoints),
 | |
|             aResolveValue.mRedirectFlags, aResolveValue.mLoadFlags);
 | |
|         // We chain the promise the DLL is waiting on to the one returned by
 | |
|         // RedirectToRealChannel. As soon as the promise returned is resolved
 | |
|         // or rejected, so will the DLL's promise.
 | |
|         promise->ChainTo(aResolveValue.mPromise.forget(), __func__);
 | |
|         self->mDocumentLoadListener = nullptr;
 | |
|       },
 | |
|       [self](DocumentLoadListener::OpenPromiseFailedType&& aRejectValue) {
 | |
|         if (self->CanSend()) {
 | |
|           Unused << self->SendDisconnectChildListeners(
 | |
|               aRejectValue.mStatus, aRejectValue.mLoadGroupStatus,
 | |
|               aRejectValue.mSwitchedProcess);
 | |
|         }
 | |
|         self->mDocumentLoadListener = nullptr;
 | |
|       });
 | |
| 
 | |
|   return true;
 | |
| }
 | |
| 
 | |
| auto DocumentChannelParent::UpgradeObjectLoad()
 | |
|     -> RefPtr<ObjectUpgradePromise> {
 | |
|   return SendUpgradeObjectLoad()->Then(
 | |
|       GetCurrentSerialEventTarget(), __func__,
 | |
|       [](const UpgradeObjectLoadPromise::ResolveOrRejectValue& aValue) {
 | |
|         if (!aValue.IsResolve() || aValue.ResolveValue().IsNullOrDiscarded()) {
 | |
|           LOG(("DocumentChannelParent object load upgrade failed"));
 | |
|           return ObjectUpgradePromise::CreateAndReject(NS_ERROR_FAILURE,
 | |
|                                                        __func__);
 | |
|         }
 | |
| 
 | |
|         return ObjectUpgradePromise::CreateAndResolve(
 | |
|             aValue.ResolveValue().get_canonical(), __func__);
 | |
|       });
 | |
| }
 | |
| 
 | |
| RefPtr<PDocumentChannelParent::RedirectToRealChannelPromise>
 | |
| DocumentChannelParent::RedirectToRealChannel(
 | |
|     nsTArray<ipc::Endpoint<extensions::PStreamFilterParent>>&&
 | |
|         aStreamFilterEndpoints,
 | |
|     uint32_t aRedirectFlags, uint32_t aLoadFlags) {
 | |
|   if (!CanSend()) {
 | |
|     return PDocumentChannelParent::RedirectToRealChannelPromise::
 | |
|         CreateAndReject(ResponseRejectReason::ChannelClosed, __func__);
 | |
|   }
 | |
|   RedirectToRealChannelArgs args;
 | |
|   mDocumentLoadListener->SerializeRedirectData(
 | |
|       args, false, aRedirectFlags, aLoadFlags,
 | |
|       static_cast<ContentParent*>(Manager()->Manager()));
 | |
|   return SendRedirectToRealChannel(args, std::move(aStreamFilterEndpoints));
 | |
| }
 | |
| 
 | |
| }  // namespace net
 | |
| }  // namespace mozilla
 | |
| 
 | |
| #undef LOG
 |