mirror of
https://pdfium.googlesource.com/pdfium
synced 2026-08-02 05:04:39 +08:00
2a6edafd18
Define and use distinct v8::EmbedderDataTypeTag values for aligned pointers stored in V8 object internal fields across the non-XFA and XFA engine layers. Using distinct tags strengthens in-sandbox handle differentiation and prevents cross-type mixing when V8 objects are accessed. TAG=agy CONV=adb0f59e-32c8-4f5d-b27a-55d0930623d5 Bug: 534461479 Change-Id: Ie2d4868abb2d076a659f251169b9cfbf4831d4d2 Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/151990 Commit-Queue: Tom Sepez <tsepez@chromium.org> Reviewed-by: Lei Zhang <thestig@chromium.org>
122 lines
5.8 KiB
C++
122 lines
5.8 KiB
C++
// Copyright 2020 The PDFium Authors
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Original code copyright 2014 Foxit Software Inc. http://www.foxitsoftware.com
|
|
|
|
#ifndef FXJS_FXV8_H_
|
|
#define FXJS_FXV8_H_
|
|
|
|
#include <stddef.h>
|
|
|
|
#include <vector>
|
|
|
|
#include "core/fxcrt/fx_string.h"
|
|
#include "core/fxcrt/span.h"
|
|
#include "v8/include/v8-forward.h"
|
|
#include "v8/include/v8-object.h"
|
|
|
|
// The fxv8 functions soften up the interface to the V8 API. In particular,
|
|
// PDFium uses size_t for sizes and indices, but V8 mostly uses ints, so
|
|
// these routines perform checked conversions.
|
|
|
|
namespace fxv8 {
|
|
|
|
// Embedder data type tags for aligned pointers stored in V8 objects.
|
|
//
|
|
// Note: All slot #0 sentinels (string tags and class descriptors) share
|
|
// kPDFiumSentinelTag so that cross-engine script arguments (e.g. an FXJS object
|
|
// passed to an FXJSE method) can be checked and safely rejected without
|
|
// triggering a V8 sandbox check failure (crash).
|
|
constexpr v8::EmbedderDataTypeTag kPDFiumSentinelTag = 0;
|
|
constexpr v8::EmbedderDataTypeTag kFXJSPerObjectDataTag = 1;
|
|
constexpr v8::EmbedderDataTypeTag kFXJSEHostObjectDataTag = 2;
|
|
|
|
// These first check for empty locals.
|
|
bool IsUndefined(v8::Local<v8::Value> value);
|
|
bool IsNull(v8::Local<v8::Value> value);
|
|
bool IsBoolean(v8::Local<v8::Value> value);
|
|
bool IsString(v8::Local<v8::Value> value);
|
|
bool IsNumber(v8::Local<v8::Value> value);
|
|
bool IsInteger(v8::Local<v8::Value> value);
|
|
bool IsObject(v8::Local<v8::Value> value);
|
|
bool IsArray(v8::Local<v8::Value> value);
|
|
bool IsDate(v8::Local<v8::Value> value);
|
|
bool IsFunction(v8::Local<v8::Value> value);
|
|
|
|
v8::Local<v8::Value> NewNullHelper(v8::Isolate* pIsolate);
|
|
v8::Local<v8::Value> NewUndefinedHelper(v8::Isolate* pIsolate);
|
|
v8::Local<v8::Number> NewNumberHelper(v8::Isolate* pIsolate, int number);
|
|
v8::Local<v8::Number> NewNumberHelper(v8::Isolate* pIsolate, double number);
|
|
v8::Local<v8::Number> NewNumberHelper(v8::Isolate* pIsolate, float number);
|
|
v8::Local<v8::Boolean> NewBooleanHelper(v8::Isolate* pIsolate, bool b);
|
|
v8::Local<v8::String> NewStringHelper(v8::Isolate* pIsolate,
|
|
ByteStringView str);
|
|
v8::Local<v8::String> NewStringHelper(v8::Isolate* pIsolate,
|
|
WideStringView str);
|
|
v8::Local<v8::Array> NewArrayHelper(v8::Isolate* pIsolate);
|
|
v8::Local<v8::Array> NewArrayHelper(v8::Isolate* pIsolate,
|
|
pdfium::span<v8::Local<v8::Value>> values);
|
|
v8::Local<v8::Object> NewObjectHelper(v8::Isolate* pIsolate);
|
|
v8::Local<v8::Date> NewDateHelper(v8::Isolate* pIsolate, double d);
|
|
|
|
// Conversion to PDFium type without re-entry from known v8 type.
|
|
WideString ToWideString(v8::Isolate* pIsolate, v8::Local<v8::String> pValue);
|
|
ByteString ToByteString(v8::Isolate* pIsolate, v8::Local<v8::String> pValue);
|
|
|
|
// Conversion to PDFium type with possible re-entry for coercion.
|
|
int32_t ReentrantToInt32Helper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
bool ReentrantToBooleanHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
float ReentrantToFloatHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
double ReentrantToDoubleHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
WideString ReentrantToWideStringHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
ByteString ReentrantToByteStringHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
v8::Local<v8::Object> ReentrantToObjectHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
v8::Local<v8::Array> ReentrantToArrayHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Value> pValue);
|
|
|
|
v8::Local<v8::Value> ReentrantGetObjectPropertyHelper(
|
|
v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj,
|
|
ByteStringView bsUTF8PropertyName);
|
|
std::vector<WideString> ReentrantGetObjectPropertyNamesHelper(
|
|
v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj);
|
|
bool ReentrantHasObjectOwnPropertyHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj,
|
|
ByteStringView bsUTF8PropertyName);
|
|
bool ReentrantSetObjectOwnPropertyHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj,
|
|
ByteStringView bsUTF8PropertyName,
|
|
v8::Local<v8::Value> pValue);
|
|
bool ReentrantPutObjectPropertyHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj,
|
|
ByteStringView bsUTF8PropertyName,
|
|
v8::Local<v8::Value> pPut);
|
|
void ReentrantDeleteObjectPropertyHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Object> pObj,
|
|
ByteStringView bsUTF8PropertyName);
|
|
|
|
bool ReentrantPutArrayElementHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Array> pArray,
|
|
size_t index,
|
|
v8::Local<v8::Value> pValue);
|
|
v8::Local<v8::Value> ReentrantGetArrayElementHelper(v8::Isolate* pIsolate,
|
|
v8::Local<v8::Array> pArray,
|
|
size_t index);
|
|
size_t GetArrayLengthHelper(v8::Local<v8::Array> pArray);
|
|
|
|
void ThrowExceptionHelper(v8::Isolate* pIsolate, ByteStringView str);
|
|
void ThrowExceptionHelper(v8::Isolate* pIsolate, WideStringView str);
|
|
|
|
} // namespace fxv8
|
|
|
|
#endif // FXJS_FXV8_H_
|