StarMirror
/
sandboxed-api
mirror of https://github.com/google/sandboxed-api
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,402 Commits
1 Branch
3 Tags
144 MiB
Commit Graph

32 Commits (main)

Author SHA1 Message Date
Oliver Kunz 86e356b7ee Add `Sandbox::AllocateAndTransferToSandboxee` utility function. 
Create a utility function to copy a hostcode local buffer into the sandboxee. This combines the following steps into one API call:

1) Create a SAPI variable backed with the hostcode local buffer
2) Allocate the SAPI variable in the sandboxee's memory space
3) Transfer the SAPI variable into the sandboxee's memory space

The function returns a `std::unique_ptr` wrapped `sapi:✌️:RemotePtr` which points to the address of the buffer in the sandboxee's memory space.

PiperOrigin-RevId: 611151615
Change-Id: Ie5012bf17826614395d2056d560689fd9e429d75
 2024-02-28 10:39:15 -08:00
Oliver Kunz 4f93af65e6 Improve documentation of `TransferToSandboxee()` and `TransferFromSandboxee()`. 
PiperOrigin-RevId: 606209322
Change-Id: I84e41671e7fa83d330d9217f45d4b61aed991d0d
 2024-02-12 04:21:32 -08:00
Oliver Kunz 1255f57108 Provide an option to use the unotify monitor instead of the ptrace monitor. 
PiperOrigin-RevId: 590847415
Change-Id: I45b1c392e108694f990a9762a2077e19d72f7b05
 2023-12-14 00:48:21 -08:00
Christian Blichmann d5ff466c59 Support passing `stderrthreshold` to sandboxee 
PiperOrigin-RevId: 559769140
Change-Id: I57ad45e1155355e51a821d7903b2eb73dd1303ee
 2023-08-24 08:58:26 -07:00
Wiktor Garbacz 127176d72f Bulk IWYU and build_cleaner fixes 
PiperOrigin-RevId: 559733768
Change-Id: Ia38f4c176e9f0abbfdb3a8f1109f482d8870eb0f
 2023-08-24 06:23:36 -07:00
Christian Blichmann eaf8ef88c4 Sandboxed API: Env vars: Set `GOOGLE_STDERRTHRESHOLD` used by OSS Abseil 
Internally, Abseil and Google logging use different flags and env vars to
control output.

PiperOrigin-RevId: 559715938
Change-Id: I4a908eb835ae0c5d598fb1ca6dc09182a9c3be22
 2023-08-24 04:50:21 -07:00
Sandboxed API Team 70e3d9f560 ...remove deprecated SetWallTimeLimit variant. 
PiperOrigin-RevId: 531477563
Change-Id: I84ca9823ae5f7a0002049ac69b42527872a7ce66
 2023-05-12 05:22:52 -07:00
Oliver Kunz a761362d71 Internal Changes 
PiperOrigin-RevId: 449714418
Change-Id: I12241fff9fdf97f22258d4a18ff4d54b2587d6dc
 2022-05-19 04:55:24 -07:00
Christian Blichmann a420682099 Use an env var instead of `-logtostderr` 
This should make it easier to migrate away from gflags.

PiperOrigin-RevId: 444834240
Change-Id: If9717131b7a803a8459992b68933491a0945182e
 2022-04-27 06:00:37 -07:00
Wiktor Garbacz fb690062cf Fix a race when terminating sandbox from another thread 
PiperOrigin-RevId: 436695251
Change-Id: I50599cefb346813f594982641c78dc902e10ccb5
 2022-03-23 03:35:28 -07:00
Christian Blichmann d451478e26 Change license link to HTTPS URL 
PiperOrigin-RevId: 424811734
Change-Id: If5ea692edc56ddc9c99fd478673df41c0246e9cc
 2022-01-28 01:39:09 -08:00
Christian Blichmann df1c31188d Fix sums test under MSAN by allowing Scudo to add `MAP_NORESERVE` in `mmap()` 
Note: This change allows `MAP_NORESERVE` generally, not just for MSAN. This follows
what we do for `AllowTcMalloc()/AllowSystemMalloc()`
PiperOrigin-RevId: 402231980
Change-Id: Ifa1c6b9f61f636dd6db231dde3765c3b4a40911b
 2021-10-11 01:22:17 -07:00
Sandboxed API Team 7b31deaed8 Delete deprecated `sapi::Sandbox::IsActive` and its remaining call sites. 
PiperOrigin-RevId: 390412024
Change-Id: Iab3853b3c40dd4e9b0ff31532e8c41c2583ebc4e
 2021-08-12 11:00:51 -07:00
Sandboxed API Team d631154ce5 Delete deprecated `sapi::Sandbox::GetRpcChannel` and its remaining call sites. 
PiperOrigin-RevId: 389968873
Change-Id: Ia72e0064fa57679180f9c406f96266473f8461c2
 2021-08-10 13:50:15 -07:00
Sandboxed API Team 165c155a08 Delete deprecated `sapi::Sandbox::GetComms` and its remaining call sites. 
PiperOrigin-RevId: 389716023
Change-Id: I092bc37f3f3bb40554b627f9dd528525b60d67a1
 2021-08-09 13:49:45 -07:00
Sandboxed API Team 3f0875798d Delete deprecated `sapi::Sandbox::GetPid` and its remaining call sites. 
PiperOrigin-RevId: 389713115
Change-Id: I1832e759016a581e10bf5bd8b5b70244b40ecd69
 2021-08-09 13:36:15 -07:00
Christian Blichmann f14aeee0ad Internal change. 
PiperOrigin-RevId: 387565158
Change-Id: I7b5293b614fae74abae1f9a347b0ef414028b8ea
 2021-07-29 05:52:19 -07:00
Christian Blichmann 19fd11b91e Move `GetInternalDataDependencyFilePath()` into `internal` namespace 
Implements #79

PiperOrigin-RevId: 351778836
Change-Id: I726837d8e75880bf5ddfb1a327249dd666adec53
 2021-01-14 05:11:22 -08:00
Sandboxed API Team ea379ef4d6 Cleans up statusor.h includes. 
PiperOrigin-RevId: 339050213
Change-Id: Iea5747f907b294503cdb37e1c25cf787c7e83dcf
 2020-10-26 09:08:41 -07:00
Sandboxed API Team 376ca05c56 Allow sandboxes to specify custom notifiers. 
PiperOrigin-RevId: 334154462
Change-Id: Ia62242913731ab017a9bf8733a77a647582af243
 2020-09-28 07:38:30 -07:00
Wiktor Garbacz f91f843f50 Use `size_t`/`uintptr_t` instead of `uintptr_t` or `uint64_t` where appropriate 
PiperOrigin-RevId: 332449107
Change-Id: I623c320c7f31bb73b92799dfbeb9a1e8ce0cdb3b
 2020-09-18 07:45:03 -07:00
Sandboxed API Team 23da55c19a Internal BUILD refactoring 
PiperOrigin-RevId: 329720214
Change-Id: I25fbb94dea17db3bdca6438d17508fa304d9706f
 2020-09-03 07:40:33 -07:00
Wiktor Garbacz c53f2a900f Automated rollback of commit e7a195ce42. 
PiperOrigin-RevId: 328918626
Change-Id: Iabe93ec7062ea6e750e4185e2b0b672a37111ee7
 2020-08-28 04:49:41 -07:00
Sandboxed API Team e7a195ce42 Automated rollback of commit 82c56775ef. 
PiperOrigin-RevId: 328340042
Change-Id: Ib225f8012fb373c74e3f1b3e6201b2daca7da40b
 2020-08-25 09:01:22 -07:00
Wiktor Garbacz 82c56775ef `StatusOr` cleanups 
PiperOrigin-RevId: 328318284
Change-Id: I207570c0fee6797dbc8995d36ef2130b0bff28fa
 2020-08-25 06:22:05 -07:00
Christian Blichmann b76cb15f26 Rename accessors, move away from `time_t` API 
- `GetPid()` -> `pid()`
- `GetRpcChannel()` -> `rpc_channel()`
- `IsActive()` -> `is_active()`
- Suggest `SetWallTimeLimit(time_t)` -> `SetWallTimeLimit(absl::Duration)`

In addition, remove the protected zero-argument contructor.

PiperOrigin-RevId: 325390292
Change-Id: Iba044ad5ce44e78c4064c0a09faaa4227c4d19a5
 2020-08-07 00:30:28 -07:00
Christian Blichmann f6c3db4c6e Replace sapi::Status with absl::Status 
PiperOrigin-RevId: 297614681
Change-Id: I89fe1357a172ed4d28df6dd84b80fee364ce1c14
 2020-02-27 09:24:12 -08:00
Christian Blichmann 441201884a Update license header with recommended best practices 
PiperOrigin-RevId: 290250533
Change-Id: Ic34b253446463cf971a055b70a242df93a598ee3
 2020-01-17 05:05:29 -08:00
Kevin Hamacher 3cbd871454 Allow sandboxee c-strings to be read as std::string 
PiperOrigin-RevId: 281960106
Change-Id: I54256dda2b6b0374d0f2ce3f762370478b912683
 2019-11-22 07:00:03 -08:00
Christian Blichmann 276b7efc92 Internal change. 
PiperOrigin-RevId: 265057217
Change-Id: Id00c867b373dbe8c9112c23ef4b0300ed3ca9e5b
 2019-08-23 08:08:51 -07:00
Christian Blichmann f04be9276f Formatting fixes and include file hygiene. 
PiperOrigin-RevId: 240346890
Change-Id: I1a9617f10a62a848b6314a6196512e016ae02643
 2019-03-26 07:54:21 -07:00
Christian Blichmann 177b969e8c
Sandboxed API OSS release. 
PiperOrigin-RevId: 238996664
Change-Id: I9646527e2be68ee0b6b371572b7aafe967102e57

Signed-off-by: Christian Blichmann <cblichmann@google.com>
 2019-03-18 19:00:48 +01:00