Home | History | Annotate | Download | only in npapi
      1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style license that can be
      3 // found in the LICENSE file.
      4 
      5 #include "content/child/npapi/webplugin_delegate_impl.h"
      6 
      7 #include <map>
      8 #include <set>
      9 #include <string>
     10 #include <vector>
     11 
     12 #include "base/bind.h"
     13 #include "base/compiler_specific.h"
     14 #include "base/lazy_instance.h"
     15 #include "base/memory/scoped_ptr.h"
     16 #include "base/message_loop/message_loop.h"
     17 #include "base/metrics/stats_counters.h"
     18 #include "base/strings/string_util.h"
     19 #include "base/strings/stringprintf.h"
     20 #include "base/synchronization/lock.h"
     21 #include "base/version.h"
     22 #include "base/win/iat_patch_function.h"
     23 #include "base/win/registry.h"
     24 #include "base/win/windows_version.h"
     25 #include "content/child/npapi/plugin_instance.h"
     26 #include "content/child/npapi/plugin_lib.h"
     27 #include "content/child/npapi/plugin_stream_url.h"
     28 #include "content/child/npapi/webplugin.h"
     29 #include "content/child/npapi/webplugin_ime_win.h"
     30 #include "content/common/cursors/webcursor.h"
     31 #include "content/common/plugin_constants_win.h"
     32 #include "content/public/common/content_constants.h"
     33 #include "skia/ext/platform_canvas.h"
     34 #include "third_party/WebKit/public/web/WebInputEvent.h"
     35 #include "ui/gfx/win/dpi.h"
     36 #include "ui/gfx/win/hwnd_util.h"
     37 
     38 using blink::WebKeyboardEvent;
     39 using blink::WebInputEvent;
     40 using blink::WebMouseEvent;
     41 
     42 namespace content {
     43 
     44 namespace {
     45 
     46 const wchar_t kWebPluginDelegateProperty[] = L"WebPluginDelegateProperty";
     47 const wchar_t kPluginFlashThrottle[] = L"FlashThrottle";
     48 
     49 // The fastest we are willing to process WM_USER+1 events for Flash.
     50 // Flash can easily exceed the limits of our CPU if we don't throttle it.
     51 // The throttle has been chosen by testing various delays and compromising
     52 // on acceptable Flash performance and reasonable CPU consumption.
     53 //
     54 // I'd like to make the throttle delay variable, based on the amount of
     55 // time currently required to paint Flash plugins.  There isn't a good
     56 // way to count the time spent in aggregate plugin painting, however, so
     57 // this seems to work well enough.
     58 const int kFlashWMUSERMessageThrottleDelayMs = 5;
     59 
     60 // Flash displays popups in response to user clicks by posting a WM_USER
     61 // message to the plugin window. The handler for this message displays
     62 // the popup. To ensure that the popups allowed state is sent correctly
     63 // to the renderer we reset the popups allowed state in a timer.
     64 const int kWindowedPluginPopupTimerMs = 50;
     65 
     66 // The current instance of the plugin which entered the modal loop.
     67 WebPluginDelegateImpl* g_current_plugin_instance = NULL;
     68 
     69 typedef std::deque<MSG> ThrottleQueue;
     70 base::LazyInstance<ThrottleQueue> g_throttle_queue = LAZY_INSTANCE_INITIALIZER;
     71 
     72 base::LazyInstance<std::map<HWND, WNDPROC> > g_window_handle_proc_map =
     73     LAZY_INSTANCE_INITIALIZER;
     74 
     75 // Helper object for patching the TrackPopupMenu API.
     76 base::LazyInstance<base::win::IATPatchFunction> g_iat_patch_track_popup_menu =
     77     LAZY_INSTANCE_INITIALIZER;
     78 
     79 // Helper object for patching the SetCursor API.
     80 base::LazyInstance<base::win::IATPatchFunction> g_iat_patch_set_cursor =
     81     LAZY_INSTANCE_INITIALIZER;
     82 
     83 // Helper object for patching the RegEnumKeyExW API.
     84 base::LazyInstance<base::win::IATPatchFunction> g_iat_patch_reg_enum_key_ex_w =
     85     LAZY_INSTANCE_INITIALIZER;
     86 
     87 // Helper object for patching the GetProcAddress API.
     88 base::LazyInstance<base::win::IATPatchFunction> g_iat_patch_get_proc_address =
     89     LAZY_INSTANCE_INITIALIZER;
     90 
     91 base::LazyInstance<base::win::IATPatchFunction> g_iat_patch_window_from_point =
     92     LAZY_INSTANCE_INITIALIZER;
     93 
     94 // http://crbug.com/16114
     95 // Enforces providing a valid device context in NPWindow, so that NPP_SetWindow
     96 // is never called with NPNWindoTypeDrawable and NPWindow set to NULL.
     97 // Doing so allows removing NPP_SetWindow call during painting a windowless
     98 // plugin, which otherwise could trigger layout change while painting by
     99 // invoking NPN_Evaluate. Which would cause bad, bad crashes. Bad crashes.
    100 // TODO(dglazkov): If this approach doesn't produce regressions, move class to
    101 // webplugin_delegate_impl.h and implement for other platforms.
    102 class DrawableContextEnforcer {
    103  public:
    104   explicit DrawableContextEnforcer(NPWindow* window)
    105       : window_(window),
    106         disposable_dc_(window && !window->window) {
    107     // If NPWindow is NULL, create a device context with monochrome 1x1 surface
    108     // and stuff it to NPWindow.
    109     if (disposable_dc_)
    110       window_->window = CreateCompatibleDC(NULL);
    111   }
    112 
    113   ~DrawableContextEnforcer() {
    114     if (!disposable_dc_)
    115       return;
    116 
    117     DeleteDC(static_cast<HDC>(window_->window));
    118     window_->window = NULL;
    119   }
    120 
    121  private:
    122   NPWindow* window_;
    123   bool disposable_dc_;
    124 };
    125 
    126 // These are from ntddk.h
    127 typedef LONG NTSTATUS;
    128 
    129 #ifndef STATUS_SUCCESS
    130 #define STATUS_SUCCESS ((NTSTATUS)0x00000000L)
    131 #endif
    132 
    133 #ifndef STATUS_BUFFER_TOO_SMALL
    134 #define STATUS_BUFFER_TOO_SMALL ((NTSTATUS)0xC0000023L)
    135 #endif
    136 
    137 typedef enum _KEY_INFORMATION_CLASS {
    138   KeyBasicInformation,
    139   KeyNodeInformation,
    140   KeyFullInformation,
    141   KeyNameInformation,
    142   KeyCachedInformation,
    143   KeyVirtualizationInformation
    144 } KEY_INFORMATION_CLASS;
    145 
    146 typedef struct _KEY_NAME_INFORMATION {
    147   ULONG NameLength;
    148   WCHAR Name[1];
    149 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
    150 
    151 typedef DWORD (__stdcall *ZwQueryKeyType)(
    152     HANDLE  key_handle,
    153     int key_information_class,
    154     PVOID  key_information,
    155     ULONG  length,
    156     PULONG  result_length);
    157 
    158 // Returns a key's full path.
    159 std::wstring GetKeyPath(HKEY key) {
    160   if (key == NULL)
    161     return L"";
    162 
    163   HMODULE dll = GetModuleHandle(L"ntdll.dll");
    164   if (dll == NULL)
    165     return L"";
    166 
    167   ZwQueryKeyType func = reinterpret_cast<ZwQueryKeyType>(
    168       ::GetProcAddress(dll, "ZwQueryKey"));
    169   if (func == NULL)
    170     return L"";
    171 
    172   DWORD size = 0;
    173   DWORD result = 0;
    174   result = func(key, KeyNameInformation, 0, 0, &size);
    175   if (result != STATUS_BUFFER_TOO_SMALL)
    176     return L"";
    177 
    178   scoped_ptr<char[]> buffer(new char[size]);
    179   if (buffer.get() == NULL)
    180     return L"";
    181 
    182   result = func(key, KeyNameInformation, buffer.get(), size, &size);
    183   if (result != STATUS_SUCCESS)
    184     return L"";
    185 
    186   KEY_NAME_INFORMATION* info =
    187       reinterpret_cast<KEY_NAME_INFORMATION*>(buffer.get());
    188   return std::wstring(info->Name, info->NameLength / sizeof(wchar_t));
    189 }
    190 
    191 int GetPluginMajorVersion(const WebPluginInfo& plugin_info) {
    192   Version plugin_version;
    193   WebPluginInfo::CreateVersionFromString(plugin_info.version, &plugin_version);
    194 
    195   int major_version = 0;
    196   if (plugin_version.IsValid())
    197     major_version = plugin_version.components()[0];
    198 
    199   return major_version;
    200 }
    201 
    202 }  // namespace
    203 
    204 LRESULT CALLBACK WebPluginDelegateImpl::HandleEventMessageFilterHook(
    205     int code, WPARAM wParam, LPARAM lParam) {
    206   if (g_current_plugin_instance) {
    207     g_current_plugin_instance->OnModalLoopEntered();
    208   } else {
    209     NOTREACHED();
    210   }
    211   return CallNextHookEx(NULL, code, wParam, lParam);
    212 }
    213 
    214 LRESULT CALLBACK WebPluginDelegateImpl::MouseHookProc(
    215     int code, WPARAM wParam, LPARAM lParam) {
    216   if (code == HC_ACTION) {
    217     MOUSEHOOKSTRUCT* hook_struct = reinterpret_cast<MOUSEHOOKSTRUCT*>(lParam);
    218     if (hook_struct)
    219       HandleCaptureForMessage(hook_struct->hwnd, wParam);
    220   }
    221 
    222   return CallNextHookEx(NULL, code, wParam, lParam);
    223 }
    224 
    225 WebPluginDelegateImpl::WebPluginDelegateImpl(
    226     WebPlugin* plugin,
    227     PluginInstance* instance)
    228     : instance_(instance),
    229       quirks_(0),
    230       plugin_(plugin),
    231       windowless_(false),
    232       windowed_handle_(NULL),
    233       windowed_did_set_window_(false),
    234       plugin_wnd_proc_(NULL),
    235       last_message_(0),
    236       is_calling_wndproc(false),
    237       dummy_window_for_activation_(NULL),
    238       dummy_window_parent_(NULL),
    239       old_dummy_window_proc_(NULL),
    240       handle_event_message_filter_hook_(NULL),
    241       handle_event_pump_messages_event_(NULL),
    242       user_gesture_message_posted_(false),
    243       user_gesture_msg_factory_(this),
    244       handle_event_depth_(0),
    245       mouse_hook_(NULL),
    246       first_set_window_call_(true),
    247       plugin_has_focus_(false),
    248       has_webkit_focus_(false),
    249       containing_view_has_focus_(true),
    250       creation_succeeded_(false) {
    251   memset(&window_, 0, sizeof(window_));
    252 
    253   const WebPluginInfo& plugin_info = instance_->plugin_lib()->plugin_info();
    254   std::wstring filename =
    255       base::StringToLowerASCII(plugin_info.path.BaseName().value());
    256 
    257   if (instance_->mime_type() == kFlashPluginSwfMimeType ||
    258       filename == kFlashPlugin) {
    259     // Flash only requests windowless plugins if we return a Mozilla user
    260     // agent.
    261     instance_->set_use_mozilla_user_agent();
    262     quirks_ |= PLUGIN_QUIRK_THROTTLE_WM_USER_PLUS_ONE;
    263     quirks_ |= PLUGIN_QUIRK_PATCH_SETCURSOR;
    264     quirks_ |= PLUGIN_QUIRK_ALWAYS_NOTIFY_SUCCESS;
    265     quirks_ |= PLUGIN_QUIRK_HANDLE_MOUSE_CAPTURE;
    266     quirks_ |= PLUGIN_QUIRK_EMULATE_IME;
    267     quirks_ |= PLUGIN_QUIRK_FAKE_WINDOW_FROM_POINT;
    268   } else if (filename == kAcrobatReaderPlugin) {
    269     // Check for the version number above or equal 9.
    270     int major_version = GetPluginMajorVersion(plugin_info);
    271     if (major_version >= 9) {
    272       quirks_ |= PLUGIN_QUIRK_DIE_AFTER_UNLOAD;
    273       // 9.2 needs this.
    274       quirks_ |= PLUGIN_QUIRK_SETWINDOW_TWICE;
    275     }
    276     quirks_ |= PLUGIN_QUIRK_BLOCK_NONSTANDARD_GETURL_REQUESTS;
    277   } else if (plugin_info.name.find(L"Windows Media Player") !=
    278              std::wstring::npos) {
    279     // Windows Media Player needs two NPP_SetWindow calls.
    280     quirks_ |= PLUGIN_QUIRK_SETWINDOW_TWICE;
    281 
    282     // Windowless mode doesn't work in the WMP NPAPI plugin.
    283     quirks_ |= PLUGIN_QUIRK_NO_WINDOWLESS;
    284 
    285     // The media player plugin sets its size on the first NPP_SetWindow call
    286     // and never updates its size. We should call the underlying NPP_SetWindow
    287     // only when we have the correct size.
    288     quirks_ |= PLUGIN_QUIRK_IGNORE_FIRST_SETWINDOW_CALL;
    289 
    290     if (filename == kOldWMPPlugin) {
    291       // Non-admin users on XP couldn't modify the key to force the new UI.
    292       quirks_ |= PLUGIN_QUIRK_PATCH_REGENUMKEYEXW;
    293     }
    294   } else if (instance_->mime_type() == "audio/x-pn-realaudio-plugin" ||
    295              filename == kRealPlayerPlugin) {
    296     quirks_ |= PLUGIN_QUIRK_DONT_CALL_WND_PROC_RECURSIVELY;
    297   } else if (plugin_info.name.find(L"VLC Multimedia Plugin") !=
    298              std::wstring::npos ||
    299              plugin_info.name.find(L"VLC Multimedia Plug-in") !=
    300              std::wstring::npos) {
    301     // VLC hangs on NPP_Destroy if we call NPP_SetWindow with a null window
    302     // handle
    303     quirks_ |= PLUGIN_QUIRK_DONT_SET_NULL_WINDOW_HANDLE_ON_DESTROY;
    304     int major_version = GetPluginMajorVersion(plugin_info);
    305     if (major_version == 0) {
    306       // VLC 0.8.6d and 0.8.6e crash if multiple instances are created.
    307       quirks_ |= PLUGIN_QUIRK_DONT_ALLOW_MULTIPLE_INSTANCES;
    308     }
    309   } else if (filename == kSilverlightPlugin) {
    310     // Explanation for this quirk can be found in
    311     // WebPluginDelegateImpl::Initialize.
    312     quirks_ |= PLUGIN_QUIRK_PATCH_SETCURSOR;
    313   } else if (plugin_info.name.find(L"DivX Web Player") !=
    314              std::wstring::npos) {
    315     // The divx plugin sets its size on the first NPP_SetWindow call and never
    316     // updates its size. We should call the underlying NPP_SetWindow only when
    317     // we have the correct size.
    318     quirks_ |= PLUGIN_QUIRK_IGNORE_FIRST_SETWINDOW_CALL;
    319   }
    320 }
    321 
    322 WebPluginDelegateImpl::~WebPluginDelegateImpl() {
    323   if (::IsWindow(dummy_window_for_activation_)) {
    324     WNDPROC current_wnd_proc = reinterpret_cast<WNDPROC>(
    325         GetWindowLongPtr(dummy_window_for_activation_, GWLP_WNDPROC));
    326     if (current_wnd_proc == DummyWindowProc) {
    327       SetWindowLongPtr(dummy_window_for_activation_,
    328                        GWLP_WNDPROC,
    329                        reinterpret_cast<LONG_PTR>(old_dummy_window_proc_));
    330     }
    331     ::DestroyWindow(dummy_window_for_activation_);
    332   }
    333 
    334   DestroyInstance();
    335 
    336   if (!windowless_)
    337     WindowedDestroyWindow();
    338 
    339   if (handle_event_pump_messages_event_) {
    340     CloseHandle(handle_event_pump_messages_event_);
    341   }
    342 }
    343 
    344 bool WebPluginDelegateImpl::PlatformInitialize() {
    345   plugin_->SetWindow(windowed_handle_);
    346 
    347   if (windowless_) {
    348     CreateDummyWindowForActivation();
    349     handle_event_pump_messages_event_ = CreateEvent(NULL, TRUE, FALSE, NULL);
    350     plugin_->SetWindowlessData(
    351         handle_event_pump_messages_event_,
    352         reinterpret_cast<gfx::NativeViewId>(dummy_window_for_activation_));
    353   }
    354 
    355   // Windowless plugins call the WindowFromPoint API and passes the result of
    356   // that to the TrackPopupMenu API call as the owner window. This causes the
    357   // API to fail as the API expects the window handle to live on the same
    358   // thread as the caller. It works in the other browsers as the plugin lives
    359   // on the browser thread. Our workaround is to intercept the TrackPopupMenu
    360   // API and replace the window handle with the dummy activation window.
    361   if (windowless_ && !g_iat_patch_track_popup_menu.Pointer()->is_patched()) {
    362     g_iat_patch_track_popup_menu.Pointer()->Patch(
    363         GetPluginPath().value().c_str(), "user32.dll", "TrackPopupMenu",
    364         WebPluginDelegateImpl::TrackPopupMenuPatch);
    365   }
    366 
    367   // Windowless plugins can set cursors by calling the SetCursor API. This
    368   // works because the thread inputs of the browser UI thread and the plugin
    369   // thread are attached. We intercept the SetCursor API for windowless
    370   // plugins and remember the cursor being set. This is shipped over to the
    371   // browser in the HandleEvent call, which ensures that the cursor does not
    372   // change when a windowless plugin instance changes the cursor
    373   // in a background tab.
    374   if (windowless_ && !g_iat_patch_set_cursor.Pointer()->is_patched() &&
    375       (quirks_ & PLUGIN_QUIRK_PATCH_SETCURSOR)) {
    376     g_iat_patch_set_cursor.Pointer()->Patch(
    377         GetPluginPath().value().c_str(), "user32.dll", "SetCursor",
    378         WebPluginDelegateImpl::SetCursorPatch);
    379   }
    380 
    381   // The windowed flash plugin has a bug which occurs when the plugin enters
    382   // fullscreen mode. It basically captures the mouse on WM_LBUTTONDOWN and
    383   // does not release capture correctly causing it to stop receiving
    384   // subsequent mouse events. This problem is also seen in Safari where there
    385   // is code to handle this in the wndproc. However the plugin subclasses the
    386   // window again in WM_LBUTTONDOWN before entering full screen. As a result
    387   // Safari does not receive the WM_LBUTTONUP message. To workaround this
    388   // issue we use a per thread mouse hook. This bug does not occur in Firefox
    389   // and opera. Firefox has code similar to Safari. It could well be a bug in
    390   // the flash plugin, which only occurs in webkit based browsers.
    391   if (quirks_ & PLUGIN_QUIRK_HANDLE_MOUSE_CAPTURE) {
    392     mouse_hook_ = SetWindowsHookEx(WH_MOUSE, MouseHookProc, NULL,
    393                                     GetCurrentThreadId());
    394   }
    395 
    396   // On XP, WMP will use its old UI unless a registry key under HKLM has the
    397   // name of the current process.  We do it in the installer for admin users,
    398   // for the rest patch this function.
    399   if ((quirks_ & PLUGIN_QUIRK_PATCH_REGENUMKEYEXW) &&
    400       base::win::GetVersion() == base::win::VERSION_XP &&
    401       (base::win::RegKey().Open(HKEY_LOCAL_MACHINE,
    402           L"SOFTWARE\\Microsoft\\MediaPlayer\\ShimInclusionList\\chrome.exe",
    403           KEY_READ) != ERROR_SUCCESS) &&
    404       !g_iat_patch_reg_enum_key_ex_w.Pointer()->is_patched()) {
    405     g_iat_patch_reg_enum_key_ex_w.Pointer()->Patch(
    406         L"wmpdxm.dll", "advapi32.dll", "RegEnumKeyExW",
    407         WebPluginDelegateImpl::RegEnumKeyExWPatch);
    408   }
    409 
    410   // Flash retrieves the pointers to IMM32 functions with GetProcAddress() calls
    411   // and use them to retrieve IME data. We add a patch to this function so we
    412   // can dispatch these IMM32 calls to the WebPluginIMEWin class, which emulates
    413   // IMM32 functions for Flash.
    414   if (!g_iat_patch_get_proc_address.Pointer()->is_patched() &&
    415       (quirks_ & PLUGIN_QUIRK_EMULATE_IME)) {
    416     g_iat_patch_get_proc_address.Pointer()->Patch(
    417         GetPluginPath().value().c_str(), "kernel32.dll", "GetProcAddress",
    418         GetProcAddressPatch);
    419   }
    420 
    421   if (windowless_ && !g_iat_patch_window_from_point.Pointer()->is_patched() &&
    422       (quirks_ & PLUGIN_QUIRK_FAKE_WINDOW_FROM_POINT)) {
    423     g_iat_patch_window_from_point.Pointer()->Patch(
    424         GetPluginPath().value().c_str(), "user32.dll", "WindowFromPoint",
    425         WebPluginDelegateImpl::WindowFromPointPatch);
    426   }
    427 
    428   return true;
    429 }
    430 
    431 void WebPluginDelegateImpl::PlatformDestroyInstance() {
    432   if (!instance_->plugin_lib())
    433     return;
    434 
    435   // Unpatch if this is the last plugin instance.
    436   if (instance_->plugin_lib()->instance_count() != 1)
    437     return;
    438 
    439   if (g_iat_patch_set_cursor.Pointer()->is_patched())
    440     g_iat_patch_set_cursor.Pointer()->Unpatch();
    441 
    442   if (g_iat_patch_track_popup_menu.Pointer()->is_patched())
    443     g_iat_patch_track_popup_menu.Pointer()->Unpatch();
    444 
    445   if (g_iat_patch_reg_enum_key_ex_w.Pointer()->is_patched())
    446     g_iat_patch_reg_enum_key_ex_w.Pointer()->Unpatch();
    447 
    448   if (g_iat_patch_window_from_point.Pointer()->is_patched())
    449     g_iat_patch_window_from_point.Pointer()->Unpatch();
    450 
    451   if (mouse_hook_) {
    452     UnhookWindowsHookEx(mouse_hook_);
    453     mouse_hook_ = NULL;
    454   }
    455 }
    456 
    457 void WebPluginDelegateImpl::Paint(SkCanvas* canvas, const gfx::Rect& rect) {
    458   if (windowless_ && skia::SupportsPlatformPaint(canvas)) {
    459     skia::ScopedPlatformPaint scoped_platform_paint(canvas);
    460     HDC hdc = scoped_platform_paint.GetPlatformSurface();
    461     WindowlessPaint(hdc, rect);
    462   }
    463 }
    464 
    465 bool WebPluginDelegateImpl::WindowedCreatePlugin() {
    466   DCHECK(!windowed_handle_);
    467 
    468   RegisterNativeWindowClass();
    469 
    470   // The window will be sized and shown later.
    471   windowed_handle_ = CreateWindowEx(
    472       WS_EX_LEFT | WS_EX_LTRREADING | WS_EX_RIGHTSCROLLBAR,
    473       kNativeWindowClassName,
    474       0,
    475       WS_POPUP | WS_CLIPCHILDREN | WS_CLIPSIBLINGS,
    476       0,
    477       0,
    478       0,
    479       0,
    480       GetDesktopWindow(),
    481       0,
    482       GetModuleHandle(NULL),
    483       0);
    484   if (windowed_handle_ == 0)
    485     return false;
    486 
    487     // This is a tricky workaround for Issue 2673 in chromium "Flash: IME not
    488     // available". To use IMEs in this window, we have to make Windows attach
    489   // IMEs to this window (i.e. load IME DLLs, attach them to this process, and
    490   // add their message hooks to this window). Windows attaches IMEs while this
    491   // process creates a top-level window. On the other hand, to layout this
    492   // window correctly in the given parent window (RenderWidgetHostViewWin or
    493   // RenderWidgetHostViewAura), this window should be a child window of the
    494   // parent window. To satisfy both of the above conditions, this code once
    495   // creates a top-level window and change it to a child window of the parent
    496   // window (in the browser process).
    497     SetWindowLongPtr(windowed_handle_, GWL_STYLE,
    498                      WS_CHILD | WS_CLIPCHILDREN | WS_CLIPSIBLINGS);
    499 
    500   BOOL result = SetProp(windowed_handle_, kWebPluginDelegateProperty, this);
    501   DCHECK(result == TRUE) << "SetProp failed, last error = " << GetLastError();
    502 
    503   // Calling SetWindowLongPtrA here makes the window proc ASCII, which is
    504   // required by at least the Shockwave Director plug-in.
    505   SetWindowLongPtrA(windowed_handle_,
    506                     GWLP_WNDPROC,
    507                     reinterpret_cast<LONG_PTR>(DefWindowProcA));
    508 
    509   return true;
    510 }
    511 
    512 void WebPluginDelegateImpl::WindowedDestroyWindow() {
    513   if (windowed_handle_ != NULL) {
    514     // Unsubclass the window.
    515     WNDPROC current_wnd_proc = reinterpret_cast<WNDPROC>(
    516         GetWindowLongPtr(windowed_handle_, GWLP_WNDPROC));
    517     if (current_wnd_proc == NativeWndProc) {
    518       SetWindowLongPtr(windowed_handle_,
    519                        GWLP_WNDPROC,
    520                        reinterpret_cast<LONG_PTR>(plugin_wnd_proc_));
    521     }
    522 
    523     plugin_->WillDestroyWindow(windowed_handle_);
    524 
    525     DestroyWindow(windowed_handle_);
    526     windowed_handle_ = 0;
    527   }
    528 }
    529 
    530 // Erase all messages in the queue destined for a particular window.
    531 // When windows are closing, callers should use this function to clear
    532 // the queue.
    533 // static
    534 void WebPluginDelegateImpl::ClearThrottleQueueForWindow(HWND window) {
    535   ThrottleQueue* throttle_queue = g_throttle_queue.Pointer();
    536 
    537   ThrottleQueue::iterator it;
    538   for (it = throttle_queue->begin(); it != throttle_queue->end(); ) {
    539     if (it->hwnd == window) {
    540       it = throttle_queue->erase(it);
    541     } else {
    542       it++;
    543     }
    544   }
    545 }
    546 
    547 // Delayed callback for processing throttled messages.
    548 // Throttled messages are aggregated globally across all plugins.
    549 // static
    550 void WebPluginDelegateImpl::OnThrottleMessage() {
    551   // The current algorithm walks the list and processes the first
    552   // message it finds for each plugin.  It is important to service
    553   // all active plugins with each pass through the throttle, otherwise
    554   // we see video jankiness.  Copy the set to notify before notifying
    555   // since we may re-enter OnThrottleMessage from CallWindowProc!
    556   ThrottleQueue* throttle_queue = g_throttle_queue.Pointer();
    557   ThrottleQueue notify_queue;
    558   std::set<HWND> processed;
    559 
    560   ThrottleQueue::iterator it = throttle_queue->begin();
    561   while (it != throttle_queue->end()) {
    562     const MSG& msg = *it;
    563     if (processed.find(msg.hwnd) == processed.end()) {
    564       processed.insert(msg.hwnd);
    565       notify_queue.push_back(msg);
    566       it = throttle_queue->erase(it);
    567     } else {
    568       it++;
    569     }
    570   }
    571 
    572   // Due to re-entrancy, we must save our queue state now.  Otherwise, we may
    573   // self-post below, and *also* start up another delayed task when the first
    574   // entry is pushed onto the queue in ThrottleMessage().
    575   bool throttle_queue_was_empty = throttle_queue->empty();
    576 
    577   for (it = notify_queue.begin(); it != notify_queue.end(); ++it) {
    578     const MSG& msg = *it;
    579     WNDPROC proc = reinterpret_cast<WNDPROC>(msg.time);
    580     // It is possible that the window was closed after we queued
    581     // this message.  This is a rare event; just verify the window
    582     // is alive.  (see also bug 1259488)
    583     if (IsWindow(msg.hwnd))
    584       CallWindowProc(proc, msg.hwnd, msg.message, msg.wParam, msg.lParam);
    585   }
    586 
    587   if (!throttle_queue_was_empty) {
    588     base::MessageLoop::current()->PostDelayedTask(
    589         FROM_HERE,
    590         base::Bind(&WebPluginDelegateImpl::OnThrottleMessage),
    591         base::TimeDelta::FromMilliseconds(kFlashWMUSERMessageThrottleDelayMs));
    592   }
    593 }
    594 
    595 // Schedule a windows message for delivery later.
    596 // static
    597 void WebPluginDelegateImpl::ThrottleMessage(WNDPROC proc, HWND hwnd,
    598                                             UINT message, WPARAM wParam,
    599                                             LPARAM lParam) {
    600   MSG msg;
    601   msg.time = reinterpret_cast<DWORD>(proc);
    602   msg.hwnd = hwnd;
    603   msg.message = message;
    604   msg.wParam = wParam;
    605   msg.lParam = lParam;
    606 
    607   ThrottleQueue* throttle_queue = g_throttle_queue.Pointer();
    608 
    609   throttle_queue->push_back(msg);
    610 
    611   if (throttle_queue->size() == 1) {
    612     base::MessageLoop::current()->PostDelayedTask(
    613         FROM_HERE,
    614         base::Bind(&WebPluginDelegateImpl::OnThrottleMessage),
    615         base::TimeDelta::FromMilliseconds(kFlashWMUSERMessageThrottleDelayMs));
    616   }
    617 }
    618 
    619 // We go out of our way to find the hidden windows created by Flash for
    620 // windowless plugins.  We throttle the rate at which they deliver messages
    621 // so that they will not consume outrageous amounts of CPU.
    622 // static
    623 LRESULT CALLBACK WebPluginDelegateImpl::FlashWindowlessWndProc(
    624     HWND hwnd, UINT message, WPARAM wparam, LPARAM lparam) {
    625   std::map<HWND, WNDPROC>::iterator index =
    626       g_window_handle_proc_map.Get().find(hwnd);
    627 
    628   WNDPROC old_proc = (*index).second;
    629   DCHECK(old_proc);
    630 
    631   switch (message) {
    632     case WM_NCDESTROY: {
    633       WebPluginDelegateImpl::ClearThrottleQueueForWindow(hwnd);
    634       g_window_handle_proc_map.Get().erase(index);
    635       break;
    636     }
    637     // Flash may flood the message queue with WM_USER+1 message causing 100% CPU
    638     // usage.  See https://bugzilla.mozilla.org/show_bug.cgi?id=132759.  We
    639     // prevent this by throttling the messages.
    640     case WM_USER + 1: {
    641       WebPluginDelegateImpl::ThrottleMessage(old_proc, hwnd, message, wparam,
    642                                              lparam);
    643       return TRUE;
    644     }
    645 
    646     default: {
    647       break;
    648     }
    649   }
    650   return CallWindowProc(old_proc, hwnd, message, wparam, lparam);
    651 }
    652 
    653 LRESULT CALLBACK WebPluginDelegateImpl::DummyWindowProc(
    654     HWND hwnd, UINT message, WPARAM w_param, LPARAM l_param) {
    655   WebPluginDelegateImpl* delegate = reinterpret_cast<WebPluginDelegateImpl*>(
    656       GetProp(hwnd, kWebPluginDelegateProperty));
    657   CHECK(delegate);
    658   if (message == WM_WINDOWPOSCHANGING) {
    659     // We need to know when the dummy window is parented because windowless
    660     // plugins need the parent window for things like menus. There's no message
    661     // for a parent being changed, but a WM_WINDOWPOSCHANGING is sent so we
    662     // check every time we get it.
    663     // For non-aura builds, this never changes since RenderWidgetHostViewWin's
    664     // window is constant. For aura builds, this changes every time the tab gets
    665     // dragged to a new window.
    666     HWND parent = GetParent(hwnd);
    667     if (parent != delegate->dummy_window_parent_) {
    668       delegate->dummy_window_parent_ = parent;
    669 
    670       // Set the containing window handle as the instance window handle. This is
    671       // what Safari does. Not having a valid window handle causes subtle bugs
    672       // with plugins which retrieve the window handle and use it for things
    673       // like context menus. The window handle can be retrieved via
    674       // NPN_GetValue of NPNVnetscapeWindow.
    675       delegate->instance_->set_window_handle(parent);
    676 
    677       // The plugin caches the result of NPNVnetscapeWindow when we originally
    678       // called NPP_SetWindow, so force it to get the new value.
    679       delegate->WindowlessSetWindow();
    680     }
    681   } else if (message == WM_NCDESTROY) {
    682     RemoveProp(hwnd, kWebPluginDelegateProperty);
    683   }
    684   return CallWindowProc(
    685       delegate->old_dummy_window_proc_, hwnd, message, w_param, l_param);
    686 }
    687 
    688 // Callback for enumerating the Flash windows.
    689 BOOL CALLBACK EnumFlashWindows(HWND window, LPARAM arg) {
    690   WNDPROC wnd_proc = reinterpret_cast<WNDPROC>(arg);
    691   TCHAR class_name[1024];
    692   if (!RealGetWindowClass(window, class_name,
    693                           sizeof(class_name)/sizeof(TCHAR))) {
    694     LOG(ERROR) << "RealGetWindowClass failure: " << GetLastError();
    695     return FALSE;
    696   }
    697 
    698   if (wcscmp(class_name, L"SWFlash_PlaceholderX"))
    699     return TRUE;
    700 
    701   WNDPROC current_wnd_proc = reinterpret_cast<WNDPROC>(
    702         GetWindowLongPtr(window, GWLP_WNDPROC));
    703   if (current_wnd_proc != wnd_proc) {
    704     WNDPROC old_flash_proc = reinterpret_cast<WNDPROC>(SetWindowLongPtr(
    705         window, GWLP_WNDPROC,
    706         reinterpret_cast<LONG_PTR>(wnd_proc)));
    707     DCHECK(old_flash_proc);
    708     g_window_handle_proc_map.Get()[window] = old_flash_proc;
    709   }
    710 
    711   return TRUE;
    712 }
    713 
    714 bool WebPluginDelegateImpl::CreateDummyWindowForActivation() {
    715   DCHECK(!dummy_window_for_activation_);
    716 
    717   dummy_window_for_activation_ = CreateWindowEx(
    718     0,
    719     L"Static",
    720     kDummyActivationWindowName,
    721     WS_CHILD,
    722     0,
    723     0,
    724     0,
    725     0,
    726     // We don't know the parent of the dummy window yet, so just set it to the
    727     // desktop and it'll get parented by the browser.
    728     GetDesktopWindow(),
    729     0,
    730     GetModuleHandle(NULL),
    731     0);
    732 
    733   if (dummy_window_for_activation_ == 0)
    734     return false;
    735 
    736   BOOL result = SetProp(dummy_window_for_activation_,
    737                         kWebPluginDelegateProperty, this);
    738   DCHECK(result == TRUE) << "SetProp failed, last error = " << GetLastError();
    739   old_dummy_window_proc_ = reinterpret_cast<WNDPROC>(SetWindowLongPtr(
    740       dummy_window_for_activation_, GWLP_WNDPROC,
    741       reinterpret_cast<LONG_PTR>(DummyWindowProc)));
    742 
    743   // Flash creates background windows which use excessive CPU in our
    744   // environment; we wrap these windows and throttle them so that they don't
    745   // get out of hand.
    746   if (!EnumThreadWindows(::GetCurrentThreadId(), EnumFlashWindows,
    747       reinterpret_cast<LPARAM>(
    748       &WebPluginDelegateImpl::FlashWindowlessWndProc))) {
    749     // Log that this happened.  Flash will still work; it just means the
    750     // throttle isn't installed (and Flash will use more CPU).
    751     NOTREACHED();
    752     LOG(ERROR) << "Failed to wrap all windowless Flash windows";
    753   }
    754   return true;
    755 }
    756 
    757 bool WebPluginDelegateImpl::WindowedReposition(
    758     const gfx::Rect& window_rect_in_dip,
    759     const gfx::Rect& clip_rect_in_dip) {
    760   if (!windowed_handle_) {
    761     NOTREACHED();
    762     return false;
    763   }
    764 
    765   gfx::Rect window_rect = gfx::win::DIPToScreenRect(window_rect_in_dip);
    766   gfx::Rect clip_rect = gfx::win::DIPToScreenRect(clip_rect_in_dip);
    767   if (window_rect_ == window_rect && clip_rect_ == clip_rect)
    768     return false;
    769 
    770   // We only set the plugin's size here.  Its position is moved elsewhere, which
    771   // allows the window moves/scrolling/clipping to be synchronized with the page
    772   // and other windows.
    773   // If the plugin window has no parent, then don't focus it because it isn't
    774   // being displayed anywhere. See:
    775   // http://code.google.com/p/chromium/issues/detail?id=32658
    776   if (window_rect.size() != window_rect_.size()) {
    777     UINT flags = SWP_NOMOVE | SWP_NOZORDER;
    778     if (!GetParent(windowed_handle_))
    779       flags |= SWP_NOACTIVATE;
    780     ::SetWindowPos(windowed_handle_,
    781                    NULL,
    782                    0,
    783                    0,
    784                    window_rect.width(),
    785                    window_rect.height(),
    786                    flags);
    787   }
    788 
    789   window_rect_ = window_rect;
    790   clip_rect_ = clip_rect;
    791 
    792   // Ensure that the entire window gets repainted.
    793   ::InvalidateRect(windowed_handle_, NULL, FALSE);
    794 
    795   return true;
    796 }
    797 
    798 void WebPluginDelegateImpl::WindowedSetWindow() {
    799   if (!instance_)
    800     return;
    801 
    802   if (!windowed_handle_) {
    803     NOTREACHED();
    804     return;
    805   }
    806 
    807   instance()->set_window_handle(windowed_handle_);
    808 
    809   DCHECK(!instance()->windowless());
    810 
    811   window_.clipRect.top = std::max(0, clip_rect_.y());
    812   window_.clipRect.left = std::max(0, clip_rect_.x());
    813   window_.clipRect.bottom = std::max(0, clip_rect_.y() + clip_rect_.height());
    814   window_.clipRect.right = std::max(0, clip_rect_.x() + clip_rect_.width());
    815   window_.height = window_rect_.height();
    816   window_.width = window_rect_.width();
    817   window_.x = 0;
    818   window_.y = 0;
    819 
    820   window_.window = windowed_handle_;
    821   window_.type = NPWindowTypeWindow;
    822 
    823   // Reset this flag before entering the instance in case of side-effects.
    824   windowed_did_set_window_ = true;
    825 
    826   NPError err = instance()->NPP_SetWindow(&window_);
    827   if (quirks_ & PLUGIN_QUIRK_SETWINDOW_TWICE)
    828     instance()->NPP_SetWindow(&window_);
    829 
    830   WNDPROC current_wnd_proc = reinterpret_cast<WNDPROC>(
    831         GetWindowLongPtr(windowed_handle_, GWLP_WNDPROC));
    832   if (current_wnd_proc != NativeWndProc) {
    833     plugin_wnd_proc_ = reinterpret_cast<WNDPROC>(
    834         SetWindowLongPtr(windowed_handle_,
    835                          GWLP_WNDPROC,
    836                          reinterpret_cast<LONG_PTR>(NativeWndProc)));
    837   }
    838 }
    839 
    840 ATOM WebPluginDelegateImpl::RegisterNativeWindowClass() {
    841   static bool have_registered_window_class = false;
    842   if (have_registered_window_class == true)
    843     return true;
    844 
    845   have_registered_window_class = true;
    846 
    847   WNDCLASSEX wcex;
    848   wcex.cbSize         = sizeof(WNDCLASSEX);
    849   wcex.style          = CS_DBLCLKS;
    850   wcex.lpfnWndProc    = WrapperWindowProc;
    851   wcex.cbClsExtra     = 0;
    852   wcex.cbWndExtra     = 0;
    853   wcex.hInstance      = GetModuleHandle(NULL);
    854   wcex.hIcon          = 0;
    855   wcex.hCursor        = 0;
    856   // Some plugins like windows media player 11 create child windows parented
    857   // by our plugin window, where the media content is rendered. These plugins
    858   // dont implement WM_ERASEBKGND, which causes painting issues, when the
    859   // window where the media is rendered is moved around. DefWindowProc does
    860   // implement WM_ERASEBKGND correctly if we have a valid background brush.
    861   wcex.hbrBackground  = reinterpret_cast<HBRUSH>(COLOR_WINDOW+1);
    862   wcex.lpszMenuName   = 0;
    863   wcex.lpszClassName  = kNativeWindowClassName;
    864   wcex.hIconSm        = 0;
    865 
    866   return RegisterClassEx(&wcex);
    867 }
    868 
    869 LRESULT CALLBACK WebPluginDelegateImpl::WrapperWindowProc(
    870     HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam) {
    871   // This is another workaround for Issue 2673 in chromium "Flash: IME not
    872   // available". Somehow, the CallWindowProc() function does not dispatch
    873   // window messages when its first parameter is a handle representing the
    874   // DefWindowProc() function. To avoid this problem, this code creates a
    875   // wrapper function which just encapsulates the DefWindowProc() function
    876   // and set it as the window procedure of a windowed plug-in.
    877   return DefWindowProc(hWnd, message, wParam, lParam);
    878 }
    879 
    880 // Returns true if the message passed in corresponds to a user gesture.
    881 static bool IsUserGestureMessage(unsigned int message) {
    882   switch (message) {
    883     case WM_LBUTTONDOWN:
    884     case WM_LBUTTONUP:
    885     case WM_RBUTTONDOWN:
    886     case WM_RBUTTONUP:
    887     case WM_MBUTTONDOWN:
    888     case WM_MBUTTONUP:
    889     case WM_KEYDOWN:
    890     case WM_KEYUP:
    891       return true;
    892 
    893     default:
    894       break;
    895   }
    896 
    897   return false;
    898 }
    899 
    900 LRESULT CALLBACK WebPluginDelegateImpl::NativeWndProc(
    901     HWND hwnd, UINT message, WPARAM wparam, LPARAM lparam) {
    902   WebPluginDelegateImpl* delegate = reinterpret_cast<WebPluginDelegateImpl*>(
    903       GetProp(hwnd, kWebPluginDelegateProperty));
    904   if (!delegate) {
    905     NOTREACHED();
    906     return 0;
    907   }
    908 
    909   if (message == delegate->last_message_ &&
    910       delegate->GetQuirks() & PLUGIN_QUIRK_DONT_CALL_WND_PROC_RECURSIVELY &&
    911       delegate->is_calling_wndproc) {
    912     // Real may go into a state where it recursively dispatches the same event
    913     // when subclassed.  See https://bugzilla.mozilla.org/show_bug.cgi?id=192914
    914     // We only do the recursive check for Real because it's possible and valid
    915     // for a plugin to synchronously dispatch a message to itself such that it
    916     // looks like it's in recursion.
    917     return TRUE;
    918   }
    919 
    920   // Flash may flood the message queue with WM_USER+1 message causing 100% CPU
    921   // usage.  See https://bugzilla.mozilla.org/show_bug.cgi?id=132759.  We
    922   // prevent this by throttling the messages.
    923   if (message == WM_USER + 1 &&
    924       delegate->GetQuirks() & PLUGIN_QUIRK_THROTTLE_WM_USER_PLUS_ONE) {
    925     WebPluginDelegateImpl::ThrottleMessage(delegate->plugin_wnd_proc_, hwnd,
    926                                            message, wparam, lparam);
    927     return FALSE;
    928   }
    929 
    930   LRESULT result;
    931   uint32 old_message = delegate->last_message_;
    932   delegate->last_message_ = message;
    933 
    934   static UINT custom_msg = RegisterWindowMessage(kPaintMessageName);
    935   if (message == custom_msg) {
    936     // Get the invalid rect which is in screen coordinates and convert to
    937     // window coordinates.
    938     gfx::Rect invalid_rect;
    939     invalid_rect.set_x(static_cast<short>(LOWORD(wparam)));
    940     invalid_rect.set_y(static_cast<short>(HIWORD(wparam)));
    941     invalid_rect.set_width(static_cast<short>(LOWORD(lparam)));
    942     invalid_rect.set_height(static_cast<short>(HIWORD(lparam)));
    943 
    944     RECT window_rect;
    945     GetWindowRect(hwnd, &window_rect);
    946     invalid_rect.Offset(-window_rect.left, -window_rect.top);
    947 
    948     // The plugin window might have non-client area.   If we don't pass in
    949     // RDW_FRAME then the children don't receive WM_NCPAINT messages while
    950     // scrolling, which causes painting problems (http://b/issue?id=923945).
    951     uint32 flags = RDW_INVALIDATE | RDW_ALLCHILDREN | RDW_FRAME;
    952 
    953     // If a plugin (like Google Earth or Java) has child windows that are hosted
    954     // in a different process, then RedrawWindow with UPDATENOW will
    955     // synchronously wait for this call to complete.  Some messages are pumped
    956     // but not others, which could lead to a deadlock.  So avoid reentrancy by
    957     // only synchronously calling RedrawWindow once at a time.
    958     if (old_message != custom_msg)
    959       flags |= RDW_UPDATENOW;
    960     RECT rect = invalid_rect.ToRECT();
    961     RedrawWindow(hwnd, &rect, NULL, flags);
    962     result = FALSE;
    963   } else {
    964     delegate->is_calling_wndproc = true;
    965 
    966     if (!delegate->user_gesture_message_posted_ &&
    967         IsUserGestureMessage(message)) {
    968       delegate->user_gesture_message_posted_ = true;
    969 
    970       delegate->instance()->PushPopupsEnabledState(true);
    971 
    972       base::MessageLoop::current()->PostDelayedTask(
    973           FROM_HERE,
    974           base::Bind(&WebPluginDelegateImpl::OnUserGestureEnd,
    975                      delegate->user_gesture_msg_factory_.GetWeakPtr()),
    976           base::TimeDelta::FromMilliseconds(kWindowedPluginPopupTimerMs));
    977     }
    978 
    979     HandleCaptureForMessage(hwnd, message);
    980 
    981     // Maintain a local/global stack for the g_current_plugin_instance variable
    982     // as this may be a nested invocation.
    983     WebPluginDelegateImpl* last_plugin_instance = g_current_plugin_instance;
    984 
    985     g_current_plugin_instance = delegate;
    986 
    987     result = CallWindowProc(
    988         delegate->plugin_wnd_proc_, hwnd, message, wparam, lparam);
    989 
    990     // The plugin instance may have been destroyed in the CallWindowProc call
    991     // above. This will also destroy the plugin window. Before attempting to
    992     // access the WebPluginDelegateImpl instance we validate if the window is
    993     // still valid.
    994     if (::IsWindow(hwnd))
    995       delegate->is_calling_wndproc = false;
    996 
    997     g_current_plugin_instance = last_plugin_instance;
    998 
    999     if (message == WM_NCDESTROY) {
   1000       RemoveProp(hwnd, kWebPluginDelegateProperty);
   1001       ClearThrottleQueueForWindow(hwnd);
   1002     }
   1003   }
   1004   if (::IsWindow(hwnd))
   1005     delegate->last_message_ = old_message;
   1006   return result;
   1007 }
   1008 
   1009 void WebPluginDelegateImpl::WindowlessUpdateGeometry(
   1010     const gfx::Rect& window_rect,
   1011     const gfx::Rect& clip_rect) {
   1012   bool window_rect_changed = (window_rect_ != window_rect);
   1013   // Only resend to the instance if the geometry has changed.
   1014   if (!window_rect_changed && clip_rect == clip_rect_)
   1015     return;
   1016 
   1017   clip_rect_ = clip_rect;
   1018   window_rect_ = window_rect;
   1019 
   1020   WindowlessSetWindow();
   1021 
   1022   if (window_rect_changed) {
   1023     WINDOWPOS win_pos = {0};
   1024     win_pos.x = window_rect_.x();
   1025     win_pos.y = window_rect_.y();
   1026     win_pos.cx = window_rect_.width();
   1027     win_pos.cy = window_rect_.height();
   1028 
   1029     NPEvent pos_changed_event;
   1030     pos_changed_event.event = WM_WINDOWPOSCHANGED;
   1031     pos_changed_event.wParam = 0;
   1032     pos_changed_event.lParam = reinterpret_cast<uintptr_t>(&win_pos);
   1033 
   1034     instance()->NPP_HandleEvent(&pos_changed_event);
   1035   }
   1036 }
   1037 
   1038 void WebPluginDelegateImpl::WindowlessPaint(HDC hdc,
   1039                                             const gfx::Rect& damage_rect) {
   1040   DCHECK(hdc);
   1041 
   1042   RECT damage_rect_win;
   1043   damage_rect_win.left   = damage_rect.x();  // + window_rect_.x();
   1044   damage_rect_win.top    = damage_rect.y();  // + window_rect_.y();
   1045   damage_rect_win.right  = damage_rect_win.left + damage_rect.width();
   1046   damage_rect_win.bottom = damage_rect_win.top + damage_rect.height();
   1047 
   1048   // Save away the old HDC as this could be a nested invocation.
   1049   void* old_dc = window_.window;
   1050   window_.window = hdc;
   1051 
   1052   NPEvent paint_event;
   1053   paint_event.event = WM_PAINT;
   1054   paint_event.wParam = PtrToUlong(hdc);
   1055   paint_event.lParam = reinterpret_cast<uintptr_t>(&damage_rect_win);
   1056   base::StatsRate plugin_paint("Plugin.Paint");
   1057   base::StatsScope<base::StatsRate> scope(plugin_paint);
   1058   instance()->NPP_HandleEvent(&paint_event);
   1059   window_.window = old_dc;
   1060 }
   1061 
   1062 void WebPluginDelegateImpl::WindowlessSetWindow() {
   1063   if (!instance())
   1064     return;
   1065 
   1066   if (window_rect_.IsEmpty())  // wait for geometry to be set.
   1067     return;
   1068 
   1069   DCHECK(instance()->windowless());
   1070 
   1071   window_.clipRect.top = clip_rect_.y();
   1072   window_.clipRect.left = clip_rect_.x();
   1073   window_.clipRect.bottom = clip_rect_.y() + clip_rect_.height();
   1074   window_.clipRect.right = clip_rect_.x() + clip_rect_.width();
   1075   window_.height = window_rect_.height();
   1076   window_.width = window_rect_.width();
   1077   window_.x = window_rect_.x();
   1078   window_.y = window_rect_.y();
   1079   window_.type = NPWindowTypeDrawable;
   1080   DrawableContextEnforcer enforcer(&window_);
   1081 
   1082   NPError err = instance()->NPP_SetWindow(&window_);
   1083   DCHECK(err == NPERR_NO_ERROR);
   1084 }
   1085 
   1086 bool WebPluginDelegateImpl::PlatformSetPluginHasFocus(bool focused) {
   1087   DCHECK(instance()->windowless());
   1088 
   1089   NPEvent focus_event;
   1090   focus_event.event = focused ? WM_SETFOCUS : WM_KILLFOCUS;
   1091   focus_event.wParam = 0;
   1092   focus_event.lParam = 0;
   1093 
   1094   instance()->NPP_HandleEvent(&focus_event);
   1095   return true;
   1096 }
   1097 
   1098 static bool NPEventFromWebMouseEvent(const WebMouseEvent& event,
   1099                                      NPEvent* np_event) {
   1100   np_event->lParam = static_cast<uint32>(MAKELPARAM(event.windowX,
   1101                                                    event.windowY));
   1102   np_event->wParam = 0;
   1103 
   1104   if (event.modifiers & WebInputEvent::ControlKey)
   1105     np_event->wParam |= MK_CONTROL;
   1106   if (event.modifiers & WebInputEvent::ShiftKey)
   1107     np_event->wParam |= MK_SHIFT;
   1108   if (event.modifiers & WebInputEvent::LeftButtonDown)
   1109     np_event->wParam |= MK_LBUTTON;
   1110   if (event.modifiers & WebInputEvent::MiddleButtonDown)
   1111     np_event->wParam |= MK_MBUTTON;
   1112   if (event.modifiers & WebInputEvent::RightButtonDown)
   1113     np_event->wParam |= MK_RBUTTON;
   1114 
   1115   switch (event.type) {
   1116     case WebInputEvent::MouseMove:
   1117     case WebInputEvent::MouseLeave:
   1118     case WebInputEvent::MouseEnter:
   1119       np_event->event = WM_MOUSEMOVE;
   1120       return true;
   1121     case WebInputEvent::MouseDown:
   1122       switch (event.button) {
   1123         case WebMouseEvent::ButtonLeft:
   1124           np_event->event = WM_LBUTTONDOWN;
   1125           break;
   1126         case WebMouseEvent::ButtonMiddle:
   1127           np_event->event = WM_MBUTTONDOWN;
   1128           break;
   1129         case WebMouseEvent::ButtonRight:
   1130           np_event->event = WM_RBUTTONDOWN;
   1131           break;
   1132       }
   1133       return true;
   1134     case WebInputEvent::MouseUp:
   1135       switch (event.button) {
   1136         case WebMouseEvent::ButtonLeft:
   1137           np_event->event = WM_LBUTTONUP;
   1138           break;
   1139         case WebMouseEvent::ButtonMiddle:
   1140           np_event->event = WM_MBUTTONUP;
   1141           break;
   1142         case WebMouseEvent::ButtonRight:
   1143           np_event->event = WM_RBUTTONUP;
   1144           break;
   1145       }
   1146       return true;
   1147     default:
   1148       NOTREACHED();
   1149       return false;
   1150   }
   1151 }
   1152 
   1153 static bool NPEventFromWebKeyboardEvent(const WebKeyboardEvent& event,
   1154                                         NPEvent* np_event) {
   1155   np_event->wParam = event.windowsKeyCode;
   1156 
   1157   switch (event.type) {
   1158     case WebInputEvent::KeyDown:
   1159       np_event->event = WM_KEYDOWN;
   1160       np_event->lParam = 0;
   1161       return true;
   1162     case WebInputEvent::Char:
   1163       np_event->event = WM_CHAR;
   1164       np_event->lParam = 0;
   1165       return true;
   1166     case WebInputEvent::KeyUp:
   1167       np_event->event = WM_KEYUP;
   1168       np_event->lParam = 0x8000;
   1169       return true;
   1170     default:
   1171       NOTREACHED();
   1172       return false;
   1173   }
   1174 }
   1175 
   1176 static bool NPEventFromWebInputEvent(const WebInputEvent& event,
   1177                                      NPEvent* np_event) {
   1178   switch (event.type) {
   1179     case WebInputEvent::MouseMove:
   1180     case WebInputEvent::MouseLeave:
   1181     case WebInputEvent::MouseEnter:
   1182     case WebInputEvent::MouseDown:
   1183     case WebInputEvent::MouseUp:
   1184       if (event.size < sizeof(WebMouseEvent)) {
   1185         NOTREACHED();
   1186         return false;
   1187       }
   1188       return NPEventFromWebMouseEvent(
   1189           *static_cast<const WebMouseEvent*>(&event), np_event);
   1190     case WebInputEvent::KeyDown:
   1191     case WebInputEvent::Char:
   1192     case WebInputEvent::KeyUp:
   1193       if (event.size < sizeof(WebKeyboardEvent)) {
   1194         NOTREACHED();
   1195         return false;
   1196       }
   1197       return NPEventFromWebKeyboardEvent(
   1198           *static_cast<const WebKeyboardEvent*>(&event), np_event);
   1199     default:
   1200       return false;
   1201   }
   1202 }
   1203 
   1204 bool WebPluginDelegateImpl::PlatformHandleInputEvent(
   1205     const WebInputEvent& event, WebCursor::CursorInfo* cursor_info) {
   1206   DCHECK(cursor_info != NULL);
   1207 
   1208   NPEvent np_event;
   1209   if (!NPEventFromWebInputEvent(event, &np_event)) {
   1210     return false;
   1211   }
   1212 
   1213   // Allow this plug-in to access this IME emulator through IMM32 API while the
   1214   // plug-in is processing this event.
   1215   if (GetQuirks() & PLUGIN_QUIRK_EMULATE_IME) {
   1216     if (!plugin_ime_)
   1217       plugin_ime_.reset(new WebPluginIMEWin);
   1218   }
   1219   WebPluginIMEWin::ScopedLock lock(
   1220       event.isKeyboardEventType(event.type) ? plugin_ime_.get() : NULL);
   1221 
   1222   HWND last_focus_window = NULL;
   1223 
   1224   if (ShouldTrackEventForModalLoops(&np_event)) {
   1225     // A windowless plugin can enter a modal loop in a NPP_HandleEvent call.
   1226     // For e.g. Flash puts up a context menu when we right click on the
   1227     // windowless plugin area. We detect this by setting up a message filter
   1228     // hook pror to calling NPP_HandleEvent on the plugin and unhook on
   1229     // return from NPP_HandleEvent. If the plugin does enter a modal loop
   1230     // in that context we unhook on receiving the first notification in
   1231     // the message filter hook.
   1232     handle_event_message_filter_hook_ =
   1233         SetWindowsHookEx(WH_MSGFILTER, HandleEventMessageFilterHook, NULL,
   1234                          GetCurrentThreadId());
   1235     // To ensure that the plugin receives keyboard events we set focus to the
   1236     // dummy window.
   1237     // TODO(iyengar) We need a framework in the renderer to identify which
   1238     // windowless plugin is under the mouse and to handle this. This would
   1239     // also require some changes in RenderWidgetHost to detect this in the
   1240     // WM_MOUSEACTIVATE handler and inform the renderer accordingly.
   1241     bool valid = GetParent(dummy_window_for_activation_) != GetDesktopWindow();
   1242     if (valid) {
   1243       last_focus_window = ::SetFocus(dummy_window_for_activation_);
   1244     } else {
   1245       NOTREACHED() << "Dummy window not parented";
   1246     }
   1247   }
   1248 
   1249   bool old_task_reentrancy_state =
   1250       base::MessageLoop::current()->NestableTasksAllowed();
   1251 
   1252   // Maintain a local/global stack for the g_current_plugin_instance variable
   1253   // as this may be a nested invocation.
   1254   WebPluginDelegateImpl* last_plugin_instance = g_current_plugin_instance;
   1255 
   1256   g_current_plugin_instance = this;
   1257 
   1258   handle_event_depth_++;
   1259 
   1260   bool popups_enabled = false;
   1261 
   1262   if (IsUserGestureMessage(np_event.event)) {
   1263     instance()->PushPopupsEnabledState(true);
   1264     popups_enabled = true;
   1265   }
   1266 
   1267   bool ret = instance()->NPP_HandleEvent(&np_event) != 0;
   1268 
   1269   if (popups_enabled) {
   1270     instance()->PopPopupsEnabledState();
   1271   }
   1272 
   1273   // Flash and SilverLight always return false, even when they swallow the
   1274   // event.  Flash does this because it passes the event to its window proc,
   1275   // which is supposed to return 0 if an event was handled.  There are few
   1276   // exceptions, such as IME, where it sometimes returns true.
   1277   ret = true;
   1278 
   1279   if (np_event.event == WM_MOUSEMOVE) {
   1280     current_windowless_cursor_.InitFromExternalCursor(GetCursor());
   1281     // Snag a reference to the current cursor ASAP in case the plugin modified
   1282     // it. There is a nasty race condition here with the multiprocess browser
   1283     // as someone might be setting the cursor in the main process as well.
   1284     current_windowless_cursor_.GetCursorInfo(cursor_info);
   1285   }
   1286 
   1287   handle_event_depth_--;
   1288 
   1289   g_current_plugin_instance = last_plugin_instance;
   1290 
   1291   // We could have multiple NPP_HandleEvent calls nested together in case
   1292   // the plugin enters a modal loop. Reset the pump messages event when
   1293   // the outermost NPP_HandleEvent call unwinds.
   1294   if (handle_event_depth_ == 0) {
   1295     ResetEvent(handle_event_pump_messages_event_);
   1296   }
   1297 
   1298   // If we didn't enter a modal loop, need to unhook the filter.
   1299   if (handle_event_message_filter_hook_) {
   1300     UnhookWindowsHookEx(handle_event_message_filter_hook_);
   1301     handle_event_message_filter_hook_ = NULL;
   1302   }
   1303 
   1304   if (::IsWindow(last_focus_window)) {
   1305     // Restore the nestable tasks allowed state in the message loop and reset
   1306     // the os modal loop state as the plugin returned from the TrackPopupMenu
   1307     // API call.
   1308     base::MessageLoop::current()->SetNestableTasksAllowed(
   1309         old_task_reentrancy_state);
   1310     base::MessageLoop::current()->set_os_modal_loop(false);
   1311     // The Flash plugin at times sets focus to its hidden top level window
   1312     // with class name SWFlash_PlaceholderX. This causes the chrome browser
   1313     // window to receive a WM_ACTIVATEAPP message as a top level window from
   1314     // another thread is now active. We end up in a state where the chrome
   1315     // browser window is not active even though the user clicked on it.
   1316     // Our workaround for this is to send over a raw
   1317     // WM_LBUTTONDOWN/WM_LBUTTONUP combination to the last focus window, which
   1318     // does the trick.
   1319     if (dummy_window_for_activation_ != ::GetFocus()) {
   1320       INPUT input_info = {0};
   1321       input_info.type = INPUT_MOUSE;
   1322       input_info.mi.dwFlags = MOUSEEVENTF_LEFTDOWN;
   1323       ::SendInput(1, &input_info, sizeof(INPUT));
   1324 
   1325       input_info.type = INPUT_MOUSE;
   1326       input_info.mi.dwFlags = MOUSEEVENTF_LEFTUP;
   1327       ::SendInput(1, &input_info, sizeof(INPUT));
   1328     } else {
   1329       ::SetFocus(last_focus_window);
   1330     }
   1331   }
   1332   return ret;
   1333 }
   1334 
   1335 
   1336 void WebPluginDelegateImpl::OnModalLoopEntered() {
   1337   DCHECK(handle_event_pump_messages_event_ != NULL);
   1338   SetEvent(handle_event_pump_messages_event_);
   1339 
   1340   base::MessageLoop::current()->SetNestableTasksAllowed(true);
   1341   base::MessageLoop::current()->set_os_modal_loop(true);
   1342 
   1343   UnhookWindowsHookEx(handle_event_message_filter_hook_);
   1344   handle_event_message_filter_hook_ = NULL;
   1345 }
   1346 
   1347 bool WebPluginDelegateImpl::ShouldTrackEventForModalLoops(NPEvent* event) {
   1348   if (event->event == WM_RBUTTONDOWN)
   1349     return true;
   1350   return false;
   1351 }
   1352 
   1353 void WebPluginDelegateImpl::OnUserGestureEnd() {
   1354   user_gesture_message_posted_ = false;
   1355   instance()->PopPopupsEnabledState();
   1356 }
   1357 
   1358 BOOL WINAPI WebPluginDelegateImpl::TrackPopupMenuPatch(
   1359     HMENU menu, unsigned int flags, int x, int y, int reserved,
   1360     HWND window, const RECT* rect) {
   1361 
   1362   if (g_current_plugin_instance) {
   1363     unsigned long window_process_id = 0;
   1364     unsigned long window_thread_id =
   1365         GetWindowThreadProcessId(window, &window_process_id);
   1366     // TrackPopupMenu fails if the window passed in belongs to a different
   1367     // thread.
   1368     if (::GetCurrentThreadId() != window_thread_id) {
   1369       bool valid =
   1370           GetParent(g_current_plugin_instance->dummy_window_for_activation_) !=
   1371               GetDesktopWindow();
   1372       if (valid) {
   1373         window = g_current_plugin_instance->dummy_window_for_activation_;
   1374       } else {
   1375         NOTREACHED() << "Dummy window not parented";
   1376       }
   1377     }
   1378   }
   1379 
   1380   BOOL result = TrackPopupMenu(menu, flags, x, y, reserved, window, rect);
   1381   return result;
   1382 }
   1383 
   1384 HCURSOR WINAPI WebPluginDelegateImpl::SetCursorPatch(HCURSOR cursor) {
   1385   // The windowless flash plugin periodically calls SetCursor in a wndproc
   1386   // instantiated on the plugin thread. This causes annoying cursor flicker
   1387   // when the mouse is moved on a foreground tab, with a windowless plugin
   1388   // instance in a background tab. We just ignore the call here.
   1389   if (!g_current_plugin_instance) {
   1390     HCURSOR current_cursor = GetCursor();
   1391     if (current_cursor != cursor) {
   1392       ::SetCursor(cursor);
   1393     }
   1394     return current_cursor;
   1395   }
   1396   return ::SetCursor(cursor);
   1397 }
   1398 
   1399 LONG WINAPI WebPluginDelegateImpl::RegEnumKeyExWPatch(
   1400     HKEY key, DWORD index, LPWSTR name, LPDWORD name_size, LPDWORD reserved,
   1401     LPWSTR class_name, LPDWORD class_size, PFILETIME last_write_time) {
   1402   DWORD orig_size = *name_size;
   1403   LONG rv = RegEnumKeyExW(key, index, name, name_size, reserved, class_name,
   1404                           class_size, last_write_time);
   1405   if (rv == ERROR_SUCCESS &&
   1406       GetKeyPath(key).find(L"Microsoft\\MediaPlayer\\ShimInclusionList") !=
   1407           std::wstring::npos) {
   1408     static const wchar_t kChromeExeName[] = L"chrome.exe";
   1409     wcsncpy_s(name, orig_size, kChromeExeName, arraysize(kChromeExeName));
   1410     *name_size =
   1411         std::min(orig_size, static_cast<DWORD>(arraysize(kChromeExeName)));
   1412   }
   1413 
   1414   return rv;
   1415 }
   1416 
   1417 void WebPluginDelegateImpl::ImeCompositionUpdated(
   1418     const base::string16& text,
   1419     const std::vector<int>& clauses,
   1420     const std::vector<int>& target,
   1421     int cursor_position) {
   1422   if (!plugin_ime_)
   1423     plugin_ime_.reset(new WebPluginIMEWin);
   1424 
   1425   plugin_ime_->CompositionUpdated(text, clauses, target, cursor_position);
   1426   plugin_ime_->SendEvents(instance());
   1427 }
   1428 
   1429 void WebPluginDelegateImpl::ImeCompositionCompleted(
   1430     const base::string16& text) {
   1431   if (!plugin_ime_)
   1432     plugin_ime_.reset(new WebPluginIMEWin);
   1433   plugin_ime_->CompositionCompleted(text);
   1434   plugin_ime_->SendEvents(instance());
   1435 }
   1436 
   1437 bool WebPluginDelegateImpl::GetIMEStatus(int* input_type,
   1438                                          gfx::Rect* caret_rect) {
   1439   if (!plugin_ime_)
   1440     return false;
   1441   return plugin_ime_->GetStatus(input_type, caret_rect);
   1442 }
   1443 
   1444 // static
   1445 FARPROC WINAPI WebPluginDelegateImpl::GetProcAddressPatch(HMODULE module,
   1446                                                           LPCSTR name) {
   1447   FARPROC imm_function = WebPluginIMEWin::GetProcAddress(name);
   1448   if (imm_function)
   1449     return imm_function;
   1450   return ::GetProcAddress(module, name);
   1451 }
   1452 
   1453 HWND WINAPI WebPluginDelegateImpl::WindowFromPointPatch(POINT point) {
   1454   HWND window = WindowFromPoint(point);
   1455   if (::ScreenToClient(window, &point)) {
   1456     HWND child = ChildWindowFromPoint(window, point);
   1457     if (::IsWindow(child) &&
   1458         ::GetProp(child, content::kPluginDummyParentProperty))
   1459       return child;
   1460   }
   1461   return window;
   1462 }
   1463 
   1464 void WebPluginDelegateImpl::HandleCaptureForMessage(HWND window,
   1465                                                     UINT message) {
   1466   if (gfx::GetClassName(window) != base::string16(kNativeWindowClassName))
   1467     return;
   1468 
   1469   switch (message) {
   1470     case WM_LBUTTONDOWN:
   1471     case WM_MBUTTONDOWN:
   1472     case WM_RBUTTONDOWN:
   1473       ::SetCapture(window);
   1474       // As per documentation the WM_PARENTNOTIFY message is sent to the parent
   1475       // window chain if mouse input is received by the child window. However
   1476       // the parent receives the WM_PARENTNOTIFY message only if we doubleclick
   1477       // on the window. We send the WM_PARENTNOTIFY message for mouse input
   1478       // messages to the parent to indicate that user action is expected.
   1479       ::SendMessage(::GetParent(window), WM_PARENTNOTIFY, message, 0);
   1480       break;
   1481 
   1482     case WM_LBUTTONUP:
   1483     case WM_MBUTTONUP:
   1484     case WM_RBUTTONUP:
   1485       ::ReleaseCapture();
   1486       break;
   1487 
   1488     default:
   1489       break;
   1490   }
   1491 }
   1492 
   1493 }  // namespace content
   1494