NaCl: Supply Windows handle-passing function

content/public/common/sandbox_init.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #define CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #pragma once
 
 #include "base/process.h"
 #include "build/build_config.h"
@@ skipping 24 matching lines @@
 // This is a restricted version of Windows' DuplicateHandle() function
 // that works inside the sandbox and can send handles but not retrieve
 // them.  Unlike DuplicateHandle(), it takes a process ID rather than
 // a process handle.  It returns true on success, false otherwise.
 CONTENT_EXPORT bool BrokerDuplicateHandle(HANDLE source_handle,
                                           DWORD target_process_id,
                                           HANDLE* target_handle,
                                           DWORD desired_access,
                                           DWORD options);
 
+// Inform the current process's sandbox broker (e.g. the broker for
+// 32-bit processes) about a process created under a different sandbox
+// broker (e.g. the broker for 64-bit processes).  This allows
+// BrokerDuplicateHandle() to send handles to a process managed by
+// another broker.  For example, it allows the 32-bit renderer to send
+// handles to 64-bit NaCl processes.  This returns true on success,
+// false otherwise.
+CONTENT_EXPORT bool BrokerAddTargetPeer(HANDLE peer_process);
+
 #elif defined(OS_MACOSX)
 
 // Initialize the sandbox of the given |sandbox_type|, optionally specifying a
 // directory to allow access to. Note specifying a directory needs to be
 // supported by the sandbox profile associated with the given |sandbox_type|.
 // Valid values for |sandbox_type| are defined either by the enum SandboxType,
 // or by ContentClient::GetSandboxProfileForSandboxType().
 //
 // If the |sandbox_type| isn't one of the ones defined by content then the
 // embedder is queried using ContentClient::GetSandboxPolicyForSandboxType().
 // The embedder can use values for |sandbox_type| starting from
 // content::sandbox::SANDBOX_PROCESS_TYPE_AFTER_LAST_TYPE.
 //
 // Returns true if the sandbox was initialized succesfully, false if an error
 // occurred.  If process_type isn't one that needs sandboxing, no action is
 // taken and true is always returned.
 CONTENT_EXPORT bool InitializeSandbox(int sandbox_type,
                                       const FilePath& allowed_path);
 
 #elif defined(OS_LINUX)
 
 CONTENT_EXPORT void InitializeSandbox();
 
 #endif
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_