Fix the POC and some of unit tests to be build and...

sandbox/sandbox_poc/sandbox.cc

-// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
+// Copyright (c) 2006-2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <windows.h>
 #include <tchar.h>
 #include <shellapi.h>
 #include "sandbox/sandbox_poc/sandbox.h"
 #include "base/logging.h"
 #include "sandbox/sandbox_poc/main_ui_window.h"
 #include "sandbox/src/sandbox.h"
@@ skipping 129 matching lines @@
                                FILE_SHARE_READ | FILE_SHARE_WRITE,
                                NULL,  // Default security attributes.
                                CREATE_ALWAYS,
                                FILE_ATTRIBUTE_NORMAL,
                                NULL);  // No template
 
     if (INVALID_HANDLE_VALUE == pipe) {
       return -4;
     }
 
-    // Initialization is finished, so we can enter lock-down mode
-    target_service->LowerToken();
-
     // We now know what we should load, so load it
     HMODULE dll_module = ::LoadLibraryA(dll_name.c_str());
     if (dll_module == NULL) {
       // TODO(finnur): write the failure to the log file
       return -5;
     }
 
+    // Initialization is finished, so we can enter lock-down mode
+    target_service->LowerToken();
+
     lpfnInit init_function =
         (lpfnInit) ::GetProcAddress(dll_module, entry_point.c_str());
 
     if (!init_function) {
       // TODO(finnur): write the failure to the log file
       ::FreeLibrary(dll_module);
       CloseHandle(pipe);
       return -6;
     }
 
    // Transfer control to the entry point in the DLL requested
     init_function(pipe);
 
     CloseHandle(pipe);
     Sleep(1000);  // Give a change to the debug output to arrive before the
                   // end of the process
 
     ::FreeLibrary(dll_module);
   }
 
   return 0;
 }