Handle STATUS_BUFFER_OVERFLOW return value from NtQueryObject().

sandbox/src/handle_closer_agent.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/src/handle_closer_agent.h"
 
 #include "base/logging.h"
 #include "sandbox/src/nt_internals.h"
 #include "sandbox/src/win_utils.h"
 
@@ skipping 64 matching lines @@
   // Keep incrementing until we hit the number of handles reported by
   // GetProcessHandleCount(). If we hit a very long sequence of invalid
   // handles we assume that we've run past the end of the table.
   while (handle_count && invalid_count < kInvalidHandleThreshold) {
     reinterpret_cast<size_t&>(handle) += kHandleOffset;
     NTSTATUS rc;
 
     // Get the type name, reusing the buffer.
     ULONG size = static_cast<ULONG>(type_info_buffer.size());
     rc = QueryObject(handle, ObjectTypeInformation, type_info, size, &size);
-    while (rc == STATUS_INFO_LENGTH_MISMATCH) {
+    while (rc == STATUS_INFO_LENGTH_MISMATCH ||
+           rc == STATUS_BUFFER_OVERFLOW) {
       type_info_buffer.resize(size + sizeof(wchar_t));
       type_info = reinterpret_cast<OBJECT_TYPE_INFORMATION*>(
           &(type_info_buffer[0]));
       rc = QueryObject(handle, ObjectTypeInformation, type_info, size, &size);
       // Leave padding for the nul terminator.
       if (NT_SUCCESS(0) && size == type_info_buffer.size())
         rc = STATUS_INFO_LENGTH_MISMATCH;
     }
     if (!NT_SUCCESS(rc)) {
       ++invalid_count;
@@ skipping 19 matching lines @@
         return false;
       if (!::CloseHandle(handle))
         return false;
     }
   }
 
   return true;
 }
 
 }  // namespace sandbox