Prevent the renderer from dying if launched under App-V/SoftGrid.

sandbox/src/target_services.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/src/target_services.h"
 
 #include <process.h>
 
 #include "base/basictypes.h"
 #include "sandbox/src/crosscall_client.h"
@@ skipping 53 matching lines @@
 TargetServicesBase::TargetServicesBase() {
 }
 
 ResultCode TargetServicesBase::Init() {
   process_state_.SetInitCalled();
   return SBOX_ALL_OK;
 }
 
 // Failure here is a breach of security so the process is terminated.
 void TargetServicesBase::LowerToken() {
-  if (ERROR_SUCCESS !=
-      SetProcessIntegrityLevel(g_shared_delayed_integrity_level))
+  DWORD error_code = SetProcessIntegrityLevel(g_shared_delayed_integrity_level);
+  // Here we don't terminate the process if the error is ERROR_INVALID_HANDLE,
+  // this is because this error is not possible in normal circumstances, unless
+  // it is hooked by sftldr_wow64.dll, in which case we prefer to keep running.
+  // See http://crbug.com/95888.
+  if (ERROR_SUCCESS != error_code && ERROR_INVALID_HANDLE != error_code)
     ::TerminateProcess(::GetCurrentProcess(), SBOX_FATAL_INTEGRITY);
   process_state_.SetRevertedToSelf();
   // If the client code as called RegOpenKey, advapi32.dll has cached some
   // handles. The following code gets rid of them.
   if (!::RevertToSelf())
     ::TerminateProcess(::GetCurrentProcess(), SBOX_FATAL_DROPTOKEN);
   if (!FlushCachedRegHandles())
     ::TerminateProcess(::GetCurrentProcess(), SBOX_FATAL_FLUSHANDLES);
   if (ERROR_SUCCESS != ::RegDisablePredefinedCache())
     ::TerminateProcess(::GetCurrentProcess(), SBOX_FATAL_CACHEDISABLE);
@@ skipping 83 matching lines @@
   if (process_state_ < 2)
     process_state_ = 2;
 }
 
 void ProcessState::SetRevertedToSelf() {
   if (process_state_ < 3)
     process_state_ = 3;
 }
 
 }  // namespace sandbox