Add a sandbox API for broker handle duplication

chrome/common/chrome_content_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_content_client.h"
 
 #include "base/command_line.h"
 #include "base/file_util.h"
 #include "base/path_service.h"
 #include "base/process_util.h"
@@ skipping 399 matching lines @@
   }
 
   // Add the policy for the pipes.
   if (policy->AddRule(sandbox::TargetPolicy::SUBSYS_NAMED_PIPES,
                       sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY,
                       L"\\\\.\\pipe\\chrome.*") != sandbox::SBOX_ALL_OK) {
     NOTREACHED();
     return false;
   }
 
+  // Add policy for proxy window pump.
+  if (policy->AddRule(sandbox::TargetPolicy::SUBSYS_HANDLES,
+                      sandbox::TargetPolicy::HANDLES_DUP_ANY,
+                      L"Event") != sandbox::SBOX_ALL_OK) {
+    NOTREACHED();
+    return false;
+  }
+
   // Allow Talk's camera control.
   base::win::RegKey talk_key(HKEY_CURRENT_USER,
                              L"Software\\Google\\Google Talk Plugin",
                              KEY_READ);
   if (talk_key.Valid()) {
     string16 install_dir;
     if (talk_key.ReadValue(L"install_dir", &install_dir) == ERROR_SUCCESS) {
       if (install_dir[install_dir.size() - 1] != '\\')
         install_dir.append(L"\\*");
       else
@@ skipping 43 matching lines @@
   DCHECK(sandbox_profile_resource_id);
   if (sandbox_type == CHROME_SANDBOX_TYPE_NACL_LOADER) {
     *sandbox_profile_resource_id = IDR_NACL_SANDBOX_PROFILE;
     return true;
   }
   return false;
 }
 #endif
 
 }  // namespace chrome