Move the Windows sandbox to sandbox/win

sandbox/src/job_unittest.cc

-// Copyright (c) 2012 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-// This file contains unit tests for the job object.
-
-#include "base/win/scoped_process_information.h"
-#include "sandbox/src/job.h"
-#include "testing/gtest/include/gtest/gtest.h"
-
-namespace sandbox {
-
-// Tests the creation and destruction of the job.
-TEST(JobTest, TestCreation) {
-  // Scope the creation of Job.
-  {
-    // Create the job.
-    Job job;
-    ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0));
-
-    // check if the job exists.
-    HANDLE job_handle = ::OpenJobObjectW(GENERIC_ALL, FALSE,
-                                         L"my_test_job_name");
-    ASSERT_TRUE(job_handle != NULL);
-
-    if (job_handle)
-      CloseHandle(job_handle);
-  }
-
-  // Check if the job is destroyed when the object goes out of scope.
-  HANDLE job_handle = ::OpenJobObjectW(GENERIC_ALL, FALSE, L"my_test_job_name");
-  ASSERT_TRUE(job_handle == NULL);
-  ASSERT_EQ(ERROR_FILE_NOT_FOUND, ::GetLastError());
-}
-
-// Tests the method "Detach".
-TEST(JobTest, TestDetach) {
-  HANDLE job_handle;
-  // Scope the creation of Job.
-  {
-    // Create the job.
-    Job job;
-    ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0));
-
-    job_handle = job.Detach();
-    ASSERT_TRUE(job_handle != NULL);
-  }
-
-  // Check to be sure that the job is still alive even after the object is gone
-  // out of scope.
-  HANDLE job_handle_dup = ::OpenJobObjectW(GENERIC_ALL, FALSE,
-                                           L"my_test_job_name");
-  ASSERT_TRUE(job_handle_dup != NULL);
-
-  // Remove all references.
-  if (job_handle_dup)
-    ::CloseHandle(job_handle_dup);
-
-  if (job_handle)
-    ::CloseHandle(job_handle);
-
-  // Check if the jbo is really dead.
-  job_handle = ::OpenJobObjectW(GENERIC_ALL, FALSE, L"my_test_job_name");
-  ASSERT_TRUE(job_handle == NULL);
-  ASSERT_EQ(ERROR_FILE_NOT_FOUND, ::GetLastError());
-}
-
-// Tests the ui exceptions
-TEST(JobTest, TestExceptions) {
-  HANDLE job_handle;
-  // Scope the creation of Job.
-  {
-    // Create the job.
-    Job job;
-    ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name",
-                                      JOB_OBJECT_UILIMIT_READCLIPBOARD));
-
-    job_handle = job.Detach();
-    ASSERT_TRUE(job_handle != NULL);
-
-    JOBOBJECT_BASIC_UI_RESTRICTIONS jbur = {0};
-    DWORD size = sizeof(jbur);
-    BOOL result = ::QueryInformationJobObject(job_handle,
-                                              JobObjectBasicUIRestrictions,
-                                              &jbur, size, &size);
-    ASSERT_TRUE(result);
-
-    ASSERT_EQ(jbur.UIRestrictionsClass & JOB_OBJECT_UILIMIT_READCLIPBOARD, 0);
-    ::CloseHandle(job_handle);
-  }
-
-  // Scope the creation of Job.
-  {
-    // Create the job.
-    Job job;
-    ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0));
-
-    job_handle = job.Detach();
-    ASSERT_TRUE(job_handle != NULL);
-
-    JOBOBJECT_BASIC_UI_RESTRICTIONS jbur = {0};
-    DWORD size = sizeof(jbur);
-    BOOL result = ::QueryInformationJobObject(job_handle,
-                                              JobObjectBasicUIRestrictions,
-                                              &jbur, size, &size);
-    ASSERT_TRUE(result);
-
-    ASSERT_EQ(jbur.UIRestrictionsClass & JOB_OBJECT_UILIMIT_READCLIPBOARD,
-              JOB_OBJECT_UILIMIT_READCLIPBOARD);
-    ::CloseHandle(job_handle);
-  }
-}
-
-// Tests the error case when the job is initialized twice.
-TEST(JobTest, DoubleInit) {
-  // Create the job.
-  Job job;
-  ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_LOCKDOWN, L"my_test_job_name", 0));
-  ASSERT_EQ(ERROR_ALREADY_INITIALIZED, job.Init(JOB_LOCKDOWN, L"test", 0));
-}
-
-// Tests the error case when we use a method and the object is not yet
-// initialized.
-TEST(JobTest, NoInit) {
-  Job job;
-  ASSERT_EQ(ERROR_NO_DATA, job.UserHandleGrantAccess(NULL));
-  ASSERT_EQ(ERROR_NO_DATA, job.AssignProcessToJob(NULL));
-  ASSERT_TRUE(job.Detach() == NULL);
-}
-
-// Tests the initialization of the job with different security level.
-TEST(JobTest, SecurityLevel) {
-  Job job1;
-  ASSERT_EQ(ERROR_SUCCESS, job1.Init(JOB_LOCKDOWN, L"job1", 0));
-
-  Job job2;
-  ASSERT_EQ(ERROR_SUCCESS, job2.Init(JOB_RESTRICTED, L"job2", 0));
-
-  Job job3;
-  ASSERT_EQ(ERROR_SUCCESS, job3.Init(JOB_LIMITED_USER, L"job3", 0));
-
-  Job job4;
-  ASSERT_EQ(ERROR_SUCCESS, job4.Init(JOB_INTERACTIVE, L"job4", 0));
-
-  Job job5;
-  ASSERT_EQ(ERROR_SUCCESS, job5.Init(JOB_UNPROTECTED, L"job5", 0));
-
-  Job job6;
-  ASSERT_EQ(ERROR_BAD_ARGUMENTS, job6.Init(
-      static_cast<JobLevel>(JOB_UNPROTECTED+1), L"job6", 0));
-}
-
-// Tests the method "AssignProcessToJob".
-TEST(JobTest, ProcessInJob) {
-  // Create the job.
-  Job job;
-  ASSERT_EQ(ERROR_SUCCESS, job.Init(JOB_UNPROTECTED, L"job_test_process", 0));
-
-  BOOL result = FALSE;
-
-  wchar_t notepad[] = L"notepad";
-  STARTUPINFO si = { sizeof(si) };
-  base::win::ScopedProcessInformation pi;
-  result = ::CreateProcess(NULL, notepad, NULL, NULL, FALSE, 0, NULL, NULL, &si,
-                           pi.Receive());
-  ASSERT_TRUE(result);
-  ASSERT_EQ(ERROR_SUCCESS, job.AssignProcessToJob(pi.process_handle()));
-
-  // Get the job handle.
-  HANDLE job_handle = job.Detach();
-
-  // Check if the process is in the job.
-  JOBOBJECT_BASIC_PROCESS_ID_LIST jbpidl = {0};
-  DWORD size = sizeof(jbpidl);
-  result = ::QueryInformationJobObject(job_handle,
-                                       JobObjectBasicProcessIdList,
-                                       &jbpidl, size, &size);
-  EXPECT_TRUE(result);
-
-  EXPECT_EQ(1, jbpidl.NumberOfAssignedProcesses);
-  EXPECT_EQ(1, jbpidl.NumberOfProcessIdsInList);
-  EXPECT_EQ(pi.process_id(), jbpidl.ProcessIdList[0]);
-
-  EXPECT_TRUE(::TerminateProcess(pi.process_handle(), 0));
-
-  EXPECT_TRUE(::CloseHandle(job_handle));
-}
-
-}  // namespace sandbox