Ensure that the DirectWrite font cache works in Chrome canary on Windows 8+ with AppContainer prote…

sandbox/win/src/sandbox_policy.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_
 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_
 
 #include <string>
+#include <vector>
 
 #include "base/basictypes.h"
 #include "base/strings/string16.h"
 #include "sandbox/win/src/sandbox_types.h"
 #include "sandbox/win/src/security_level.h"
 
+typedef std::vector<HANDLE> HandleList;

[Shrikant Kelkar, 2015/05/05 20:43:16]

Same raw handles or scoped/refcounted handles?

+
 namespace sandbox {
 
 class TargetPolicy {
  public:
   // Windows subsystems that can have specific rules.
   // Note: The process subsystem(SUBSY_PROCESS) does not evaluate the request
   // exactly like the CreateProcess API does. See the comment at the top of
   // process_thread_dispatcher.cc for more details.
   enum SubSystem {
     SUBSYS_FILES,             // Creation and opening of files and pipes.
@@ skipping 210 matching lines @@
   // Adds a dll that will be unloaded in the target process before it gets
   // a chance to initialize itself. Typically, dlls that cause the target
   // to crash go here.
   virtual ResultCode AddDllToUnload(const wchar_t* dll_name) = 0;
 
   // Adds a handle that will be closed in the target process after lockdown.
   // A NULL value for handle_name indicates all handles of the specified type.
   // An empty string for handle_name indicates the handle is unnamed.
   virtual ResultCode AddKernelObjectToClose(const wchar_t* handle_type,
                                             const wchar_t* handle_name) = 0;
+
+  // Adds a handle that will be shared with the target process.
+  virtual void AddHandleToShare(HANDLE handle) = 0;
+
+  // Returns the list of handles being shared with the target process. Can be
+  // empty.
+  virtual HandleList GetHandlesBeingShared() = 0;

[cpu_(ooo_6.6-7.5), 2015/05/05 20:42:39]

remove this from the interface and place it only on the policy_base class, it
can be non-virtual.

 };
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_