Ensure that the DirectWrite font cache works in Chrome canary on Windows 8+ with AppContainer prote…

sandbox/win/src/sandbox_policy.h

Index: sandbox/win/src/sandbox_policy.h
diff --git a/sandbox/win/src/sandbox_policy.h b/sandbox/win/src/sandbox_policy.h
index 6f096fba25745d46301676dd011862c9d30f2160..b81118b939acfcfd9d5231526408b7981763fd8f 100644
--- a/sandbox/win/src/sandbox_policy.h
+++ b/sandbox/win/src/sandbox_policy.h
@@ -6,12 +6,15 @@
 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_
 
 #include <string>
+#include <vector>
 
 #include "base/basictypes.h"
 #include "base/strings/string16.h"
 #include "sandbox/win/src/sandbox_types.h"
 #include "sandbox/win/src/security_level.h"
 
+typedef std::vector<HANDLE> HandleList;

[Shrikant Kelkar, 2015/05/05 20:43:16]

Same raw handles or scoped/refcounted handles?

+
 namespace sandbox {
 
 class TargetPolicy {
@@ -242,6 +245,13 @@ class TargetPolicy {
   // An empty string for handle_name indicates the handle is unnamed.
   virtual ResultCode AddKernelObjectToClose(const wchar_t* handle_type,
                                             const wchar_t* handle_name) = 0;
+
+  // Adds a handle that will be shared with the target process.
+  virtual void AddHandleToShare(HANDLE handle) = 0;
+
+  // Returns the list of handles being shared with the target process. Can be
+  // empty.
+  virtual HandleList GetHandlesBeingShared() = 0;

[cpu_(ooo_6.6-7.5), 2015/05/05 20:42:39]

remove this from the interface and place it only on the policy_base class, it
can be non-virtual.

 };
 
 }  // namespace sandbox