Add a method BrokerDuplicateSharedMemoryHandle() to the sandbox.

content/public/common/sandbox_init.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #define CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 
 #include "base/files/scoped_file.h"
 #include "base/memory/scoped_ptr.h"
+#include "base/memory/shared_memory.h"
 #include "base/process/process.h"
+#include "base/process/process_handle.h"
 #include "build/build_config.h"
 #include "content/common/content_export.h"
 
 namespace base {
 class CommandLine;
 class FilePath;
 }
 
 namespace sandbox {
 namespace bpf_dsl {
 class Policy;
 }
 struct SandboxInterfaceInfo;
 }
 
 namespace content {
 class SandboxedProcessLauncherDelegate;
 
+#if defined(OS_WIN) || defined(OS_MACOSX) || defined(OS_LINUX)
+// This function allows a sandboxed process to duplicate a SharedMemoryHandle
+// to itself or to another process. The duplicated SharedMemoryHandle has the
+// same access rights as the original. Returns true on success, false
+// otherwise.
+CONTENT_EXPORT bool BrokerDuplicateSharedMemoryHandle(
+    base::SharedMemoryHandle source_handle,
+    base::ProcessId target_process_id,
+    base::SharedMemoryHandle* target_handle);
+#endif  // defined(OS_WIN) || defined(OS_POSIX)

[Robert Sesek, 2015/06/01 22:00:41]

Doesn't match the #if.

[erikchen, 2015/06/01 22:08:35]

Done.

+
 #if defined(OS_WIN)
 
 // Initialize the sandbox for renderer, gpu, utility, worker, nacl, and plugin
 // processes, depending on the command line flags. Although The browser process
 // is not sandboxed, this also needs to be called because it will initialize
 // the broker code.
 // Returns true if the sandbox was initialized succesfully, false if an error
 // occurred.  If process_type isn't one that needs sandboxing true is always
 // returned.
 CONTENT_EXPORT bool InitializeSandbox(
@@ skipping 57 matching lines @@
 
 // Return a "baseline" policy. This is used by a SandboxInitializerDelegate to
 // implement a policy that is derived from the baseline.
 CONTENT_EXPORT scoped_ptr<sandbox::bpf_dsl::Policy>
 GetBPFSandboxBaselinePolicy();
 #endif  // defined(OS_LINUX) || defined(OS_NACL_NONSFI)
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_