CreateThread interception, to use CreateRemoteThread

sandbox/win/src/process_thread_policy.h

 // Copyright (c) 2006-2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_PROCESS_THREAD_POLICY_H_
 #define SANDBOX_SRC_PROCESS_THREAD_POLICY_H_
 
 #include <string>
 
 #include "sandbox/win/src/policy_low_level.h"
@@ skipping 57 matching lines @@
   // Processes a 'CreateProcessW()' request from the target.
   // 'client_info' : the target process that is making the request.
   // 'eval_result' : The desired policy action to accomplish.
   // 'app_name' : The full path of the process to be created.
   // 'command_line' : The command line passed to the created process.
   static DWORD CreateProcessWAction(EvalResult eval_result,
                                     const ClientInfo& client_info,
                                     const base::string16 &app_name,
                                     const base::string16 &command_line,
                                     PROCESS_INFORMATION* process_info);
+
+  // Processes a 'CreateThread()' request from the target.
+  // 'client_info' : the target process that is making the request.
+  // 'eval_result' : The desired policy action to accomplish.
+  static DWORD CreateThreadAction(EvalResult eval_result,
+                                  const ClientInfo& client_info,
+                                  LPSECURITY_ATTRIBUTES thread_attributes,
+                                  SIZE_T stack_size,
+                                  LPTHREAD_START_ROUTINE start_address,
+                                  PVOID parameter,
+                                  DWORD creation_flags,
+                                  LPDWORD thread_id,
+                                  HANDLE* handle);
 };
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_SRC_PROCESS_THREAD_POLICY_H_