CreateThread interception, to use CreateRemoteThread

sandbox/win/src/top_level_dispatcher.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/top_level_dispatcher.h"
 
 #include <stdint.h>
 #include <string.h>
 
 #include "base/logging.h"
@@ skipping 29 matching lines @@
   dispatcher = new NamedPipeDispatcher(policy_);
   ipc_targets_[IPC_CREATENAMEDPIPEW_TAG] = dispatcher;
   named_pipe_dispatcher_.reset(dispatcher);
 
   dispatcher = new ThreadProcessDispatcher(policy_);
   ipc_targets_[IPC_NTOPENTHREAD_TAG] = dispatcher;
   ipc_targets_[IPC_NTOPENPROCESS_TAG] = dispatcher;
   ipc_targets_[IPC_CREATEPROCESSW_TAG] = dispatcher;
   ipc_targets_[IPC_NTOPENPROCESSTOKEN_TAG] = dispatcher;
   ipc_targets_[IPC_NTOPENPROCESSTOKENEX_TAG] = dispatcher;
+  ipc_targets_[IPC_CREATETHREAD_TAG] = dispatcher;
   thread_process_dispatcher_.reset(dispatcher);
 
   dispatcher = new SyncDispatcher(policy_);
   ipc_targets_[IPC_CREATEEVENT_TAG] = dispatcher;
   ipc_targets_[IPC_OPENEVENT_TAG] = dispatcher;
   sync_dispatcher_.reset(dispatcher);
 
   dispatcher = new RegistryDispatcher(policy_);
   ipc_targets_[IPC_NTCREATEKEY_TAG] = dispatcher;
   ipc_targets_[IPC_NTOPENKEY_TAG] = dispatcher;
@@ skipping 77 matching lines @@
 }
 
 Dispatcher* TopLevelDispatcher::GetDispatcher(int ipc_tag) {
   if (ipc_tag >= IPC_LAST_TAG || ipc_tag <= IPC_UNUSED_TAG)
     return NULL;
 
   return ipc_targets_[ipc_tag];
 }
 
 }  // namespace sandbox