Fixes to possible GetLastError bugs

sandbox/win/src/restricted_token.cc

Index: sandbox/win/src/restricted_token.cc
diff --git a/sandbox/win/src/restricted_token.cc b/sandbox/win/src/restricted_token.cc
index df5a87ccf0c0e60c0c4dcd6f9bfffb03705e271b..f0fc4cbc37df144fc2f1899181f309ecdf3f91bf 100644
--- a/sandbox/win/src/restricted_token.cc
+++ b/sandbox/win/src/restricted_token.cc
@@ -140,6 +140,7 @@ DWORD RestrictedToken::GetRestrictedToken(
                                 SecurityIdentification, TokenPrimary,
                                 &new_token_handle);
   }
+  auto last_error = ::GetLastError();

[brucedawson, 2015/09/12 00:33:55]

VS 2015 makes "operator new" clear LastError in some build configurations.
"operator delete" might also.

 
   if (deny_only_array)
     delete[] deny_only_array;
@@ -151,7 +152,7 @@ DWORD RestrictedToken::GetRestrictedToken(
     delete[] privileges_to_disable_array;
 
   if (!result)
-    return ::GetLastError();
+    return last_error;
 
   base::win::ScopedHandle new_token(new_token_handle);