Use scoped_refptr and RefCountedThreadSafe for TargetPolicy.

sandbox/win/tests/common/controller.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/tests/common/controller.h"
 
 #include <string>
 
+#include "base/memory/ref_counted.h"
 #include "base/memory/shared_memory.h"
 #include "base/process/process.h"
 #include "base/process/process_handle.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/sys_string_conversions.h"
 #include "base/win/windows_version.h"
 #include "sandbox/win/src/sandbox_factory.h"
 
 namespace {
 
@@ skipping 107 matching lines @@
 
   // Close all ALPC ports.
   if (base::win::GetVersion() >= base::win::VERSION_WIN8) {
     policy_->AddKernelObjectToClose(L"ALPC Port", NULL);
   }
 
   is_init_ = true;
 }
 
 TargetPolicy* TestRunner::GetPolicy() {
-  return policy_;
+  return policy_.get();
 }
 
 TestRunner::~TestRunner() {
   if (target_process_.IsValid() && kill_on_destruction_)
     ::TerminateProcess(target_process_.Get(), 0);
-
-  if (policy_)
-    policy_->Release();
 }
 
 bool TestRunner::AddRule(TargetPolicy::SubSystem subsystem,
                          TargetPolicy::Semantics semantics,
                          const wchar_t* pattern) {
   if (!is_init_)
     return false;
 
   return (SBOX_ALL_OK == policy_->AddRule(subsystem, semantics, pattern));
 }
@@ skipping 206 matching lines @@
 
     target->LowerToken();
   } else if (0 != _wcsicmp(argv[1], L"-child-no-sandbox")) {
     return SBOX_TEST_FAILED_TO_EXECUTE_COMMAND;
   }
 
   return command(argc - 4, argv + 4);
 }
 
 }  // namespace sandbox