Use scoped_refptr and RefCountedThreadSafe for TargetPolicy.

sandbox/win/src/broker_services.h

Index: sandbox/win/src/broker_services.h
diff --git a/sandbox/win/src/broker_services.h b/sandbox/win/src/broker_services.h
index 56890050c3995f6c93b6d0429dbc2b230911e45a..cfbd21d565d4726a7a71ef7c891e8a542407363a 100644
--- a/sandbox/win/src/broker_services.h
+++ b/sandbox/win/src/broker_services.h
@@ -9,8 +9,10 @@
 #include <map>
 #include <set>
 #include <utility>
+
 #include "base/basictypes.h"
 #include "base/compiler_specific.h"
+#include "base/memory/ref_counted.h"
 #include "base/win/scoped_handle.h"
 #include "sandbox/win/src/crosscall_server.h"
 #include "sandbox/win/src/job.h"
@@ -44,10 +46,10 @@ class BrokerServicesBase final : public BrokerServices,
 
   // BrokerServices interface.
   ResultCode Init() override;
-  TargetPolicy* CreatePolicy() override;
+  scoped_refptr<TargetPolicy> CreatePolicy() override;
   ResultCode SpawnTarget(const wchar_t* exe_path,
                          const wchar_t* command_line,
-                         TargetPolicy* policy,
+                         scoped_refptr<TargetPolicy> policy,
                          PROCESS_INFORMATION* target) override;
   ResultCode WaitForAllTargets() override;
   ResultCode AddTargetPeer(HANDLE peer_process) override;