Add a new driver bug workaround SANDBOX_START_EARLY

content/common/sandbox_linux/sandbox_seccomp_bpf_linux.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_linux/sandbox_seccomp_bpf_linux.h"
 
 #include <errno.h>
 #include <fcntl.h>
 #include <sys/socket.h>
 #include <sys/stat.h>
@@ skipping 152 matching lines @@
 
 std::unique_ptr<SandboxBPFBasePolicy> GetGpuProcessSandbox() {
   const base::CommandLine& command_line =
       *base::CommandLine::ForCurrentProcess();
   bool allow_sysv_shm = false;
   if (command_line.HasSwitch(switches::kGpuSandboxAllowSysVShm)) {
     DCHECK(IsArchitectureArm());
     allow_sysv_shm = true;
   }
 
+  // XXX: Generalize CrosArmGpuProcessPolicy to a new
+  // GpuProcessPolicyEarlySandbox then here just rely on if
+  // has switches::kGpuSandboxStartEarly
   if (IsChromeOS() && IsArchitectureArm()) {
     return std::unique_ptr<SandboxBPFBasePolicy>(
         new CrosArmGpuProcessPolicy(allow_sysv_shm));
   } else {
     bool allow_mincore = command_line.HasSwitch(switches::kUseGL) &&
                          command_line.GetSwitchValueASCII(switches::kUseGL) ==
                              gfx::kGLImplementationEGLName;
     return std::unique_ptr<SandboxBPFBasePolicy>(
         new GpuProcessPolicy(allow_mincore));
   }
@@ skipping 120 matching lines @@
 SandboxSeccompBPF::GetBaselinePolicy() {
 #if defined(USE_SECCOMP_BPF)
   return std::unique_ptr<sandbox::bpf_dsl::Policy>(new BaselinePolicy);
 #else
   return std::unique_ptr<sandbox::bpf_dsl::Policy>();
 #endif  // defined(USE_SECCOMP_BPF)
 }
 #endif  // !defined(OS_NACL_NONSFI)
 
 }  // namespace content