Shutdown the sandbox MessageServer before deleting it.

sandbox/mac/mach_message_server.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/mac/mach_message_server.h"
 
 #include <bsm/libbsm.h>
 #include <servers/bootstrap.h>
 #include <stddef.h>
 
@@ skipping 58 matching lines @@
   // Set up the dispatch queue to service the bootstrap port.
   std::string label = base::StringPrintf(
       "org.chromium.sandbox.MachMessageServer.%p", demuxer_);
   dispatch_source_.reset(new base::DispatchSourceMach(
       label.c_str(), server_port_.get(), ^{ ReceiveMessage(); }));
   dispatch_source_->Resume();
 
   return true;
 }
 
+void MachMessageServer::Shutdown() {
+  dispatch_source_.reset();
+}
+
 pid_t MachMessageServer::GetMessageSenderPID(IPCMessage request) {
   // Get the PID of the task that sent this request. This requires getting at
   // the trailer of the message, from the header.
   mach_msg_audit_trailer_t* trailer =
       reinterpret_cast<mach_msg_audit_trailer_t*>(
           reinterpret_cast<vm_address_t>(request.mach) +
               round_msg(request.mach->msgh_size));
   // TODO(rsesek): In the 10.7 SDK, there's audit_token_to_pid().
   pid_t sender_pid;
   audit_token_to_au32(trailer->msgh_audit,
@@ skipping 95 matching lines @@
   // forwarded message was sent from the process hosting this sandbox server,
   // destroying the message could also destroy rights held outside the scope of
   // this message server.
   if (!did_forward_message_) {
     mach_msg_destroy(request);
     mach_msg_destroy(reply);
   }
 }
 
 }  // namespace sandbox