[Win10 sandbox mitigations] Four new Win10 mitigations added.

base/win/windows_version.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef BASE_WIN_WINDOWS_VERSION_H_
 #define BASE_WIN_WINDOWS_VERSION_H_
 
 #include <stddef.h>
 
 #include <string>
 
 #include "base/base_export.h"
 #include "base/macros.h"
 
 typedef void* HANDLE;
 
 namespace base {
 namespace win {
 
 // The running version of Windows.  This is declared outside OSInfo for
 // syntactic sugar reasons; see the declaration of GetVersion() below.
 // NOTE: Keep these in order so callers can do things like
 // "if (base::win::GetVersion() >= base::win::VERSION_VISTA) ...".
 enum Version {
   VERSION_PRE_XP = 0,  // Not supported.
   VERSION_XP,
-  VERSION_SERVER_2003, // Also includes XP Pro x64 and Server 2003 R2.
-  VERSION_VISTA,       // Also includes Windows Server 2008.
-  VERSION_WIN7,        // Also includes Windows Server 2008 R2.
-  VERSION_WIN8,        // Also includes Windows Server 2012.
-  VERSION_WIN8_1,      // Also includes Windows Server 2012 R2.
-  VERSION_WIN10,       // Also includes Windows 10 Server.
-  VERSION_WIN_LAST,    // Indicates error condition.
+  VERSION_SERVER_2003,  // Also includes XP Pro x64 and Server 2003 R2.
+  VERSION_VISTA,        // Also includes Windows Server 2008.
+  VERSION_WIN7,         // Also includes Windows Server 2008 R2.
+  VERSION_WIN8,         // Also includes Windows Server 2012.
+  VERSION_WIN8_1,       // Also includes Windows Server 2012 R2.
+  VERSION_WIN10,        // Also includes Windows 10 Server.
+  VERSION_WIN10_10586,  // Version 1511, Threshold 2.

[jschuh, 2016/01/25 23:53:51]

This could be nicer. How about:

  VERSION_WIN10_TH2,  // Threshold 2: Version 1511, Build 10586.

[penny, 2016/01/26 22:37:09]

Done.  Sounds fine to me!

+  VERSION_WIN_LAST,     // Indicates error condition.
 };
 
 // A rough bucketing of the available types of versions of Windows. This is used
 // to distinguish enterprise enabled versions from home versions and potentially
 // server versions.
 enum VersionType {
   SUITE_HOME,
   SUITE_PROFESSIONAL,
   SUITE_SERVER,
   SUITE_LAST,
@@ skipping 73 matching lines @@
 };
 
 // Because this is by far the most commonly-requested value from the above
 // singleton, we add a global-scope accessor here as syntactic sugar.
 BASE_EXPORT Version GetVersion();
 
 }  // namespace win
 }  // namespace base
 
 #endif  // BASE_WIN_WINDOWS_VERSION_H_