[Win10 sandbox mitigations] Four new Win10 mitigations added.

sandbox/win/tests/common/controller.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_TESTS_COMMON_CONTROLLER_H_
 #define SANDBOX_WIN_TESTS_COMMON_CONTROLLER_H_
 
 #include <windows.h>
 #include <string>
 
@@ skipping 55 matching lines @@
 extern "C" {
 typedef int (*CommandFunction)(int argc, wchar_t **argv);
 }
 
 // Class to facilitate the launch of a test inside the sandbox.
 class TestRunner {
  public:
   TestRunner(JobLevel job_level, TokenLevel startup_token,
              TokenLevel main_token);
 
+  // TODO(pennymac): Once ALPCs are no longer being auto disabled in Init(),
+  //                 this overload won't be needed.
+  TestRunner(bool enable_create_process);
+
   TestRunner();
 
   ~TestRunner();
 
   // Adds a rule to the policy. The parameters are the same as the AddRule
   // function in the sandbox.
   bool AddRule(TargetPolicy::SubSystem subsystem,
                TargetPolicy::Semantics semantics,
                const wchar_t* pattern);
 
@@ skipping 34 matching lines @@
 
   // Returns the process handle for an asynchronous test.
   HANDLE process() { return target_process_.Get(); }
 
   // Returns the process ID for an asynchronous test.
   DWORD process_id() { return target_process_id_; }
 
  private:
   // Initializes the data in the object. Sets is_init_ to tree if the
   // function succeeds. This is meant to be called from the constructor.
-  void Init(JobLevel job_level, TokenLevel startup_token,
-            TokenLevel main_token);
+  void Init(JobLevel job_level,
+            TokenLevel startup_token,
+            TokenLevel main_token,
+            bool enable_create_process);
 
   // The actual runner.
   int InternalRunTest(const wchar_t* command);
 
   BrokerServices* broker_;
   TargetPolicy* policy_;
   DWORD timeout_;
   SboxTestsState state_;
   bool is_init_;
   bool is_async_;
   bool no_sandbox_;
   bool kill_on_destruction_;
   base::win::ScopedHandle target_process_;
   DWORD target_process_id_;
 };
 
 // Returns the broker services.
 BrokerServices* GetBroker();
 
 // Constructs a full path to a file inside the system32 (or syswow64) folder.
 base::string16 MakePathToSys(const wchar_t* name, bool is_obj_man_path);
 
 // Runs the given test on the target process.
 int DispatchCall(int argc, wchar_t **argv);
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_WIN_TESTS_COMMON_CONTROLLER_H_