Implement sandbox hooks to forward OPM related GDI system calls.

sandbox/win/src/policy_low_level.h

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_POLICY_LOW_LEVEL_H__
 #define SANDBOX_SRC_POLICY_LOW_LEVEL_H__
 
 #include <stddef.h>
 #include <stdint.h>
 
@@ skipping 25 matching lines @@
 //   policyGen.AddRule(kNtCreateFileSvc, &rule1);
 //   policyGen.AddRule(kNtCreateFileSvc, &rule2);
 //   policyGen.Done();
 //
 // At this point (error checking omitted) the policy_memory can be copied
 // to the target process where it can be evaluated.
 
 namespace sandbox {
 
 // TODO(cpu): Move this constant to crosscall_client.h.
-const size_t kMaxServiceCount = 32;
+const size_t kMaxServiceCount = 64;
 static_assert(IPC_LAST_TAG <= kMaxServiceCount,
               "kMaxServiceCount is too low");
 
 // Defines the memory layout of the policy. This memory is filled by
 // LowLevelPolicy object.
 // For example:
 //
 //  [Service 0] --points to---\
 //  [Service 1] --------------|-----\
 //   ......                   |     |
@@ skipping 127 matching lines @@
                   char* data_start, size_t* data_size) const;
   PolicyBuffer* buffer_;
   OpcodeFactory* opcode_factory_;
   EvalResult action_;
   bool done_;
 };
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_SRC_POLICY_LOW_LEVEL_H__