Fix sandbox::PolicyBase leak

sandbox/win/src/sandbox_policy_base.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/sandbox_policy_base.h"
 
 #include <sddl.h>
 #include <stddef.h>
 #include <stdint.h>
 
@@ skipping 97 matching lines @@
 SANDBOX_INTERCEPT IntegrityLevel g_shared_delayed_integrity_level;
 SANDBOX_INTERCEPT MitigationFlags g_shared_delayed_mitigations;
 
 // Initializes static members.
 HWINSTA PolicyBase::alternate_winstation_handle_ = NULL;
 HDESK PolicyBase::alternate_desktop_handle_ = NULL;
 IntegrityLevel PolicyBase::alternate_desktop_integrity_level_label_ =
     INTEGRITY_LEVEL_SYSTEM;
 
 PolicyBase::PolicyBase()
-    : ref_count(1),
+    : ref_count(0),
       lockdown_level_(USER_LOCKDOWN),
       initial_level_(USER_LOCKDOWN),
       job_level_(JOB_LOCKDOWN),
       ui_exceptions_(0),
       memory_limit_(0),
       use_alternate_desktop_(false),
       use_alternate_winstation_(false),
       file_system_init_(false),
       relaxed_interceptions_(true),
       stdout_handle_(INVALID_HANDLE_VALUE),
@@ skipping 25 matching lines @@
     ::LocalFree(lowbox_sid_);
 
   ::DeleteCriticalSection(&lock_);
 }
 
 void PolicyBase::AddRef() {
   ::InterlockedIncrement(&ref_count);
 }
 
 void PolicyBase::Release() {
   if (0 == ::InterlockedDecrement(&ref_count))

[Will Harris, 2016/09/07 23:28:33]

does this check not need to change now?

     delete this;
 }
 
 ResultCode PolicyBase::SetTokenLevel(TokenLevel initial, TokenLevel lockdown) {
   if (initial < lockdown) {
     return SBOX_ERROR_BAD_PARAMS;
   }
   initial_level_ = initial;
   lockdown_level_ = lockdown;
   return SBOX_ALL_OK;
@@ skipping 547 matching lines @@
       break;
     }
 
     default: { return SBOX_ERROR_UNSUPPORTED; }
   }
 
   return SBOX_ALL_OK;
 }
 
 }  // namespace sandbox