[Windows CFG Test] Added unittest for CFG enabling on process.

sandbox/win/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//testing/test.gni")
 
 # This needs to be a static library rather than a sources set because small
 # portions of this are used in some contexts (like chrome_elf), and it
 # doesnn't seem to dead-code strip very well. This saves 12K on chrome_elf.dll,
 # over a source set, for example.
@@ skipping 154 matching lines @@
   deps = [
     "//base",
     "//base:base_static",
   ]
 }
 
 test("sbox_integration_tests") {
   sources = [
     "src/address_sanitizer_test.cc",
     "src/app_container_test.cc",
+    "src/cfi_unittest.cc",
     "src/file_policy_test.cc",
     "src/handle_closer_test.cc",
     "src/handle_inheritance_test.cc",
     "src/integrity_level_test.cc",
     "src/ipc_ping_test.cc",
     "src/lpc_policy_test.cc",
     "src/named_pipe_policy_test.cc",
     "src/policy_target_test.cc",
     "src/process_mitigations_test.cc",
     "src/process_policy_test.cc",
     "src/registry_policy_test.cc",
     "src/restricted_token_test.cc",
     "src/sync_policy_test.cc",
     "src/sync_policy_test.h",
     "src/unload_dll_test.cc",
     "tests/common/controller.cc",
     "tests/common/controller.h",
     "tests/common/test_utils.cc",
     "tests/common/test_utils.h",
     "tests/integration_tests/integration_tests.cc",
     "tests/integration_tests/integration_tests_common.h",
     "tests/integration_tests/integration_tests_test.cc",
   ]
 
   deps = [
+    ":cfi_unittest_exe",
     ":sandbox",
     ":sbox_integration_test_hook_dll",
     ":sbox_integration_test_win_proc",
     "//base/test:test_support",
     "//testing/gtest",
   ]
 
   libs = [ "dxva2.lib" ]
 }
 
+executable("cfi_unittest_exe") {

[Will Harris, 2017/02/06 22:33:36]

hmm I wonder if this test executable should go into tests/integration_tests
rather than src/ since it's test only code.

I don't feel too strongly about this, but I think that the pattern would then
match targets like sbox_integration_test_hook_dll and
sbox_integration_test_win_proc.

[penny, 2017/02/07 23:12:56]

This is a bit of a mess right now (old conventions mixed with newer standards) -
especially with process_mitigations_test.cc being under sandbox\win\src\.  But I
agree with you, and like how I put the extra testing DLLs and EXEs under
tests\integration_tests.  I've moved both cfi_test* files as you suggest (I've
moved them 3 times during implementation :).

+  sources = [
+    "src/cfi_unittest_exe.cc",
+  ]
+  deps = [
+    "//base",
+    "//build/config/sanitizers:deps",
+    "//build/win:default_exe_manifest",
+  ]
+
+  # cfi_unittest.cc tests require this exe is built with CFG enabled.
+  configs += [ "//build/config/win:win_msvc_cfg" ]
+}
+
 loadable_module("sbox_integration_test_hook_dll") {
   sources = [
     "tests/integration_tests/hooking_dll.cc",
     "tests/integration_tests/integration_tests_common.h",
   ]
 }
 
 executable("sbox_integration_test_win_proc") {
   sources = [
     "tests/integration_tests/hooking_win_proc.cc",
@@ skipping 84 matching lines @@
     "sandbox_poc/pocdll/spyware.cc",
     "sandbox_poc/pocdll/utils.h",
   ]
 
   defines = [ "POCDLL_EXPORTS" ]
 
   deps = [
     "//build/config/sanitizers:deps",
   ]
 }