[Windows CFG Test] Added unittest for CFG enabling on process.

sandbox/win/BUILD.gn

Index: sandbox/win/BUILD.gn
diff --git a/sandbox/win/BUILD.gn b/sandbox/win/BUILD.gn
index ac679f4d439b888763e5b80f0ec1edb3bd44afd1..957a2d21b09293a7d43b86234596e01fe1606beb 100644
--- a/sandbox/win/BUILD.gn
+++ b/sandbox/win/BUILD.gn
@@ -172,6 +172,7 @@ test("sbox_integration_tests") {
   sources = [
     "src/address_sanitizer_test.cc",
     "src/app_container_test.cc",
+    "src/cfi_unittest.cc",
     "src/file_policy_test.cc",
     "src/handle_closer_test.cc",
     "src/handle_inheritance_test.cc",
@@ -197,6 +198,7 @@ test("sbox_integration_tests") {
   ]
 
   deps = [
+    ":cfi_unittest_exe",
     ":sandbox",
     ":sbox_integration_test_hook_dll",
     ":sbox_integration_test_win_proc",
@@ -207,6 +209,20 @@ test("sbox_integration_tests") {
   libs = [ "dxva2.lib" ]
 }
 
+executable("cfi_unittest_exe") {

[Will Harris, 2017/02/06 22:33:36]

hmm I wonder if this test executable should go into tests/integration_tests
rather than src/ since it's test only code.

I don't feel too strongly about this, but I think that the pattern would then
match targets like sbox_integration_test_hook_dll and
sbox_integration_test_win_proc.

[penny, 2017/02/07 23:12:56]

This is a bit of a mess right now (old conventions mixed with newer standards) -
especially with process_mitigations_test.cc being under sandbox\win\src\.  But I
agree with you, and like how I put the extra testing DLLs and EXEs under
tests\integration_tests.  I've moved both cfi_test* files as you suggest (I've
moved them 3 times during implementation :).

+  sources = [
+    "src/cfi_unittest_exe.cc",
+  ]
+  deps = [
+    "//base",
+    "//build/config/sanitizers:deps",
+    "//build/win:default_exe_manifest",
+  ]
+
+  # cfi_unittest.cc tests require this exe is built with CFG enabled.
+  configs += [ "//build/config/win:win_msvc_cfg" ]
+}
+
 loadable_module("sbox_integration_test_hook_dll") {
   sources = [
     "tests/integration_tests/hooking_dll.cc",