Adjust version checks for GetCertificate* patching

sandbox/win/src/process_mitigations_win32k_dispatcher.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/process_mitigations_win32k_dispatcher.h"
 
 #include <algorithm>
 
 #include "base/memory/shared_memory.h"
 #include "base/strings/string16.h"
@@ skipping 175 matching lines @@
                          CREATEOPMPROTECTEDOUTPUTS_ID, 24)) {
         return false;
       }
       return true;
 
     case IPC_GDI_GETCERTIFICATE_TAG:
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificate,
                          GETCERTIFICATE_ID, 20)) {
         return false;
       }
-      if (base::win::GetVersion() < base::win::VERSION_WIN10)
+      if (base::win::GetVersion() < base::win::VERSION_WIN10_TH2)
         return true;
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificateByHandle,
                          GETCERTIFICATEBYHANDLE_ID, 20)) {
         return false;
       }
       return true;
 
     case IPC_GDI_GETCERTIFICATESIZE_TAG:
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificateSize,
                          GETCERTIFICATESIZE_ID, 16)) {
         return false;
       }
-      if (base::win::GetVersion() < base::win::VERSION_WIN10)
+      if (base::win::GetVersion() < base::win::VERSION_WIN10_TH2)
         return true;
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificateSizeByHandle,
                          GETCERTIFICATESIZEBYHANDLE_ID, 16)) {
         return false;
       }
       return true;
 
     case IPC_GDI_DESTROYOPMPROTECTEDOUTPUT_TAG:
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", DestroyOPMProtectedOutput,
                          DESTROYOPMPROTECTEDOUTPUT_ID, 8)) {
@@ skipping 348 matching lines @@
   if (!status) {
     memcpy(buffer.memory(), &requested_info,
            sizeof(DXGKMDT_OPM_REQUESTED_INFORMATION));
   }
   ipc->return_info.nt_status = status;
   return true;
 }
 
 }  // namespace sandbox