Sandbox policy and intercepts for the MITIGATION_WIN32K_DISABLE policy for renderer processes.

sandbox/win/src/interceptors_64.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/interceptors_64.h"
 
 #include "sandbox/win/src/interceptors.h"
 #include "sandbox/win/src/filesystem_interception.h"
 #include "sandbox/win/src/named_pipe_interception.h"
 #include "sandbox/win/src/policy_target.h"
+#include "sandbox/win/src/process_mitigations_win32k_interception.h"
 #include "sandbox/win/src/process_thread_interception.h"
 #include "sandbox/win/src/registry_interception.h"
 #include "sandbox/win/src/sandbox_nt_types.h"
 #include "sandbox/win/src/sandbox_types.h"
 #include "sandbox/win/src/sync_interception.h"
 #include "sandbox/win/src/target_interceptions.h"
 
 namespace sandbox {
 
 SANDBOX_INTERCEPT NtExports g_nt;
@@ skipping 219 matching lines @@
 
 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenKeyEx64(
     PHANDLE key, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes, ULONG open_options) {
   NtOpenKeyExFunction orig_fn = reinterpret_cast<
       NtOpenKeyExFunction>(g_originals[OPEN_KEY_EX_ID]);
   return TargetNtOpenKeyEx(orig_fn, key, desired_access, object_attributes,
                            open_options);
 }
 
 // -----------------------------------------------------------------------

[rvargas (doing something else), 2014/06/06 21:22:23]

nit: add one of this at line 271

[ananta, 2014/06/06 23:57:34]

Done.

 
 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtCreateEvent64(
     PHANDLE event_handle, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes, EVENT_TYPE event_type,
     BOOLEAN initial_state) {
   NtCreateEventFunction orig_fn = reinterpret_cast<
       NtCreateEventFunction>(g_originals[CREATE_EVENT_ID]);
   return TargetNtCreateEvent(orig_fn, event_handle, desired_access,
                              object_attributes, event_type, initial_state);
 }
 
 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenEvent64(
     PHANDLE event_handle, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes) {
   NtOpenEventFunction orig_fn = reinterpret_cast<
       NtOpenEventFunction>(g_originals[OPEN_EVENT_ID]);
   return TargetNtOpenEvent(orig_fn, event_handle, desired_access,
                            object_attributes);
 }
 
+SANDBOX_INTERCEPT BOOL WINAPI TargetGdiDllInitialize64(
+    HANDLE dll,
+    DWORD reason) {
+  GdiDllInitializeFunction orig_fn = reinterpret_cast<
+      GdiDllInitializeFunction>(g_originals[GDIINITIALIZE_ID]);
+  return TargetGdiDllInitialize(orig_fn, dll, reason);
+}
+
+SANDBOX_INTERCEPT HGDIOBJ WINAPI TargetGetStockObject64(int object) {
+  GetStockObjectFunction orig_fn = reinterpret_cast<
+      GetStockObjectFunction>(g_originals[GETSTOCKOBJECT_ID]);
+  return TargetGetStockObject(orig_fn, object);
+}
+
+SANDBOX_INTERCEPT ATOM WINAPI TargetRegisterClassW64(
+    const WNDCLASS* wnd_class) {
+  RegisterClassWFunction orig_fn = reinterpret_cast<
+      RegisterClassWFunction>(g_originals[REGISTERCLASSW_ID]);
+  return TargetRegisterClassW(orig_fn, wnd_class);
+}
+
 }  // namespace sandbox