Sandbox policy and intercepts for the MITIGATION_WIN32K_DISABLE policy for renderer processes.

sandbox/win/src/interceptors_64.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/nt_internals.h"
 #include "sandbox/win/src/sandbox_types.h"
 
 #ifndef SANDBOX_SRC_INTERCEPTORS_64_H_
 #define SANDBOX_SRC_INTERCEPTORS_64_H_
 
@@ skipping 145 matching lines @@
 // Interception of NtCreateEvent/NtOpenEvent on the child process.
 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtCreateEvent64(
     PHANDLE event_handle, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes, EVENT_TYPE event_type,
     BOOLEAN initial_state);
 
 SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenEvent64(
     PHANDLE event_handle, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes);
 
+// -----------------------------------------------------------------------
+// Interceptors handled by the process mitigations win32k lockdown code.
+
+// Interceptors for GdiDllInitialize/GetStockObject/RegisterClassW.

[rvargas (doing something else), 2014/06/06 21:22:23]

The three methods are not related. Please add a comment for each one.

[ananta, 2014/06/06 23:57:34]

Done.

+SANDBOX_INTERCEPT BOOL WINAPI TargetGdiDllInitialize64(
+    HANDLE dll,
+    DWORD reason);
+
+SANDBOX_INTERCEPT HGDIOBJ WINAPI TargetGetStockObject64(int object);
+
+SANDBOX_INTERCEPT ATOM WINAPI TargetRegisterClassW64(const WNDCLASS* wnd_class);
+
+
 }  // extern "C"
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_SRC_INTERCEPTORS_64_H_