Sandbox policy and intercepts for the MITIGATION_WIN32K_DISABLE policy for renderer processes.

sandbox/win/src/interceptors_64.h

Index: sandbox/win/src/interceptors_64.h
diff --git a/sandbox/win/src/interceptors_64.h b/sandbox/win/src/interceptors_64.h
index ef2c10d412c3adbd02f8c04aae34f5193fa5171c..4250f6b0db944ff640a98c37484f34f1f16d9860 100644
--- a/sandbox/win/src/interceptors_64.h
+++ b/sandbox/win/src/interceptors_64.h
@@ -163,6 +163,19 @@ SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenEvent64(
     PHANDLE event_handle, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes);
 
+// -----------------------------------------------------------------------
+// Interceptors handled by the process mitigations win32k lockdown code.
+
+// Interceptors for GdiDllInitialize/GetStockObject/RegisterClassW.

[rvargas (doing something else), 2014/06/06 21:22:23]

The three methods are not related. Please add a comment for each one.

[ananta, 2014/06/06 23:57:34]

Done.

+SANDBOX_INTERCEPT BOOL WINAPI TargetGdiDllInitialize64(
+    HANDLE dll,
+    DWORD reason);
+
+SANDBOX_INTERCEPT HGDIOBJ WINAPI TargetGetStockObject64(int object);
+
+SANDBOX_INTERCEPT ATOM WINAPI TargetRegisterClassW64(const WNDCLASS* wnd_class);
+
+
 }  // extern "C"
 
 }  // namespace sandbox