Add sandbox support for process memory limits

sandbox/win/src/job.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/job.h"
 
 #include "base/win/windows_version.h"
 #include "sandbox/win/src/restricted_token.h"
 
 namespace sandbox {
 
 Job::~Job() {
   if (job_handle_)
     ::CloseHandle(job_handle_);
 };
 
 DWORD Job::Init(JobLevel security_level,
                 const wchar_t* job_name,
-                DWORD ui_exceptions) {
+                DWORD ui_exceptions,
+                size_t memory_limit) {
   if (job_handle_)
     return ERROR_ALREADY_INITIALIZED;
 
   job_handle_ = ::CreateJobObject(NULL,   // No security attribute
                                   job_name);
   if (!job_handle_)
     return ::GetLastError();
 
   JOBOBJECT_EXTENDED_LIMIT_INFORMATION jeli = {0};
   JOBOBJECT_BASIC_UI_RESTRICTIONS jbur = {0};
@@ skipping 15 matching lines @@
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_DISPLAYSETTINGS;
       jeli.BasicLimitInformation.LimitFlags |= JOB_OBJECT_LIMIT_ACTIVE_PROCESS;
       jeli.BasicLimitInformation.ActiveProcessLimit = 1;
     }
     case JOB_INTERACTIVE: {
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS;
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_DESKTOP;
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_EXITWINDOWS;
     }
     case JOB_UNPROTECTED: {
-      // The JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE flag is not supported on
-      // Windows 2000. We need a mechanism on Windows 2000 to ensure
-      // that processes in the job are terminated when the job is closed
-      if (base::win::GetVersion() == base::win::VERSION_PRE_XP)
-        break;
+      if (memory_limit) {
+        jeli.BasicLimitInformation.LimitFlags |=
+            JOB_OBJECT_LIMIT_PROCESS_MEMORY;
+        jeli.ProcessMemoryLimit = memory_limit;
+      }
 
       jeli.BasicLimitInformation.LimitFlags |=
           JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
       break;
     }
     default: {
       return ERROR_BAD_ARGUMENTS;
     }
   }
 
@@ skipping 38 matching lines @@
   if (!job_handle_)
     return ERROR_NO_DATA;
 
   if (FALSE == ::AssignProcessToJobObject(job_handle_, process_handle))
     return ::GetLastError();
 
   return ERROR_SUCCESS;
 }
 
 }  // namespace sandbox