Add sandbox support for process memory limits

sandbox/win/src/restricted_token_utils.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <aclapi.h>
 #include <sddl.h>
 #include <vector>
 
 #include "sandbox/win/src/restricted_token_utils.h"
 
@@ skipping 128 matching lines @@
 
   return err_code;
 }
 
 DWORD StartRestrictedProcessInJob(wchar_t *command_line,
                                   TokenLevel primary_level,
                                   TokenLevel impersonation_level,
                                   JobLevel job_level,
                                   HANDLE *const job_handle_ret) {
   Job job;
-  DWORD err_code = job.Init(job_level, NULL, 0);
+  DWORD err_code = job.Init(job_level, NULL, 0, 0);
   if (ERROR_SUCCESS != err_code)
     return err_code;
 
   if (JOB_UNPROTECTED != job_level) {
     // Share the Desktop handle to be able to use MessageBox() in the sandboxed
     // application.
     err_code = job.UserHandleGrantAccess(GetDesktopWindow());
     if (ERROR_SUCCESS != err_code)
       return err_code;
   }
@@ skipping 176 matching lines @@
   if (!::OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_DEFAULT,
                           &token_handle))
     return ::GetLastError();
 
   base::win::ScopedHandle token(token_handle);
 
   return SetTokenIntegrityLevel(token.Get(), integrity_level);
 }
 
 }  // namespace sandbox