Add sandbox support for process memory limits

sandbox/win/src/broker_services.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_SRC_BROKER_SERVICES_H_
 #define SANDBOX_WIN_SRC_BROKER_SERVICES_H_
 
 #include <list>
 #include <map>
 #include <set>
@@ skipping 45 matching lines @@
                                          const wchar_t* name) OVERRIDE;
   virtual ResultCode UninstallAppContainer(const wchar_t* sid) OVERRIDE;
 
   // Checks if the supplied process ID matches one of the broker's active
   // target processes
   // Returns:
   //   true if there is an active target process for this ID, otherwise false.
   bool IsActiveTarget(DWORD process_id);
 
  private:
-  // Releases the Job and notifies the associated Policy object to its
-  // resources as well.
-  static void FreeResources(JobTracker* tracker);
+  // Releases the Job, terminates all job processes with exit_code, and notifies
+  // the associated Policy object to free its resources as well.
+  static void FreeResources(JobTracker* tracker, UINT exit_code);
 
   // The routine that the worker thread executes. It is in charge of
   // notifications and cleanup-related tasks.
   static DWORD WINAPI TargetEventsThread(PVOID param);
 
   // Removes a target peer from the process list if it expires.
   static VOID CALLBACK RemovePeer(PVOID parameter, BOOLEAN timeout);
 
   // The completion port used by the job objects to communicate events to
   // the worker thread.
@@ skipping 26 matching lines @@
   // job. Consult |jobless_process_handles_| for handles of pocess without job.
   std::set<DWORD> child_process_ids_;
 
   DISALLOW_COPY_AND_ASSIGN(BrokerServicesBase);
 };
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_WIN_SRC_BROKER_SERVICES_H_