Add sandbox support for process memory limits

sandbox/win/src/job.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/job.h"
 
 #include "base/win/windows_version.h"
 #include "sandbox/win/src/restricted_token.h"
 
 namespace sandbox {
@@ skipping 34 matching lines @@
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_DISPLAYSETTINGS;
       jeli.BasicLimitInformation.LimitFlags |= JOB_OBJECT_LIMIT_ACTIVE_PROCESS;
       jeli.BasicLimitInformation.ActiveProcessLimit = 1;
     }
     case JOB_INTERACTIVE: {
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS;
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_DESKTOP;
       jbur.UIRestrictionsClass |= JOB_OBJECT_UILIMIT_EXITWINDOWS;
     }
     case JOB_UNPROTECTED: {
-      // The JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE flag is not supported on
-      // Windows 2000. We need a mechanism on Windows 2000 to ensure
-      // that processes in the job are terminated when the job is closed
-      if (base::win::GetVersion() == base::win::VERSION_PRE_XP)
-        break;
+      if (process_memory_limit_) {
+        jeli.BasicLimitInformation.LimitFlags |=
+            JOB_OBJECT_LIMIT_PROCESS_MEMORY;
+        jeli.ProcessMemoryLimit = process_memory_limit_;
+      }
 
       jeli.BasicLimitInformation.LimitFlags |=
           JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
       break;
     }
     default: {
       return ERROR_BAD_ARGUMENTS;
     }
   }
 
   if (FALSE == ::SetInformationJobObject(job_handle_,
                                          JobObjectExtendedLimitInformation,
                                          &jeli,
                                          sizeof(jeli))) {
     return ::GetLastError();
   }
 
   jbur.UIRestrictionsClass = jbur.UIRestrictionsClass & (~ui_exceptions);
   if (FALSE == ::SetInformationJobObject(job_handle_,
                                          JobObjectBasicUIRestrictions,
                                          &jbur,
                                          sizeof(jbur))) {
     return ::GetLastError();
   }
 
   return ERROR_SUCCESS;
 }
 
+DWORD Job::SetProcessMemoryLimit(size_t limit) {
+  if (job_handle_)
+    return ERROR_ALREADY_INITIALIZED;
+
+  process_memory_limit_ = limit;
+  return ERROR_SUCCESS;
+}
+
 DWORD Job::UserHandleGrantAccess(HANDLE handle) {
   if (!job_handle_)
     return ERROR_NO_DATA;
 
   if (!::UserHandleGrantAccess(handle,
                                job_handle_,
                                TRUE)) {  // Access allowed.
     return ::GetLastError();
   }
 
@@ skipping 10 matching lines @@
   if (!job_handle_)
     return ERROR_NO_DATA;
 
   if (FALSE == ::AssignProcessToJobObject(job_handle_, process_handle))
     return ::GetLastError();
 
   return ERROR_SUCCESS;
 }
 
 }  // namespace sandbox