Use SetAlternateDesktop(false) for service process.

chrome/service/service_utility_process_host.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/service/service_utility_process_host.h"
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/files/file_util.h"
 #include "base/files/scoped_temp_dir.h"
 #include "base/logging.h"
 #include "base/message_loop/message_loop.h"
 #include "base/message_loop/message_loop_proxy.h"
 #include "base/metrics/histogram.h"
 #include "base/process/kill.h"
 #include "base/strings/utf_string_conversions.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/chrome_utility_printing_messages.h"
 #include "content/public/common/child_process_host.h"
 #include "content/public/common/result_codes.h"
 #include "content/public/common/sandbox_init.h"
 #include "ipc/ipc_switches.h"
 #include "printing/page_range.h"
 #include "ui/base/ui_base_switches.h"
 #include "ui/gfx/rect.h"
 
 #if defined(OS_WIN)
+

[jam, 2014/09/04 18:06:38]

nit: no change needed

[Vitaly Buka (NO REVIEWS), 2014/09/04 18:19:39]

Done.

 #include "base/files/file_path.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/process/launch.h"
 #include "base/win/scoped_handle.h"
 #include "content/public/common/sandbox_init.h"
 #include "content/public/common/sandboxed_process_launcher_delegate.h"
 #include "printing/emf_win.h"
+#include "sandbox/win/src/sandbox_policy_base.h"
 
 namespace {
 
 // NOTE: changes to this class need to be reviewed by the security team.
 class ServiceSandboxedProcessLauncherDelegate
     : public content::SandboxedProcessLauncherDelegate {
  public:
   explicit ServiceSandboxedProcessLauncherDelegate(
       const base::FilePath& exposed_dir)
     : exposed_dir_(exposed_dir) {
   }
 
   virtual void PreSandbox(bool* disable_default_policy,
                           base::FilePath* exposed_dir) OVERRIDE {
     *exposed_dir = exposed_dir_;
   }
 
+  virtual void PreSpawnTarget(sandbox::TargetPolicy* policy,
+                              bool* success) OVERRIDE {
+    // Service process may run as windows service and it would fail to create
+    // ::CreateWindowStation.
+    policy->SetAlternateDesktop(false);
+  }
+
  private:
   base::FilePath exposed_dir_;
 };
 
 }  // namespace
 
 #endif  // OS_WIN
 
 using content::ChildProcessHost;
 
@@ skipping 321 matching lines @@
   if (!metafile.InitFromFile(metafile_path)) {
     OnRenderPDFPagesToMetafileFailed();
   } else {
     OnRenderPDFPagesToMetafileSucceeded(metafile,
                                         highest_rendered_page_number,
                                         scale_factor);
   }
 #endif  // defined(OS_WIN)
 }