Win32k lockdown: move to chrome://flags, add UMA, add finch

content/renderer/pepper/resource_creation_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper/resource_creation_impl.h"
 
 #include "content/renderer/pepper/ppb_audio_impl.h"
 #include "content/renderer/pepper/ppb_broker_impl.h"
 #include "content/renderer/pepper/ppb_buffer_impl.h"
 #include "content/renderer/pepper/ppb_flash_message_loop_impl.h"
@@ skipping 122 matching lines @@
                                                   const PP_Size* size,
                                                   PP_Bool init_to_zero) {
 #if defined(OS_WIN)
   // If Win32K lockdown mitigations are enabled for Windows 8 and beyond,
   // we use the SIMPLE image data type as the PLATFORM image data type
   // calls GDI functions to create DIB sections etc which fail in Win32K
   // lockdown mode.
   // TODO(ananta)
   // Look into whether this causes a loss of functionality. From cursory
   // testing things seem to work well.
-  if (CommandLine::ForCurrentProcess()->HasSwitch(
-          switches::kEnableWin32kRendererLockDown) &&
+  if (switches::Win32kRendererLockdownEnabled() &&
       base::win::GetVersion() >= base::win::VERSION_WIN8) {
     return CreateImageDataSimple(instance, format, size, init_to_zero);
   }
 #endif
   return PPB_ImageData_Impl::Create(instance,
                                     ppapi::PPB_ImageData_Shared::PLATFORM,
                                     format,
                                     *size,
                                     init_to_zero);
 }
@@ skipping 205 matching lines @@
                                                       wheel_ticks,
                                                       scroll_by_page);
 }
 
 PP_Resource ResourceCreationImpl::CreateX509CertificatePrivate(
     PP_Instance instance) {
   return 0;  // Not supported in-process.
 }
 
 }  // namespace content