Do not close handles in target process on Windows 10.

sandbox/win/src/target_services.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/target_services.h"
 
 #include <process.h>
 
 #include "base/basictypes.h"
+#include "base/win/windows_version.h"
 #include "sandbox/win/src/crosscall_client.h"
 #include "sandbox/win/src/handle_closer_agent.h"
 #include "sandbox/win/src/handle_interception.h"
 #include "sandbox/win/src/ipc_tags.h"
 #include "sandbox/win/src/process_mitigations.h"
 #include "sandbox/win/src/restricted_token_utils.h"
 #include "sandbox/win/src/sandbox.h"
 #include "sandbox/win/src/sandbox_types.h"
 #include "sandbox/win/src/sharedmem_ipc_client.h"
 #include "sandbox/win/src/sandbox_nt_util.h"
@@ skipping 18 matching lines @@
 // although this behavior is undocumented and there is no guarantee that in
 // fact this will happen in future versions of windows.
 bool FlushCachedRegHandles() {
   return (FlushRegKey(HKEY_LOCAL_MACHINE) &&
           FlushRegKey(HKEY_CLASSES_ROOT) &&
           FlushRegKey(HKEY_USERS));
 }
 
 // Checks if we have handle entries pending and runs the closer.
 bool CloseOpenHandles() {
+  // Windows 10 has FLG_ENABLE_HANDLE_EXCEPTIONS enabled by default so causes
+  // exceptions to be raised if target process attempts to close a handle that
+  // has already been closed by HandleCloser.  Therefore, do not close any
+  // handles on Windows 10 until this flag is removed by MS.
+  // See crbug.com/452613.
+  if (base::win::GetVersion() == base::win::VERSION_WIN10)
+    return true;
   if (sandbox::HandleCloserAgent::NeedsHandlesClosed()) {
     sandbox::HandleCloserAgent handle_closer;
 
     handle_closer.InitializeHandlesToClose();
     if (!handle_closer.CloseHandles())
       return false;
   }
 
   return true;
 }
@@ skipping 127 matching lines @@
 ResultCode TargetServicesBase::DuplicateHandle(HANDLE source_handle,
                                                DWORD target_process_id,
                                                HANDLE* target_handle,
                                                DWORD desired_access,
                                                DWORD options) {
   return sandbox::DuplicateHandleProxy(source_handle, target_process_id,
                                        target_handle, desired_access, options);
 }
 
 }  // namespace sandbox