Merge 237541 "Revert of https://codereview.chromium.org/71013004/"

remoting/host/win/chromoting_module.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/host/win/chromoting_module.h"
 
 #include <sddl.h>
 
 #include "base/lazy_instance.h"
 #include "base/logging.h"
@@ skipping 24 matching lines @@
              SDDL_BUILTIN_ADMINISTRATORS)
     SDDL_ACE(SDDL_ACCESS_ALLOWED, SDDL_COM_EXECUTE_LOCAL, SDDL_INTERACTIVE);
 
 // Holds a reference to the task runner used by the module.
 base::LazyInstance<scoped_refptr<AutoThreadTaskRunner> > g_module_task_runner =
     LAZY_INSTANCE_INITIALIZER;
 
 // Lowers the process integrity level such that it does not exceed |max_level|.
 // |max_level| is expected to be one of SECURITY_MANDATORY_XXX constants.
 bool LowerProcessIntegrityLevel(DWORD max_level) {
-  HANDLE temp_handle;
+  base::win::ScopedHandle token;
   if (!OpenProcessToken(GetCurrentProcess(), TOKEN_QUERY | TOKEN_WRITE,
-                        &temp_handle)) {
+                        token.Receive())) {
     PLOG(ERROR) << "OpenProcessToken() failed";
     return false;
   }
-  base::win::ScopedHandle token(temp_handle);
 
   TypedBuffer<TOKEN_MANDATORY_LABEL> mandatory_label;
   DWORD length = 0;
 
   // Get the size of the buffer needed to hold the mandatory label.
   BOOL result = GetTokenInformation(token, TokenIntegrityLevel,
                                     mandatory_label.get(), length, &length);
   if (!result && GetLastError() == ERROR_INSUFFICIENT_BUFFER) {
     // Allocate a buffer that is large enough.
     TypedBuffer<TOKEN_MANDATORY_LABEL> buffer(length);
@@ skipping 162 matching lines @@
 
   ATL::_ATL_OBJMAP_ENTRY rdp_client_entry[] = {
     OBJECT_ENTRY(__uuidof(RdpDesktopSession), RdpDesktopSession)
   };
 
   ChromotingModule module(rdp_client_entry, rdp_client_entry + 1);
   return module.Run() ? kSuccessExitCode : kInitializationFailed;
 }
 
 } // namespace remoting