NaCl: Supply Windows handle-passing function

ppapi/c/private/ppb_nacl_private.h

-// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef PPAPI_C_PRIVATE_PPB_NACL_UTIL_PRIVATE_H_
 #define PPAPI_C_PRIVATE_PPB_NACL_UTIL_PRIVATE_H_
 
 #include "ppapi/c/pp_resource.h"
 #include "ppapi/c/pp_stdint.h"
 
-#define PPB_NACL_PRIVATE_INTERFACE "PPB_NaCl(Private);0.2"
+#define PPB_NACL_PRIVATE_INTERFACE "PPB_NaCl(Private);0.3"
 
 struct PPB_NaCl_Private {
   // This function launches NaCl's sel_ldr process.  On success, the function
   // returns true, otherwise it returns false.  When it returns true, it will
   // write |socket_count| nacl::Handles to imc_handles and will write the
   // nacl::Handle of the created process to |nacl_process_handle|.  Finally,
   // the function will write the process ID of the created process to
   // |nacl_process_id|.  Unless EnableBackgroundSelLdrLaunch is called, this
   // method must be invoked from the main thread.
   bool (*LaunchSelLdr)(const char* alleged_url, int socket_count,
                        void* imc_handles, void* nacl_process_handle,
                        int* nacl_process_id);
 
   // On POSIX systems, this function returns the file descriptor of
   // /dev/urandom.  On non-POSIX systems, this function returns 0.
   int (*UrandomFD)(void);
 
   // Whether the Pepper 3D interfaces should be disabled in the NaCl PPAPI
   // proxy. This is so paranoid admins can effectively prevent untrusted shader
   // code to be processed by the graphics stack.
   bool (*Are3DInterfacesDisabled)();
 
   // Enables the creation of sel_ldr processes from other than the main thread.
   void (*EnableBackgroundSelLdrLaunch)();
+
+  // This is Windows-specific.  This is a replacement for
+  // DuplicateHandle() for use inside the Windows sandbox.  Note that
+  // we provide this via dependency injection only to avoid the
+  // linkage problems that occur because the NaCl plugin is built as a
+  // separate DLL/DSO (see
+  // http://code.google.com/p/chromium/issues/detail?id=114439#c8).
+  // We use void* rather than the Windows HANDLE type to avoid an
+  // #ifdef here.  We use int rather than PP_Bool/bool so that this is
+  // usable with NaClSetBrokerDuplicateHandleFunc() without further
+  // wrapping.
+  int (*BrokerDuplicateHandle)(void* source_handle,
+                               uint32_t process_id,
+                               void** target_handle,
+                               uint32_t desired_access,
+                               uint32_t options);
 };
 
 #endif  // PPAPI_C_PRIVATE_PPB_NACL_PRIVATE_H_