Fixing a couple of issues in sandbox::RestrictedToken:

Fixing a couple of issues in sandbox::RestrictedToken:
 - Specify access bits on the duplicated handle correctly.
 - Avoid touching an uninitialized buffer in case of an error.

BUG=139841
TEST=RestrictedTokenTest.DenyOwnerSidCustom, RestrictedTokenTest.AddRestrictingSidCurrentUserCustom

Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=149475

[alexeypa (please no reviews), 2012-07-31 17:46:24]

I've run into a couple of apparent issues in sandbox::RestrictedToken. Please
take a look at the fix. Thanks.

[rvargas (doing something else), 2012-07-31 17:59:07]

bug #? (for the DuplicateHandle)

[alexeypa (please no reviews), 2012-07-31 18:07:14]

On 2012/07/31 17:59:07, rvargas wrote:
> bug #? (for the DuplicateHandle)

I have filed http://crbug.com/139841.

[alexeypa (please no reviews), 2012-08-01 18:09:10]

On 2012/07/31 18:07:14, alexeypa wrote:
> On 2012/07/31 17:59:07, rvargas wrote:
> > bug #? (for the DuplicateHandle)
> 
> I have filed http://crbug.com/139841.

Ping?

[rvargas (doing something else), 2012-08-01 18:38:24]

LGTM

[commit-bot: I haz the power, 2012-08-01 18:45:30]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/alexeypa@chromium.org/10844003/5001

[cpu_(ooo_6.6-7.5), 2012-08-01 19:40:33]

lgtm

[commit-bot: I haz the power, 2012-08-01 20:00:07]

Change committed as 149475