Fix small race in the sandbox

sandbox/win/src/filesystem_policy.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
 #include "sandbox/win/src/filesystem_policy.h"
 
 #include "base/logging.h"
 #include "base/win/scoped_handle.h"
@@ skipping 31 matching lines @@
 
   if (!sandbox::SameObject(local_handle, obj_attributes->ObjectName->Buffer)) {
     // The handle points somewhere else. Fail the operation.
     ::CloseHandle(local_handle);
     return STATUS_ACCESS_DENIED;
   }
 
   if (!::DuplicateHandle(::GetCurrentProcess(), local_handle,
                          target_process, target_file_handle, 0, FALSE,
                          DUPLICATE_CLOSE_SOURCE | DUPLICATE_SAME_ACCESS)) {
-    ::CloseHandle(local_handle);
     return STATUS_ACCESS_DENIED;
   }
   return STATUS_SUCCESS;
 }
 
 }  // namespace.
 
 namespace sandbox {
 
 bool FileSystemPolicy::GenerateRules(const wchar_t* name,
@@ skipping 315 matching lines @@
 
   bool reparsed = false;
   if (ERROR_SUCCESS != IsReparsePoint(*new_path, &reparsed))
     return false;
 
   // We can't process reparsed file.
   return !reparsed;
 }
 
 }  // namespace sandbox