Fix small race in the sandbox

sandbox/win/src/named_pipe_policy.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/named_pipe_policy.h"
 
 #include <string>
 
 #include "sandbox/win/src/ipc_tags.h"
 #include "sandbox/win/src/policy_engine_opcodes.h"
@@ skipping 10 matching lines @@
                               DWORD in_buffer_size, DWORD default_timeout,
                               LPSECURITY_ATTRIBUTES security_attributes) {
   HANDLE pipe = ::CreateNamedPipeW(pipe_name, open_mode, pipe_mode,
                                    max_instances, out_buffer_size,
                                    in_buffer_size, default_timeout,
                                    security_attributes);
   if (INVALID_HANDLE_VALUE == pipe)
     return pipe;
 
   HANDLE new_pipe;
-  if (!::DuplicateHandle(::GetCurrentProcess(), pipe, target_process, &new_pipe,
-                         0, FALSE, DUPLICATE_CLOSE_SOURCE |
-                             DUPLICATE_SAME_ACCESS)) {
-    ::CloseHandle(pipe);
+  if (!::DuplicateHandle(::GetCurrentProcess(), pipe,
+                         target_process, &new_pipe,
+                         0, FALSE,
+                         DUPLICATE_CLOSE_SOURCE | DUPLICATE_SAME_ACCESS)) {
     return INVALID_HANDLE_VALUE;
   }
 
   return new_pipe;
 }
 
 }  // namespace
 
 namespace sandbox {
 
@@ skipping 32 matching lines @@
                                 out_buffer_size, in_buffer_size,
                                 default_timeout, NULL);
 
   if (INVALID_HANDLE_VALUE == *pipe)
     return ERROR_ACCESS_DENIED;
 
   return ERROR_SUCCESS;
 }
 
 }  // namespace sandbox