Add a sandbox API for broker handle duplication

sandbox/src/handle_interception.h

+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "sandbox/src/nt_internals.h"
+#include "sandbox/src/sandbox_types.h"
+
+#ifndef SANDBOX_SRC_HANDLE_INTERCEPTION_H__
+#define SANDBOX_SRC_HANDLE_INTERCEPTION_H__

[rvargas (doing something else), 2012/03/27 00:35:33]

nit: Naming this _interception is misleading

[jschuh, 2012/03/27 01:36:19]

I have a DuplicateHandle interception that will go in here once I've killed off
all the bad DulicateHandle calls. So, any objections to leaving it this way with
a todo?

[rvargas (doing something else), 2012/03/27 02:30:59]

And that interception will just DCHECK, right? No need for a TODO

+
+namespace sandbox {
+
+ResultCode DuplicateHandleProxy(HANDLE source_handle,
+                                DWORD target_process_id,
+                                HANDLE* target_handle,
+                                DWORD desired_access,
+                                BOOL inherit_handle,
+                                DWORD options);
+
+}  // namespace sandbox
+
+#endif  // SANDBOX_SRC_HANDLE_INTERCEPTION_H__
+