Add a sandbox API for broker handle duplication

sandbox/src/broker_services.h

Index: sandbox/src/broker_services.h
===================================================================
--- sandbox/src/broker_services.h	(revision 128951)
+++ sandbox/src/broker_services.h	(working copy)
@@ -6,6 +6,7 @@
 #define SANDBOX_SRC_BROKER_SERVICES_H__
 
 #include <list>
+#include <set>
 #include "base/basictypes.h"
 #include "sandbox/src/crosscall_server.h"
 #include "sandbox/src/job.h"
@@ -32,7 +33,7 @@
 
   ~BrokerServicesBase();
 
-  // The next four methods are the BrokerServices interface
+  // The next five methods are the BrokerServices interface
   virtual ResultCode Init();
 
   virtual TargetPolicy* CreatePolicy();
@@ -44,6 +45,8 @@
 
   virtual ResultCode WaitForAllTargets();
 
+  virtual bool IsActiveTarget(DWORD process_id);

[rvargas (doing something else), 2012/03/27 00:35:33]

I'm not sure we need to expose this just to support tests.

[jschuh, 2012/03/27 01:36:19]

Seemed like a good utility method to have. Otherwise there's no good interface
to determine if a process is a child of a given broker.

+
  private:
   // Helper structure that allows the Broker to associate a job notification
   // with a job object and with a policy.
@@ -85,6 +88,9 @@
   typedef std::list<JobTracker*> JobTrackerList;
   JobTrackerList tracker_list_;
 
+  // Provides a fast lookup to identify sandboxed processes.
+  std::set<DWORD> child_process_ids_;
+
   DISALLOW_COPY_AND_ASSIGN(BrokerServicesBase);
 };