diff options
Diffstat (limited to 'content/common/sandbox_win.cc')
| -rw-r--r-- | content/common/sandbox_win.cc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/content/common/sandbox_win.cc b/content/common/sandbox_win.cc index e71cdaf..fbf6675 100644 --- a/content/common/sandbox_win.cc +++ b/content/common/sandbox_win.cc @@ -432,6 +432,9 @@ void CheckDuplicateHandle(HANDLE handle) { &size); CHECK(NT_SUCCESS(error)); + CHECK(!(basic_info.GrantedAccess & WRITE_DAC)) << + kDuplicateHandleWarning; + if (0 == _wcsicmp(type_info->Name.Buffer, L"Process")) { const ACCESS_MASK kDangerousMask = ~(PROCESS_QUERY_LIMITED_INFORMATION | SYNCHRONIZE); |