zm-oai d39cfa8a2d
Harden and share Windows sandbox identity helpers ( #45533 ) ...
## What changed
- Share process package-family queries, token user SID extraction, and account-name lookup through `codex_windows_sandbox`, and use them in the provisioning service.
- Bound token query sizes and validate SID pointers, revisions, and lengths before copying SIDs into owned storage.
- Use a drop guard to balance firewall COM initialization, and track the package lifecycle directory guard separately so cleanup releases it while keeping ancestor and home handles pinned.
## Testing
Add tests that verify copied SIDs outlive their query buffers and reject truncated token data, malformed SIDs, and invalid SID pointers.
GitOrigin-RevId: 2b893e4524d3e00cb114df05215beef7b9eebbe9
2026-09-14 22:40:01 +00:00
2026-09-05 18:06:26 +00:00
2026-09-14 21:33:45 +00:00
2026-09-14 22:31:32 +00:00
2026-09-14 22:31:32 +00:00
2026-09-09 20:39:33 +00:00
2026-09-14 22:31:32 +00:00
2026-09-03 06:02:25 +00:00
2026-09-10 13:02:57 +00:00
2026-09-11 20:10:02 +00:00
2026-09-03 23:20:54 +00:00
2026-09-09 03:17:48 +00:00
2026-09-14 22:31:32 +00:00
2026-09-07 16:55:06 +00:00
2026-09-14 16:30:00 +00:00
2026-09-10 21:41:39 +00:00
2026-09-03 01:46:37 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-14 09:29:51 +00:00
2026-09-14 15:13:13 +00:00
2026-09-14 19:12:59 +00:00
2026-09-14 16:30:00 +00:00
2026-09-05 01:25:06 +00:00
2026-09-14 21:06:36 +00:00
2026-08-31 21:27:51 +00:00
2026-09-14 15:06:28 +00:00
2026-09-12 18:16:17 +00:00
2026-09-14 21:34:33 +00:00
2026-09-11 01:57:54 +00:00
2026-09-14 16:30:00 +00:00
2026-09-05 12:17:32 +00:00
2026-09-14 15:30:22 +00:00
2026-09-14 21:45:09 +00:00
2026-09-14 21:45:09 +00:00
2026-09-14 21:34:33 +00:00
2026-09-10 18:24:13 +00:00
2026-09-12 22:28:41 +00:00
2026-09-10 18:10:26 +00:00
2026-09-06 20:52:29 +00:00
2026-09-14 12:52:16 +00:00
2026-09-09 23:23:59 +00:00
2026-09-10 00:26:30 +00:00
2026-09-14 19:30:37 +00:00
2026-09-11 21:59:24 +00:00
2026-09-13 06:07:03 +00:00
2026-09-14 19:11:29 +00:00
2026-09-09 20:32:57 +00:00
2026-09-10 03:18:28 +00:00
2026-09-10 21:41:39 +00:00
2026-09-12 00:22:04 +00:00
2026-09-13 06:07:03 +00:00
2026-09-14 16:51:56 +00:00
2026-09-09 15:48:39 +00:00
2026-09-01 17:17:45 +00:00
2026-09-10 21:51:34 +00:00
2026-09-14 15:30:22 +00:00
2026-09-11 03:16:01 +00:00
2026-09-10 20:50:10 +00:00
2026-09-14 16:37:47 +00:00
2026-09-13 06:07:03 +00:00
2026-09-09 06:04:59 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-09 23:23:59 +00:00
2026-09-02 18:34:27 +00:00
2026-09-14 21:06:36 +00:00
2026-09-14 20:57:48 +00:00
2026-09-14 20:20:29 +00:00
2026-09-14 22:31:32 +00:00
2026-09-02 18:42:06 +00:00
2026-09-08 00:13:28 +00:00
2026-09-14 19:38:45 +00:00
2026-09-11 22:09:02 +00:00
2026-09-03 20:01:07 +00:00
2026-09-14 22:40:01 +00:00
2026-09-14 22:40:01 +00:00
2026-09-13 18:53:06 +00:00
2026-09-08 21:19:02 +00:00
2026-09-14 21:45:09 +00:00
2026-09-14 18:56:43 +00:00
2026-09-11 06:45:09 +00:00
d39cfa8a2d