Mark Mentovai 5f19d639e1 handler/mac: Log a warning when an exception message has a suspicious
origin.

This adds AuditPIDFromMachMessageTrailer() to get the process ID of a
Mach message’s sender. Exception messages are considered suspicious when
not sent by the kernel or the exception process.

TEST=crashpad_util_test
R=rsesek@chromium.org

Review URL: https://codereview.chromium.org/1001943002
2015-03-12 14:00:38 -04:00
..
2014-10-14 11:10:45 -04:00
2014-10-14 11:10:45 -04:00
2014-12-16 14:10:16 -05:00
2014-11-14 17:56:17 -05:00
2014-11-14 17:56:17 -05:00
2014-10-14 11:10:45 -04:00