Change URLRequest to use a ref-counted buffer for actual IO....

chrome/browser/renderer_host/download_resource_handler.h

Index: chrome/browser/renderer_host/download_resource_handler.h
===================================================================
--- chrome/browser/renderer_host/download_resource_handler.h	(revision 8565)
+++ chrome/browser/renderer_host/download_resource_handler.h	(working copy)
@@ -32,7 +32,8 @@
 
   // Create a new buffer, which will be handed to the download thread for file
   // writing and deletion.
-  bool OnWillRead(int request_id, char** buf, int* buf_size, int min_size);
+  bool OnWillRead(int request_id, net::IOBuffer** buf, int* buf_size,
+                  int min_size);
 
   bool OnReadCompleted(int request_id, int* bytes_read);
 
@@ -53,7 +54,7 @@
   int download_id_;
   ResourceDispatcherHost::GlobalRequestID global_id_;
   int render_view_id_;
-  char* read_buffer_;
+  scoped_refptr<net::IOBuffer> read_buffer_;
   std::string content_disposition_;
   std::wstring url_;
   int64 content_length_;