Validate HWNDs that the renderer asks to be moved.

chrome/browser/renderer_host/render_widget_host_view_win.cc

Index: chrome/browser/renderer_host/render_widget_host_view_win.cc
diff --git a/chrome/browser/renderer_host/render_widget_host_view_win.cc b/chrome/browser/renderer_host/render_widget_host_view_win.cc
index b4996696e22b6a218117fe0e11d9d7a2e64ee3b3..72d0b0a2f6463bd5b376cebf4ef1e4caf89004f9 100644
--- a/chrome/browser/renderer_host/render_widget_host_view_win.cc
+++ b/chrome/browser/renderer_host/render_widget_host_view_win.cc
@@ -165,6 +165,13 @@ void RenderWidgetHostViewWin::MovePluginWindows(
     if (!::IsWindow(move.window))
       continue;
 
+    // The renderer should only be trying to move windows that are children
+    // of its render widget window.
+    if (::IsChild(m_hWnd, move.window) == 0) {

[jam, 2009/02/12 19:27:26]

If we're doing this check, we don't need the IsWindow above.

nit: I think (IsChild()) is sufficient and more consistent with the rest of the
code than (IsChild() == 0)

+      NOTREACHED();
+      continue;
+    }
+
     if (move.visible)
       flags |= SWP_SHOWWINDOW;
     else