Use vector::push_back() to add object store names to the vector of names and avoid a crash

chrome/browser/in_process_webkit/indexed_db_dispatcher_host.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/in_process_webkit/indexed_db_dispatcher_host.h"
 
 #include "base/command_line.h"
 #include "chrome/browser/chrome_thread.h"
 #include "chrome/browser/in_process_webkit/indexed_db_callbacks.h"
 #include "chrome/browser/renderer_host/browser_render_process_host.h"
@@ skipping 288 matching lines @@
   WebIDBDatabase* idb_database = parent_->GetOrTerminateProcess(
       &map_, idb_database_id, reply_msg,
       ViewHostMsg_IDBDatabaseObjectStores::ID);
   if (!idb_database)
     return;
 
   WebDOMStringList web_object_stores = idb_database->objectStores();
   std::vector<string16> object_stores;
   object_stores.reserve(web_object_stores.length());
   for (unsigned i = 0; i < web_object_stores.length(); ++i)
-    object_stores[i] = web_object_stores.item(i);
+    object_stores.push_back(web_object_stores.item(i));
   ViewHostMsg_IDBDatabaseObjectStores::WriteReplyParams(reply_msg,
                                                         object_stores);
   parent_->Send(reply_msg);
 }
 
 void IndexedDBDispatcherHost::DatabaseDispatcherHost::OnCreateObjectStore(
     const ViewHostMsg_IDBDatabaseCreateObjectStore_Params& params) {
   DCHECK(ChromeThread::CurrentlyOn(ChromeThread::WEBKIT));
   WebIDBDatabase* idb_database = parent_->GetOrTerminateProcess(
       &map_, params.idb_database_id_, NULL,
@@ skipping 244 matching lines @@
     return;
   idb_object_store->removeIndex(
       name, new IndexedDBCallbacks<void>(parent_, response_id));
 }
 
 void IndexedDBDispatcherHost::ObjectStoreDispatcherHost::OnDestroyed(
     int32 object_id) {
   parent_->DestroyObject(
       &map_, object_id, ViewHostMsg_IDBObjectStoreDestroyed::ID);
 }