For the 249 branch:...

third_party/WebKit/WebCore/platform/graphics/chromium/FontCustomPlatformData.cpp

 /*
  * Copyright (C) 2007 Apple Computer, Inc.
  * Copyright (c) 2007, 2008, 2009, Google Inc. All rights reserved.
  * 
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  * 
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 24 matching lines @@
 #if PLATFORM(WIN_OS)
 #include "Base64.h"
 #include "ChromiumBridge.h"
 #include "OpenTypeUtilities.h"
 #elif PLATFORM(LINUX)
 #include "SkStream.h"
 #endif
 
 #include "FontPlatformData.h"
 #include "NotImplemented.h"
+#include "OpenTypeSanitizer.h"
 #include "SharedBuffer.h"
 
 #if PLATFORM(WIN_OS)
 #include <objbase.h>
 #elif PLATFORM(LINUX)
 #include <cstring>
 #endif
 
 namespace WebCore {
 
@@ skipping 109 matching lines @@
 private:
     RefPtr<SharedBuffer> m_buffer;
     size_t m_offset;
 };
 #endif
 
 FontCustomPlatformData* createFontCustomPlatformData(SharedBuffer* buffer)
 {
     ASSERT_ARG(buffer, buffer);
 
+#if ENABLE(OPENTYPE_SANITIZER)
+    OpenTypeSanitizer sanitizer(buffer);
+    RefPtr<SharedBuffer> transcodeBuffer = sanitizer.sanitize();
+    if (!transcodeBuffer)
+        return 0; // validation failed.
+    buffer = transcodeBuffer.get();
+#endif
+
 #if PLATFORM(WIN_OS)
     // Introduce the font to GDI. AddFontMemResourceEx should be used with care, because it will pollute the process's
     // font namespace (Windows has no API for creating an HFONT from data without exposing the font to the
     // entire process first).
     String fontName = createUniqueFontName();
     HANDLE fontReference = renameAndActivateFont(buffer, fontName);
     if (!fontReference)
         return 0;
     return new FontCustomPlatformData(fontReference, fontName);
 #elif PLATFORM(LINUX)
     RemoteFontStream stream(buffer);
     SkTypeface* typeface = SkTypeface::CreateFromStream(&stream);
     if (!typeface)
         return 0;
     return new FontCustomPlatformData(typeface);
 #else
     notImplemented();
     return 0;
 #endif
 }
 
 }