PPAPI: Do not try to allocation shared memory directly from a renderer. Always ask the browser.

content/renderer/pepper_plugin_delegate_impl.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper_plugin_delegate_impl.h"
 
 #include <cmath>
 #include <queue>
 
 #include "base/callback.h"
@@ skipping 1283 matching lines @@
 
 std::string PepperPluginDelegateImpl::GetFlashCommandLineArgs() {
   return CommandLine::ForCurrentProcess()->GetSwitchValueASCII(
       switches::kPpapiFlashArgs);
 }
 
 base::SharedMemory* PepperPluginDelegateImpl::CreateAnonymousSharedMemory(
     uint32_t size) {
   if (size == 0)
     return NULL;
-  scoped_ptr<base::SharedMemory> shm(new base::SharedMemory());
-  if (shm->CreateAnonymous(size))
-    return shm.release();
-  // The sandbox can prevent CreateAnonymous from succeeding, in which case we
-  // need to IPC to the browser process.
   base::SharedMemoryHandle handle;
   if (!render_view_->Send(
           new ViewHostMsg_AllocateSharedMemoryBuffer(size, &handle))) {
     DLOG(WARNING) << "Browser allocation request message failed";
     return NULL;
   }
   if (!base::SharedMemory::IsHandleValid(handle)) {
     DLOG(WARNING) << "Browser failed to allocate shared memory";
     return NULL;
   }
-  shm.reset(new base::SharedMemory(handle, false));
-  return shm.release();
+  return new base::SharedMemory(handle, false);
 }