Merge 94262 - Add defensive bounds checking for AudioNode methods

Source/WebCore/webaudio/AudioNode.cpp

 /*
  * Copyright (C) 2010, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1.  Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 82 matching lines @@
     m_inputs.append(input);
 }
 
 void AudioNode::addOutput(PassOwnPtr<AudioNodeOutput> output)
 {
     m_outputs.append(output);
 }
 
 AudioNodeInput* AudioNode::input(unsigned i)
 {
-    return m_inputs[i].get();
+    if (i < m_inputs.size())
+        return m_inputs[i].get();
+    return 0;
 }
 
 AudioNodeOutput* AudioNode::output(unsigned i)
 {
-    return m_outputs[i].get();
+    if (i < m_outputs.size())
+        return m_outputs[i].get();
+    return 0;
 }
 
 bool AudioNode::connect(AudioNode* destination, unsigned outputIndex, unsigned inputIndex)
 {
     ASSERT(isMainThread()); 
     AudioContext::AutoLocker locker(context());
     
     // Sanity check input and output indices.
     if (outputIndex >= numberOfOutputs())
         return false;
@@ skipping 197 matching lines @@
         printf("%d: %d\n", i, s_nodeCount[i]);
 
     printf("===========================\n\n\n");
 }
 
 #endif // DEBUG_AUDIONODE_REFERENCES
 
 } // namespace WebCore
 
 #endif // ENABLE(WEB_AUDIO)