Don't leak SSPILibraryDefault objects

net/http/http_auth_handler_ntlm.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_HANDLER_NTLM_H_
 #define NET_HTTP_HTTP_AUTH_HANDLER_NTLM_H_
 #pragma once
 
 #include "build/build_config.h"
 
@@ skipping 32 matching lines @@
     virtual ~Factory();
 
     virtual int CreateAuthHandler(HttpAuth::ChallengeTokenizer* challenge,
                                   HttpAuth::Target target,
                                   const GURL& origin,
                                   CreateReason reason,
                                   int digest_nonce_count,
                                   const BoundNetLog& net_log,
                                   scoped_ptr<HttpAuthHandler>* handler);
 #if defined(NTLM_SSPI)
-    // Set the SSPILibrary to use. Typically the only callers which need to
-    // use this are unit tests which pass in a mocked-out version of the
-    // SSPI library.
-    // The caller is responsible for managing the lifetime of |*sspi_library|,
-    // and the lifetime must exceed that of this Factory object and all
-    // HttpAuthHandler's that this Factory object creates.
+    // Set the SSPILibrary to use. Typically the only callers which need to use
+    // this are unit tests which pass in a mocked-out version of the SSPI
+    // library.  After the call |sspi_library| will be owned by this Factory and
+    // will be destroyed when the Factory is destroyed.
     void set_sspi_library(SSPILibrary* sspi_library) {
-      sspi_library_ = sspi_library;
+      sspi_library_.reset(sspi_library);
     }
 #endif  // defined(NTLM_SSPI)
    private:
 #if defined(NTLM_SSPI)
     ULONG max_token_length_;
     bool first_creation_;
     bool is_unsupported_;
-    SSPILibrary* sspi_library_;
+    scoped_ptr<SSPILibrary> sspi_library_;
 #endif  // defined(NTLM_SSPI)
   };
 
 #if defined(NTLM_PORTABLE)
   // A function that generates n random bytes in the output buffer.
   typedef void (*GenerateRandomProc)(uint8* output, size_t n);
 
   // A function that returns the local host name. Returns an empty string if
   // the local host name is not available.
   typedef std::string (*HostNameProc)();
@@ skipping 89 matching lines @@
   std::string auth_data_;
 
 #if defined(NTLM_SSPI)
   URLSecurityManager* url_security_manager_;
 #endif
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_HANDLER_NTLM_H_