Perform a sizet->int checked_cast in WebURLLoaderImpl::OnReceiveWebBlobData.

components/html_viewer/web_url_loader_impl.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/html_viewer/web_url_loader_impl.h"
 
 #include "base/bind.h"
 #include "base/logging.h"
+#include "base/numerics/safe_conversions.h"
 #include "base/strings/string_util.h"
 #include "base/thread_task_runner_handle.h"
 #include "components/html_viewer/blink_url_request_type_converters.h"
 #include "mojo/common/common_type_converters.h"
 #include "mojo/common/url_type_converters.h"
 #include "mojo/services/network/public/interfaces/network_service.mojom.h"
 #include "net/base/net_errors.h"
 #include "third_party/WebKit/public/platform/WebURLError.h"
 #include "third_party/WebKit/public/platform/WebURLLoadTiming.h"
 #include "third_party/WebKit/public/platform/WebURLLoaderClient.h"
@@ skipping 224 matching lines @@
 
   base::WeakPtr<WebURLLoaderImpl> self(weak_factory_.GetWeakPtr());
   client_->didReceiveResponse(this, result);
 
   // We may have been deleted during didReceiveResponse.
   if (!self)
     return;
 
   // Send a receive data for each blob item.
   for (size_t i = 0; i < items.size(); ++i) {
-    client_->didReceiveData(this, items[i]->data.data(), items[i]->data.size(),
-                            -1);
+    const int data_size = base::checked_cast<int>(items[i]->data.size());
+    client_->didReceiveData(this, items[i]->data.data(), data_size, -1);
   }
 
   // Send a closing finish.
   double finish_time = base::Time::Now().ToDoubleT();
   client_->didFinishLoading(
       this, finish_time, blink::WebURLLoaderClient::kUnknownEncodedDataLength);
 }
 
 void WebURLLoaderImpl::ReadMore() {
   const void* buf;
   uint32_t buf_size;
   MojoResult rv = BeginReadDataRaw(response_body_stream_.get(),
                                    &buf,
                                    &buf_size,
                                    MOJO_READ_DATA_FLAG_NONE);
   if (rv == MOJO_RESULT_OK) {
     base::WeakPtr<WebURLLoaderImpl> self(weak_factory_.GetWeakPtr());
     client_->didReceiveData(this, static_cast<const char*>(buf), buf_size, -1);
-    // We may have been deleted durining didReceiveData.
+    // We may have been deleted during didReceiveData.
     if (!self)
       return;
     EndReadDataRaw(response_body_stream_.get(), buf_size);
     WaitToReadMore();
   } else if (rv == MOJO_RESULT_SHOULD_WAIT) {
     WaitToReadMore();
   } else if (rv == MOJO_RESULT_FAILED_PRECONDITION) {
     // We reached end-of-file.
     double finish_time = base::Time::Now().ToDoubleT();
     client_->didFinishLoading(
@@ skipping 12 matching lines @@
       MOJO_DEADLINE_INDEFINITE,
       base::Bind(&WebURLLoaderImpl::OnResponseBodyStreamReady,
                  weak_factory_.GetWeakPtr()));
 }
 
 void WebURLLoaderImpl::OnResponseBodyStreamReady(MojoResult result) {
   ReadMore();
 }
 
 }  // namespace html_viewer