Use an explicit PID for duplicating Pepper handles rather than the Channel's.

content/common/view_messages.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // IPC messages for page rendering.
 // Multiply-included message file, hence no include guard.
 
 #include "base/process.h"
 #include "base/shared_memory.h"
 #include "base/string16.h"
@@ skipping 1196 matching lines @@
                     IPC::PlatformFileForTransit /* file descriptor */,
                     int /* message_id */)
 
 // Tells the renderer that the network state has changed and that
 // window.navigator.onLine should be updated for all WebViews.
 IPC_MESSAGE_CONTROL1(ViewMsg_NetworkStateChanged,
                      bool /* online */)
 
 // Reply to ViewHostMsg_OpenChannelToPpapiBroker
 // Tells the renderer that the channel to the broker has been created.
-IPC_MESSAGE_ROUTED2(ViewMsg_PpapiBrokerChannelCreated,
+IPC_MESSAGE_ROUTED3(ViewMsg_PpapiBrokerChannelCreated,
                     int /* request_id */,
+                    base::ProcessId /* broker_pid */,
                     IPC::ChannelHandle /* handle */)
 
 // Reply to ViewHostMsg_RequestPpapiBrokerPermission.
 // Tells the renderer whether permission to access to PPAPI broker was granted
 // or not.
 IPC_MESSAGE_ROUTED2(ViewMsg_PpapiBrokerPermissionResult,
                     int /* request_id */,
                     bool /* result */)
 
 // Tells the renderer to empty its plugin list cache, optional reloading
@@ skipping 622 matching lines @@
 // A renderer sends this to the browser process when it wants to create a ppapi
 // plugin.  The browser will create the plugin process if necessary, and will
 // return a handle to the channel on success.
 //
 // The plugin_child_id is the ChildProcessHost ID assigned in the browser
 // process. This ID is valid only in the context of the browser process and is
 // used to identify the proper process when the renderer notifies it that the
 // plugin is hung.
 //
 // On error an empty string and null handles are returned.
-IPC_SYNC_MESSAGE_CONTROL1_2(ViewHostMsg_OpenChannelToPepperPlugin,
+IPC_SYNC_MESSAGE_CONTROL1_3(ViewHostMsg_OpenChannelToPepperPlugin,
                             FilePath /* path */,
                             IPC::ChannelHandle /* handle to channel */,
+                            base::ProcessId /* plugin_pid */,
                             int /* plugin_child_id */)
 
 // Notification that a plugin has created a new plugin instance. The parameters
 // indicate:
 // -The plugin process ID that we're creating the instance for.
 // -The instance ID of the instance being created.
 // -A PepperRendererInstanceData struct which contains properties from the
 // renderer which are associated with the plugin instance. This includes the
 // routing ID of the associated render view and the URL of plugin.
 // -Whether the plugin we're creating an instance for is external or internal.
@@ skipping 478 matching lines @@
                      int /* arb_robustness_status_code */)
 
 #if defined(OS_WIN)
 // Request that the given font characters be loaded by the browser so it's
 // cached by the OS. Please see RenderMessageFilter::OnPreCacheFontCharacters
 // for details.
 IPC_SYNC_MESSAGE_CONTROL2_0(ViewHostMsg_PreCacheFontCharacters,
                             LOGFONT /* font_data */,
                             string16 /* characters */)
 #endif