Fix uaf in ApplicationInstance.

mojo/shell/application_instance.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef MOJO_SHELL_APPLICATION_INSTANCE_H_
 #define MOJO_SHELL_APPLICATION_INSTANCE_H_
 
 #include <set>
 
 #include "base/callback.h"
@@ skipping 38 matching lines @@
 
 // Encapsulates a connection to an instance of an application, tracked by the
 // shell's ApplicationManager.
 class ApplicationInstance : public Shell {
  public:
   using AllowedInterfaces = std::set<std::string>;
   using CapabilityFilter = std::map<std::string, AllowedInterfaces>;
 
   ApplicationInstance(ApplicationPtr application,
                       ApplicationManager* manager,
+                      const Identity& originator_identity,
                       const Identity& resolved_identity,
                       const CapabilityFilter& filter,
                       const base::Closure& on_application_end);
 
   ~ApplicationInstance() override;
 
   void InitializeApplication();
 
   void ConnectToClient(ApplicationInstance* originator,
                        const GURL& requested_url,
@@ skipping 33 matching lines @@
     ~QueuedClientRequest();
     ApplicationInstance* originator;
     GURL requested_url;
     GURL requestor_url;
     InterfaceRequest<ServiceProvider> services;
     ServiceProviderPtr exposed_services;
     CapabilityFilterPtr filter;
   };
 
   ApplicationManager* const manager_;
+  const Identity originator_identity_;
   const Identity identity_;
   const CapabilityFilter filter_;
   const bool allow_any_application_;
   base::Closure on_application_end_;
   ApplicationPtr application_;
   Binding<Shell> binding_;
   bool queue_requests_;
   std::vector<QueuedClientRequest*> queued_client_requests_;
 
   DISALLOW_COPY_AND_ASSIGN(ApplicationInstance);
 };
 
 }  // namespace shell
 }  // namespace mojo
 
 #endif  // MOJO_SHELL_APPLICATION_INSTANCE_H_