Fix out-of-memory crashes related to ArrayBuffer allocation

third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp

Index: third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
diff --git a/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp b/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
index 43cecb80cf7d1dea7439344d236cedbc0d454db0..9f43b2586c0e3960e403bf25dce98c727554ab73 100644
--- a/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
+++ b/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
@@ -2740,7 +2740,7 @@ ScriptValue WebGLRenderingContextBase::getParameter(ScriptState* scriptState, GL
     case GL_COLOR_WRITEMASK:
         return getBooleanArrayParameter(scriptState, pname);
     case GL_COMPRESSED_TEXTURE_FORMATS:
-        return WebGLAny(scriptState, DOMUint32Array::create(m_compressedTextureFormats.data(), m_compressedTextureFormats.size()));
+        return WebGLAny(scriptState, DOMUint32Array::deprecatedCreateOrCrash(m_compressedTextureFormats.data(), m_compressedTextureFormats.size()));
     case GL_CULL_FACE:
         return getBooleanParameter(scriptState, pname);
     case GL_CULL_FACE_MODE:
@@ -3327,21 +3327,21 @@ ScriptValue WebGLRenderingContextBase::getUniform(ScriptState* scriptState, WebG
                     webContext()->getUniformfv(objectOrZero(program), location, value);
                     if (length == 1)
                         return WebGLAny(scriptState, value[0]);
-                    return WebGLAny(scriptState, DOMFloat32Array::create(value, length));
+                    return WebGLAny(scriptState, DOMFloat32Array::deprecatedCreateOrCrash(value, length));
                 }
                 case GL_INT: {
                     GLint value[4] = {0};
                     webContext()->getUniformiv(objectOrZero(program), location, value);
                     if (length == 1)
                         return WebGLAny(scriptState, value[0]);
-                    return WebGLAny(scriptState, DOMInt32Array::create(value, length));
+                    return WebGLAny(scriptState, DOMInt32Array::deprecatedCreateOrCrash(value, length));
                 }
                 case GL_UNSIGNED_INT: {
                     GLuint value[4] = {0};
                     webContext()->getUniformuiv(objectOrZero(program), location, value);
                     if (length == 1)
                         return WebGLAny(scriptState, value[0]);
-                    return WebGLAny(scriptState, DOMUint32Array::create(value, length));
+                    return WebGLAny(scriptState, DOMUint32Array::deprecatedCreateOrCrash(value, length));
                 }
                 case GL_BOOL: {
                     GLint value[4] = {0};
@@ -3419,11 +3419,11 @@ ScriptValue WebGLRenderingContextBase::getVertexAttrib(ScriptState* scriptState,
             VertexAttribValue& attribValue = m_vertexAttribValue[index];
             switch (attribValue.type) {
             case Float32ArrayType:
-                return WebGLAny(scriptState, DOMFloat32Array::create(attribValue.value.floatValue, 4));
+                return WebGLAny(scriptState, DOMFloat32Array::deprecatedCreateOrCrash(attribValue.value.floatValue, 4));
             case Int32ArrayType:
-                return WebGLAny(scriptState, DOMInt32Array::create(attribValue.value.intValue, 4));
+                return WebGLAny(scriptState, DOMInt32Array::deprecatedCreateOrCrash(attribValue.value.intValue, 4));
             case Uint32ArrayType:
-                return WebGLAny(scriptState, DOMUint32Array::create(attribValue.value.uintValue, 4));
+                return WebGLAny(scriptState, DOMUint32Array::deprecatedCreateOrCrash(attribValue.value.uintValue, 4));
             default:
                 ASSERT_NOT_REACHED();
                 break;
@@ -5284,7 +5284,7 @@ ScriptValue WebGLRenderingContextBase::getWebGLFloatArrayParameter(ScriptState*
     default:
         notImplemented();
     }
-    return WebGLAny(scriptState, DOMFloat32Array::create(value, length));
+    return WebGLAny(scriptState, DOMFloat32Array::deprecatedCreateOrCrash(value, length));
 }
 
 ScriptValue WebGLRenderingContextBase::getWebGLIntArrayParameter(ScriptState* scriptState, GLenum pname)
@@ -5304,7 +5304,7 @@ ScriptValue WebGLRenderingContextBase::getWebGLIntArrayParameter(ScriptState* sc
     default:
         notImplemented();
     }
-    return WebGLAny(scriptState, DOMInt32Array::create(value, length));
+    return WebGLAny(scriptState, DOMInt32Array::deprecatedCreateOrCrash(value, length));
 }
 
 void WebGLRenderingContextBase::handleTextureCompleteness(const char* functionName, bool prepareToDraw)