Verify returned frames from media::VideoFrame::Wrap*() methods

content/renderer/pepper/pepper_video_encoder_host.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper/pepper_video_encoder_host.h"
 
 #include <utility>
 
 #include "base/bind.h"
 #include "base/memory/shared_memory.h"
@@ skipping 613 matching lines @@
   DCHECK(buffer);
   uint32_t shm_offset = static_cast<uint8_t*>(buffer->video.data) -
                         static_cast<uint8_t*>(buffer_manager_.shm()->memory());
 
   scoped_refptr<media::VideoFrame> frame =
       media::VideoFrame::WrapExternalSharedMemory(
           media_input_format_, input_coded_size_, gfx::Rect(input_coded_size_),
           input_coded_size_, static_cast<uint8_t*>(buffer->video.data),
           buffer->video.data_size, buffer_manager_.shm()->handle(), shm_offset,
           base::TimeDelta());
+  if (!frame) {
+    NotifyPepperError(PP_ERROR_FAILED);
+    return frame;
+  }
   frame->AddDestructionObserver(
       base::Bind(&PepperVideoEncoderHost::FrameReleased,
                  weak_ptr_factory_.GetWeakPtr(), reply_context, frame_id));
   return frame;
 }
 
 void PepperVideoEncoderHost::FrameReleased(
     const ppapi::host::ReplyMessageContext& reply_context,
     uint32_t frame_id) {
   DCHECK(RenderThreadImpl::current());
@@ skipping 14 matching lines @@
 }
 
 uint8_t* PepperVideoEncoderHost::ShmHandleToAddress(int32_t buffer_id) {
   DCHECK(RenderThreadImpl::current());
   DCHECK_GE(buffer_id, 0);
   DCHECK_LT(buffer_id, static_cast<int32_t>(shm_buffers_.size()));
   return static_cast<uint8_t*>(shm_buffers_[buffer_id]->shm->memory());
 }
 
 }  // namespace content