[PPAPI][MediaStream] Support configure for video input.

content/renderer/pepper/pepper_media_stream_track_host_base.h

Index: content/renderer/pepper/pepper_media_stream_track_host_base.h
diff --git a/content/renderer/pepper/pepper_media_stream_track_host_base.h b/content/renderer/pepper/pepper_media_stream_track_host_base.h
index a31c1e1fec18d97a0cb23bd8a8b6f5119a29d10d..82985913e036db2b878e34701833a642ed1a26f3 100644
--- a/content/renderer/pepper/pepper_media_stream_track_host_base.h
+++ b/content/renderer/pepper/pepper_media_stream_track_host_base.h
@@ -33,15 +33,15 @@ class PepperMediaStreamTrackHostBase
   // Also see |MediaStreamBufferManager|.
   void SendEnqueueBufferMessageToPlugin(int32_t index);
 
- private:
-  // Subclasses must implement this method to clean up when the track is closed.
-  virtual void OnClose() = 0;
-
   // ResourceMessageHandler overrides:
   virtual int32_t OnResourceMessageReceived(
       const IPC::Message& msg,
       ppapi::host::HostMessageContext* context) OVERRIDE;
 
+ private:
+  // Subclasses must implement this method to clean up when the track is closed.
+  virtual void OnClose() = 0;
+
   // Message handlers:
   int32_t OnHostMsgEnqueueBuffer(ppapi::host::HostMessageContext* context,

[yzshen1, 2014/02/14 18:25:44]

By the way, I just realized that this method doesn't validate |index|. Moreover,
MediaStreamBuffer only do DCHECKs. In a release build, a malicious IPC message
can easily get us into out-of-bound array access.

[Peng, 2014/02/14 20:04:50]

I changed several DCHECK to CHECK in MediaStreamBufferManager(). It will crash
any compromised renderer or plugin.  

                                 int32_t index);