Prevent SharedArrayBuffer views from being used in bindings

third_party/WebKit/Source/bindings/scripts/v8_methods.py

 # Copyright (C) 2013 Google Inc. All rights reserved.
 #
 # Redistribution and use in source and binary forms, with or without
 # modification, are permitted provided that the following conditions are
 # met:
 #
 #     * Redistributions of source code must retain the above copyright
 # notice, this list of conditions and the following disclaimer.
 #     * Redistributions in binary form must reproduce the above
 # copyright notice, this list of conditions and the following disclaimer
@@ skipping 216 matching lines @@
 
 
 def argument_context(interface, method, argument, index, is_visible=True):
     extended_attributes = argument.extended_attributes
     idl_type = argument.idl_type
     if is_visible:
         idl_type.add_includes_for_type(extended_attributes)
     this_cpp_value = cpp_value(interface, method, index)
     is_variadic_wrapper_type = argument.is_variadic and idl_type.is_wrapper_type
 
+    # ArrayBufferViews that contain SharedArrayBuffers are not allowed, in
+    # general. These conditions check various patterns that occur in the IDL
+    # files. has_array_buffer_view is a catch-all; if a new method is added
+    # which does not match any specified, it will raise an exception.
+    is_array_buffer_view = idl_type.is_array_buffer_view
+    is_flexible_array_buffer_view = (
+        'FlexibleArrayBufferView' in extended_attributes)
+    is_union_with_abv = (
+        idl_type.is_union_type and
+        any(member_type.is_array_buffer_view
+            for member_type in idl_type.member_types))
+    is_sequence_of_union_with_abv = (
+        idl_type.is_array_or_sequence_type and
+        idl_type.element_type.is_union_type and
+        any(member_type.is_array_buffer_view
+            for member_type in idl_type.element_type.member_types))
+    has_array_buffer_view = any(t.is_array_buffer_view
+                                for t in idl_type.idl_types())
+
+    if has_array_buffer_view and not (
+            is_array_buffer_view or is_union_with_abv or
+            is_sequence_of_union_with_abv):
+        raise Exception('ArrayBufferView in argument with unsupported pattern.')
+
     # [LegacyInterfaceTypeChecking]
     has_type_checking_interface = (
         not is_legacy_interface_type_checking(interface, method) and
         idl_type.is_wrapper_type)
 
     set_default_value = argument.set_default_value
     this_cpp_type = idl_type.cpp_type_args(extended_attributes=extended_attributes,
                                            raw_type=True,
                                            used_as_variadic_argument=argument.is_variadic)
     context = {
         'cpp_type': (
             v8_types.cpp_template_type('Nullable', this_cpp_type)
             if idl_type.is_explicit_nullable and not argument.is_variadic
             else this_cpp_type),
         'cpp_value': this_cpp_value,
         # FIXME: check that the default value's type is compatible with the argument's
         'set_default_value': set_default_value,
         'enum_type': idl_type.enum_type,
         'enum_values': idl_type.enum_values,
         'handle': '%sHandle' % argument.name,
         # FIXME: remove once [Default] removed and just use argument.default_value
         'has_default': 'Default' in extended_attributes or set_default_value,
         'has_type_checking_interface': has_type_checking_interface,
         # Dictionary is special-cased, but arrays and sequences shouldn't be
         'idl_type': idl_type.base_type,
         'idl_type_object': idl_type,
         'index': index,
+        'is_array_buffer_view': is_array_buffer_view,
         'is_callback_function': idl_type.is_callback_function,
         'is_callback_interface': idl_type.is_callback_interface,
         # FIXME: Remove generic 'Dictionary' special-casing
         'is_dictionary': idl_type.is_dictionary or idl_type.base_type == 'Dictionary',
         'is_explicit_nullable': idl_type.is_explicit_nullable,
+        'is_flexible_array_buffer_view': is_flexible_array_buffer_view,
         'is_nullable': idl_type.is_nullable,
         'is_optional': argument.is_optional,
+        'is_sequence_of_union_with_array_buffer_view': is_sequence_of_union_with_abv,
+        'is_union_with_array_buffer_view': is_union_with_abv,
         'is_variadic': argument.is_variadic,
         'is_variadic_wrapper_type': is_variadic_wrapper_type,
         'is_wrapper_type': idl_type.is_wrapper_type,
         'name': argument.name,
         'use_permissive_dictionary_conversion': 'PermissiveDictionaryConversion' in extended_attributes,
         'v8_set_return_value': v8_set_return_value(interface.name, method, this_cpp_value),
         'v8_set_return_value_for_main_world': v8_set_return_value(interface.name, method, this_cpp_value, for_main_world=True),
         'v8_value_to_local_cpp_value': v8_value_to_local_cpp_value(method, argument, index),
     }
     context.update({
@@ skipping 166 matching lines @@
     return method.idl_type and method.idl_type.name == 'Promise'
 
 IdlOperation.returns_promise = property(method_returns_promise)
 
 
 def argument_conversion_needs_exception_state(method, argument):
     idl_type = argument.idl_type
     return (idl_type.v8_conversion_needs_exception_state or
             argument.is_variadic or
             (method.returns_promise and idl_type.is_string_type))