Fixes a crash in the plugin process caused by the XStandard plugin passing in...

chrome/plugin/npobject_proxy.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/plugin/npobject_proxy.h"
 
 #include "base/waitable_event.h"
 #include "chrome/common/plugin_messages.h"
 #include "chrome/plugin/npobject_util.h"
 #include "chrome/plugin/plugin_channel_base.h"
@@ skipping 92 matching lines @@
 }
 
 void NPObjectProxy::OnChannelError() {
   // Release our ref count of the plugin channel object, as it addrefs the
   // process.
   channel_ = NULL;
 }
 
 bool NPObjectProxy::NPHasMethod(NPObject *obj,
                                 NPIdentifier name) {
+  if (obj == NULL)
+    return false;
+
   bool result = false;
   NPObjectProxy* proxy = GetProxy(obj);
 
   if (!proxy) {
     return obj->_class->hasMethod(obj, name);
   }
 
   NPIdentifier_Param name_param;
   CreateNPIdentifierParam(name, &name_param);
 
@@ skipping 17 matching lines @@
   return NPInvokePrivate(0, npobj, true, 0, args, arg_count, result);
 }
 
 bool NPObjectProxy::NPInvokePrivate(NPP npp,
                                     NPObject *obj,
                                     bool is_default,
                                     NPIdentifier name,
                                     const NPVariant *args,
                                     uint32_t arg_count,
                                     NPVariant *np_result) {
+  if (obj == NULL)
+    return false;
+
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->invoke(obj, name, args, arg_count, np_result);
   }
 
   bool result = false;
   NPIdentifier_Param name_param;
   if (is_default) {
     // The data won't actually get used, but set it so we don't send random
     // data.
@@ skipping 38 matching lines @@
     return false;
 
   CreateNPVariant(
       param_result, channel_copy, np_result, modal_dialog_event_handle,
       page_url);
   return true;
 }
 
 bool NPObjectProxy::NPHasProperty(NPObject *obj,
                                   NPIdentifier name) {
+  if (obj == NULL)
+    return false;
+
   bool result = false;
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->hasProperty(obj, name);
   }
 
   NPIdentifier_Param name_param;
   CreateNPIdentifierParam(name, &name_param);
 
   NPVariant_Param param;
@@ skipping 42 matching lines @@
 
   CreateNPVariant(
       param, channel.get(), np_result, modal_dialog_event_handle, page_url);
 
   return true;
 }
 
 bool NPObjectProxy::NPSetProperty(NPObject *obj,
                                   NPIdentifier name,
                                   const NPVariant *value) {
+  if (obj == NULL)
+    return false;
+
   bool result = false;
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->setProperty(obj, name, value);
   }
 
   NPIdentifier_Param name_param;
   CreateNPIdentifierParam(name, &name_param);
 
   NPVariant_Param value_param;
   CreateNPVariantParam(
       *value, proxy->channel(), &value_param, false,
       proxy->modal_dialog_event_, proxy->page_url_);
 
   proxy->Send(new NPObjectMsg_SetProperty(
       proxy->route_id(), name_param, value_param, &result));
   // Send may delete proxy.
   proxy = NULL;
 
   return result;
 }
 
 bool NPObjectProxy::NPRemoveProperty(NPObject *obj,
                                      NPIdentifier name) {
+  if (obj == NULL)
+    return false;
+
   bool result = false;
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->removeProperty(obj, name);
   }
 
   NPIdentifier_Param name_param;
   CreateNPIdentifierParam(name, &name_param);
 
   NPVariant_Param param;
   proxy->Send(new NPObjectMsg_RemoveProperty(
       proxy->route_id(), name_param, &result));
   // Send may delete proxy.
   proxy = NULL;
 
   return result;
 }
 
 void NPObjectProxy::NPPInvalidate(NPObject *obj) {
+  if (obj == NULL)
+    return;
+
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     obj->_class->invalidate(obj);
     return;
   }
 
   proxy->Send(new NPObjectMsg_Invalidate(proxy->route_id()));
   // Send may delete proxy.
   proxy = NULL;
 }
 
 bool NPObjectProxy::NPNEnumerate(NPObject *obj,
                                  NPIdentifier **value,
                                  uint32_t *count) {
+  if (obj == NULL)
+    return false;
+
   bool result = false;
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->enumerate(obj, value, count);
   }
 
   std::vector<NPIdentifier_Param> value_param;
   proxy->Send(new NPObjectMsg_Enumeration(
       proxy->route_id(), &value_param, &result));
   // Send may delete proxy.
   proxy = NULL;
 
   if (!result)
     return false;
 
   *count = static_cast<unsigned int>(value_param.size());
   *value = static_cast<NPIdentifier *>(
       NPN_MemAlloc(sizeof(NPIdentifier) * *count));
   for (unsigned int i = 0; i < *count; ++i)
     (*value)[i] = CreateNPIdentifier(value_param[i]);
 
   return true;
 }
 
 bool NPObjectProxy::NPNConstruct(NPObject *obj,
                                  const NPVariant *args,
                                  uint32_t arg_count,
                                  NPVariant *np_result) {
+  if (obj == NULL)
+    return false;
+
   NPObjectProxy* proxy = GetProxy(obj);
   if (!proxy) {
     return obj->_class->construct(obj, args, arg_count, np_result);
   }
 
   bool result = false;
 
   // Note: This instance can get destroyed in the context of
   // Send so addref the channel in this scope.
   scoped_refptr<PluginChannelBase> channel_copy = proxy->channel_;
@@ skipping 85 matching lines @@
     return;
   }
 
   NPVariant_Param result_param;
   std::string message_str(message);
 
   proxy->Send(new NPObjectMsg_SetException(proxy->route_id(), message_str));
   // Send may delete proxy.
   proxy = NULL;
 }