Validate image files before writing them to media galleries.

chrome/browser/extensions/api/media_galleries/media_galleries_api.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Implements the Chrome Extensions Media Galleries API.
 
 #include "chrome/browser/extensions/api/media_galleries/media_galleries_api.h"
 
 #include <set>
 #include <string>
@@ skipping 168 matching lines @@
 
     if (filesystems[i].path.empty())
       continue;
 
     if (has_read_permission) {
       content::ChildProcessSecurityPolicy* policy =
           ChildProcessSecurityPolicy::GetInstance();
       if (!policy->CanReadFile(child_id, filesystems[i].path))
         policy->GrantReadFile(child_id, filesystems[i].path);
       policy->GrantReadFileSystem(child_id, filesystems[i].fsid);
+policy->GrantCreateFileForFileSystem(child_id, filesystems[i].fsid);

[Greg Billock, 2013/05/22 16:21:59]

whitespace. But does this need to get gated by "if (has_write_permission)" which
would get set up by a parallel to kReadPermission?

[vandebo (ex-Chrome), 2013/05/22 18:41:17]

Oops, this is only for debugging.  There are another set of changes need for
write permissions that are not in scope for this CL.  Removed.

     }
   }
 
   SetResult(list);
   SendResponse(true);
 }
 
 void MediaGalleriesGetMediaFileSystemsFunction::ShowDialog() {
   WebContents* contents = WebContents::FromRenderViewHost(render_view_host());
   WebContentsModalDialogManager* web_contents_modal_dialog_manager =
@@ skipping 40 matching lines @@
 bool MediaGalleriesAssembleMediaFileFunction::RunImpl() {
   if (!ApiIsAccessible(&error_))
     return false;
 
   // TODO(vandebo) Update the metadata and return the new file.
   SetResult(base::Value::CreateNullValue());
   return true;
 }
 
 }  // namespace extensions