Check for invalid use of data frame opcodes.

net/websockets/websocket_channel.h

Index: net/websockets/websocket_channel.h
diff --git a/net/websockets/websocket_channel.h b/net/websockets/websocket_channel.h
index 18734cae677bf9b840d8d2255d02d809a634232d..3073fa2814c9c2e9f6ec2b01fbc3812642df71ec 100644
--- a/net/websockets/websocket_channel.h
+++ b/net/websockets/websocket_channel.h
@@ -200,6 +200,13 @@ class NET_EXPORT WebSocketChannel {
                            const scoped_refptr<IOBuffer>& data_buffer,
                            size_t size) WARN_UNUSED_RESULT;
 
+  // Forward a received data frame to the renderer, if connected. Checks the
+  // UTF-8 validity of text frames.
+  ChannelState HandleDataFrame(const WebSocketFrameHeader::OpCode opcode,
+                               bool final,
+                               const scoped_refptr<IOBuffer>& data_buffer,
+                               size_t size);
+
   // Low-level method to send a single frame. Used for both data and control
   // frames. Either sends the frame immediately or buffers it to be scheduled
   // when the current write finishes. |fin| and |op_code| are defined as for
@@ -319,6 +326,9 @@ class NET_EXPORT WebSocketChannel {
   base::StreamingUtf8Validator incoming_utf8_validator_;
   bool receiving_text_message_;
 
+  // True if we are in the middle of receiving a message.
+  bool expecting_to_read_continuation_;
+
   DISALLOW_COPY_AND_ASSIGN(WebSocketChannel);
 };