Fix crash when using disallowed URLs in image sets for content CSS property

third_party/WebKit/Source/core/css/CSSImageSetValue.h

Index: third_party/WebKit/Source/core/css/CSSImageSetValue.h
diff --git a/third_party/WebKit/Source/core/css/CSSImageSetValue.h b/third_party/WebKit/Source/core/css/CSSImageSetValue.h
index 6e339ea426c082bec2a40411943fadb748f42de7..d9c433695455c88ad4be9b57ba3848bddb333bc7 100644
--- a/third_party/WebKit/Source/core/css/CSSImageSetValue.h
+++ b/third_party/WebKit/Source/core/css/CSSImageSetValue.h
@@ -34,7 +34,7 @@
 namespace blink {
 
 class Document;
-class StyleFetchedImageSet;
+class StyleImage;
 
 class CSSImageSetValue : public CSSValueList {
 public:
@@ -46,8 +46,8 @@ public:
     ~CSSImageSetValue();
 
     bool isCachePending(float deviceScaleFactor) const;
-    StyleFetchedImageSet* cachedImageSet(float deviceScaleFactor) const;
-    StyleFetchedImageSet* cacheImageSet(Document*, float deviceScaleFactor, CrossOriginAttributeValue = CrossOriginAttributeNotSet);
+    StyleImage* cachedImage(float deviceScaleFactor) const;
+    StyleImage* cacheImage(Document*, float deviceScaleFactor, CrossOriginAttributeValue = CrossOriginAttributeNotSet);
 
     String customCSSText() const;
 
@@ -73,9 +73,8 @@ private:
     void fillImageSet();
     static inline bool compareByScaleFactor(ImageWithScale first, ImageWithScale second) { return first.scaleFactor < second.scaleFactor; }
 
-    bool m_isCachePending;
     float m_cachedScaleFactor;
-    RefPtrWillBeMember<StyleFetchedImageSet> m_cachedImageSet;
+    RefPtrWillBeMember<StyleImage> m_cachedImage;
 
     Vector<ImageWithScale> m_imagesInSet;
 };