Fix data race problem in createImageBitmap(Blob)

third_party/WebKit/Source/core/imagebitmap/ImageBitmapFactories.h

 /*
  * Copyright (c) 2013, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 22 matching lines @@
 
 #include "bindings/core/v8/ScriptPromise.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/ScriptState.h"
 #include "bindings/core/v8/UnionTypesCore.h"
 #include "core/fileapi/FileReaderLoader.h"
 #include "core/fileapi/FileReaderLoaderClient.h"
 #include "core/imagebitmap/ImageBitmapOptions.h"
 #include "platform/Supplementable.h"
 #include "platform/geometry/IntRect.h"
+#include "third_party/skia/include/core/SkImage.h"
 
 namespace blink {
 
 class Blob;
 class EventTarget;
 class ExceptionState;
 class ExecutionContext;
 class ImageBitmapSource;
 class ImageBitmapOptions;
 class ImageDecoder;
@@ skipping 34 matching lines @@
 
         ~ImageBitmapLoader() override { }
 
     private:
         ImageBitmapLoader(ImageBitmapFactories&, const IntRect&, ScriptState*, const ImageBitmapOptions&);
 
         void rejectPromise();
 
         void scheduleAsyncImageBitmapDecoding();
         void decodeImageOnDecoderThread(WebTaskRunner*);
-        void resolvePromiseOnOriginalThread(PassOwnPtr<ImageDecoder>);
+        void resolvePromiseOnOriginalThread(PassRefPtr<SkImage>);
 
         // FileReaderLoaderClient
         void didStartLoading() override { }
         void didReceiveData() override { }
         void didFinishLoading() override;
         void didFail(FileError::ErrorCode) override;
 
         FileReaderLoader m_loader;
         RawPtrWillBeMember<ImageBitmapFactories> m_factory;
         Member<ScriptPromiseResolver> m_resolver;
         IntRect m_cropRect;
         ImageBitmapOptions m_options;
     };
 
     static ImageBitmapFactories& from(EventTarget&);
 
     template<class GlobalObject>
     static ImageBitmapFactories& fromInternal(GlobalObject&);
 
     void addLoader(ImageBitmapLoader*);
     void didFinishLoading(ImageBitmapLoader*);
 
     PersistentHeapHashSetWillBeHeapHashSet<Member<ImageBitmapLoader>> m_pendingLoaders;
 };
 
 } // namespace blink
 
 #endif // ImageBitmapFactories_h