C++ bindings: A struct's Deserialize() now does validation before deserializing.

mojo/public/tools/bindings/generators/cpp_templates/wrapper_class_declaration.tmpl

 {% from "enum_macros.tmpl" import enum_decl -%}
 class {{struct.name}} {
  public:
   using Data_ = internal::{{struct.name}}_Data;
 
 {#--- Enums #}
 {%- for enum in struct.enums -%}
   {{enum_decl(enum, is_static=true)|indent(2)}}
 {%- endfor %}
 
@@ skipping 26 matching lines @@
 
   // Returns true on successful serialization.  On failure, part of the data may
   // be serialized, until the point of failure. This API does not support
   // serializing handles.
   //
   // TODO(vardhan): For now, we return true for success. Should we define a
   // public error type for serialization? (we shouldn't reuse
   // internal::ValidationError).
   bool Serialize(void* buf, size_t buf_size);
 
-  // Deserializes the given |buf| representing a serialized version of this
-  // struct.  Assumes that the serialized |buf| is valid.
+  // Deserializes the given |buf| of given size |buf_size| representing a
+  // serialized version of this struct. The buffer is validated before
+  // it is deserialized. Returns true on successful deserialization.
   //
-  // TODO(vardhan):
-  //  - Should we pass in how big |buf| is and validate that it is
-  //    <= GetSerializedSize()? If so, should this validation happen all the
-  //    time?
-  //  - Deserialize() will CHECK-fail if you try to deserialize something with
-  //    a bad offset, etc.  For IPC, we |Validate()| before running
-  //    deserialization if we want safety, but we probably want a recoverable
-  //    error for this API.
-  //  - What's the validation story?
-  void Deserialize(void* buf);
+  // TODO(vardhan):  Recover the validation error if there is one?
+  bool Deserialize(void* buf, size_t buf_size);
 
 {%  if struct|is_cloneable_kind %}
   {{struct.name}}Ptr Clone() const;
 {%- endif %}
   bool Equals(const {{struct.name}}& other) const;
 
 {#--- Struct members #}
 {%  for field in struct.fields %}
 {%-   set type = field.kind|cpp_wrapper_type %}
 {%-   set name = field.name %}
   {{type}} {{name}};
 {%- endfor %}
 };
 
 {#--- Enum Operators #}
 {% from "enum_macros.tmpl" import global_enum_operators_decl -%}
 {%- for enum in struct.enums %}
   {{global_enum_operators_decl(enum, class_name=struct.name)}}
 {%- endfor %}