Ensure that the ppp_class_data is freed when a PluginObject isn't created

content/renderer/pepper/plugin_object.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper/plugin_object.h"
 
 #include <stdint.h>
 
 #include "base/bind.h"
 #include "base/logging.h"
@@ skipping 61 matching lines @@
 // static
 PP_Var PluginObject::Create(PepperPluginInstanceImpl* instance,
                             const PPP_Class_Deprecated* ppp_class,
                             void* ppp_class_data) {
   V8VarConverter var_converter(instance->pp_instance(),
                                V8VarConverter::kAllowObjectVars);
   PepperTryCatchVar try_catch(instance, &var_converter, NULL);
   // If the V8 context is empty, we may be in the process of tearing down the
   // frame and may not have a valid isolate (in particular due to re-entrancy).
   // We shouldn't try to call gin::CreateHandle.
-  if (try_catch.GetContext().IsEmpty())
+  if (try_catch.GetContext().IsEmpty()) {
+    ppp_class->Deallocate(ppp_class_data);
     return PP_MakeUndefined();
+  }
   gin::Handle<PluginObject> object =
       gin::CreateHandle(instance->GetIsolate(),
                         new PluginObject(instance, ppp_class, ppp_class_data));
   ScopedPPVar result = try_catch.FromV8(object.ToV8());
   DCHECK(!try_catch.HasException());
   return result.Release();
 }
 
 v8::Local<v8::Value> PluginObject::GetNamedProperty(
     v8::Isolate* isolate,
@@ skipping 187 matching lines @@
     return function_template;
   function_template =
       gin::CreateFunctionTemplate(
           isolate, base::Bind(&PluginObject::Call, weak_factory_.GetWeakPtr(),
                               name));
   template_cache_.Set(name, function_template);
   return function_template;
 }
 
 }  // namespace content