Fix crash when setting invalid URL on content

third_party/WebKit/Source/core/css/CSSImageValue.h

 /*
  * (C) 1999-2003 Lars Knoll (knoll@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2008, 2012 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 13 matching lines @@
 #include "core/CoreExport.h"
 #include "core/css/CSSValue.h"
 #include "platform/CrossOriginAttributeValue.h"
 #include "platform/weborigin/Referrer.h"
 #include "wtf/RefPtr.h"
 
 namespace blink {
 
 class Document;
 class KURL;
-class StyleFetchedImage;
 class StyleImage;
 class LayoutObject;
 
 class CORE_EXPORT CSSImageValue : public CSSValue {
 public:
-    static RawPtr<CSSImageValue> create(const KURL& url, StyleFetchedImage* image = 0)
+    static RawPtr<CSSImageValue> create(const KURL& url, StyleImage* image = 0)
     {
         return create(url.getString(), url, image);
     }
-    static RawPtr<CSSImageValue> create(const String& rawValue, const KURL& url, StyleFetchedImage* image = 0)
+    static RawPtr<CSSImageValue> create(const String& rawValue, const KURL& url, StyleImage* image = 0)
     {
         return create(AtomicString(rawValue), url, image);
     }
-    static RawPtr<CSSImageValue> create(const AtomicString& rawValue, const KURL& url, StyleFetchedImage* image = 0)
+    static RawPtr<CSSImageValue> create(const AtomicString& rawValue, const KURL& url, StyleImage* image = 0)
     {
         return new CSSImageValue(rawValue, url, image);
     }
     static RawPtr<CSSImageValue> create(const AtomicString& absoluteURL)
     {
         return new CSSImageValue(absoluteURL);
     }
     ~CSSImageValue();
 
     bool isCachePending() const { return m_isCachePending; }
-    StyleFetchedImage* cachedImage() const { ASSERT(!isCachePending()); return m_cachedImage.get(); }
-    StyleFetchedImage* cacheImage(Document*, CrossOriginAttributeValue = CrossOriginAttributeNotSet);
+    StyleImage* cachedImage() const { ASSERT(!isCachePending()); return m_cachedImage.get(); }
+    StyleImage* cacheImage(Document*, CrossOriginAttributeValue = CrossOriginAttributeNotSet);
 
     const String& url() const { return m_absoluteURL; }
 
     void setReferrer(const Referrer& referrer) { m_referrer = referrer; }
     const Referrer& referrer() const { return m_referrer; }
 
     void reResolveURL(const Document&);
 
     String customCSSText() const;
 
     bool hasFailedOrCanceledSubresources() const;
 
     bool equals(const CSSImageValue&) const;
 
     bool knownToBeOpaque(const LayoutObject&) const;
 
     RawPtr<CSSImageValue> valueWithURLMadeAbsolute()
     {
         return create(KURL(ParsedURLString, m_absoluteURL), m_cachedImage.get());
     }
 
     void setInitiator(const AtomicString& name) { m_initiatorName = name; }
 
     DECLARE_TRACE_AFTER_DISPATCH();
     void restoreCachedResourceIfNeeded(Document&) const;
 
 private:
-    CSSImageValue(const AtomicString& rawValue, const KURL&, StyleFetchedImage*);
+    CSSImageValue(const AtomicString& rawValue, const KURL&, StyleImage*);
     CSSImageValue(const AtomicString& absoluteURL);
 
     AtomicString m_relativeURL;
     AtomicString m_absoluteURL;
     Referrer m_referrer;
     bool m_isCachePending;
-    Member<StyleFetchedImage> m_cachedImage;
+    Member<StyleImage> m_cachedImage;
     AtomicString m_initiatorName;
 };
 
 DEFINE_CSS_VALUE_TYPE_CASTS(CSSImageValue, isImageValue());
 
 } // namespace blink
 
 #endif // CSSImageValue_h