Pepper takes ownership of a mailbox before passing it to the texture layer.

content/renderer/pepper/pepper_plugin_instance_impl.h

Index: content/renderer/pepper/pepper_plugin_instance_impl.h
diff --git a/content/renderer/pepper/pepper_plugin_instance_impl.h b/content/renderer/pepper/pepper_plugin_instance_impl.h
index da461798a5502d85b77b040a6e0bbc80c3ec0cb0..5c9b3236c03bd50a061248caac49773eaf0b6947 100644
--- a/content/renderer/pepper/pepper_plugin_instance_impl.h
+++ b/content/renderer/pepper/pepper_plugin_instance_impl.h
@@ -201,6 +201,10 @@ class CONTENT_EXPORT PepperPluginInstanceImpl
   // rendering up to an offscreen SwapBuffers are visible.
   void CommitBackingTexture();
 
+  // Takes ownership of the front buffer of |bound_graphics_3d_| and passes it
+  // to |texture_layer_|.
+  void PassTextureFromGraphics3DToTextureLayer();
+
   // Called when the out-of-process plugin implementing this instance crashed.
   void InstanceCrashed();