Add drawImage() originClean() getSecurityOrigin() to OffscreenCanvas

third_party/WebKit/Source/bindings/core/v8/ScriptValueSerializer.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "bindings/core/v8/ScriptValueSerializer.h"
 
 #include "bindings/core/v8/Transferables.h"
 #include "bindings/core/v8/V8ArrayBuffer.h"
 #include "bindings/core/v8/V8ArrayBufferView.h"
 #include "bindings/core/v8/V8Blob.h"
@@ skipping 2262 matching lines @@
         if (result.IsEmpty())
             return false;
         m_arrayBuffers[index] = result;
     }
     *object = result;
     return true;
 }
 
 bool ScriptValueDeserializer::tryGetTransferredOffscreenCanvas(uint32_t index, uint32_t width, uint32_t height, uint32_t id, v8::Local<v8::Value>* object)
 {
-    OffscreenCanvas* offscreenCanvas = OffscreenCanvas::create(width, height);
+    ExecutionContext* executionContext = ScriptState::current(v8::Isolate::GetCurrent())->getExecutionContext();

[haraken, 2016/04/28 17:40:41]

Use m_reader.scriptState() instead.

(Please don't use ScriptState::current unless you understand what it returns --
although it will return a correct context in this specific case.)

[xlai (Olivia), 2016/04/28 18:38:16]

Oops I thought ScriptState::current() can be used as long as it's in binding
layer. Had changed this part accordingly.

+    OffscreenCanvas* offscreenCanvas = OffscreenCanvas::create(executionContext, width, height);
     offscreenCanvas->setAssociatedCanvasId(id);
     *object = toV8(offscreenCanvas, m_reader.getScriptState());
     if ((*object).IsEmpty())
         return false;
     return true;
 }
 
 bool ScriptValueDeserializer::tryGetObjectFromObjectReference(uint32_t reference, v8::Local<v8::Value>* object)
 {
     if (reference >= m_objectPool.size())
@@ skipping 65 matching lines @@
         return false;
     uint32_t objectReference = m_openCompositeReferenceStack[m_openCompositeReferenceStack.size() - 1];
     m_openCompositeReferenceStack.shrink(m_openCompositeReferenceStack.size() - 1);
     if (objectReference >= m_objectPool.size())
         return false;
     *object = m_objectPool[objectReference];
     return true;
 }
 
 } // namespace blink