Verify FormatType in ScopedClipboardWriter::WritePickledData.

ui/base/clipboard/scoped_clipboard_writer.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file implements the ScopedClipboardWriter class. Documentation on its
 // purpose can be found in our header. Documentation on the format of the
 // parameters for each clipboard target can be found in clipboard.h.
 
 #include "ui/base/clipboard/scoped_clipboard_writer.h"
 
@@ skipping 73 matching lines @@
   html.append("</a>");
   WriteHTML(base::UTF8ToUTF16(html), std::string());
 }
 
 void ScopedClipboardWriter::WriteWebSmartPaste() {
   objects_[Clipboard::CBF_WEBKIT] = Clipboard::ObjectMapParams();
 }
 
 void ScopedClipboardWriter::WritePickledData(
     const Pickle& pickle, const Clipboard::FormatType& format) {
+  // |format| may originate from the renderer, so sanity check it.
+  if (!Clipboard::IsRegisteredFormatType(format))
+    return;
+
   std::string format_string = format.Serialize();
   Clipboard::ObjectMapParam format_parameter(format_string.begin(),
                                              format_string.end());
   Clipboard::ObjectMapParam data_parameter;
 
   data_parameter.resize(pickle.size());
   memcpy(const_cast<char*>(&data_parameter.front()),
          pickle.data(), pickle.size());
 
   Clipboard::ObjectMapParams parameters;
@@ skipping 17 matching lines @@
   objects_[Clipboard::CBF_TEXT] = parameters;
 
   if (is_url) {
     url_text_ = utf8_text;
   } else {
     url_text_.clear();
   }
 }
 
 }  // namespace ui