Check if ArrayBuffer allocation in ArrayBufferBuilder is successful.

Source/core/fileapi/FileReaderLoader.cpp

 /*
  * Copyright (C) 2010 Google Inc.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 183 matching lines @@
 
     if (m_readType != ReadByClient) {
         // Check that we can cast to unsigned since we have to do
         // so to call ArrayBuffer's create function.
         // FIXME: Support reading more than the current size limit of ArrayBuffer.
         if (initialBufferLength > numeric_limits<unsigned>::max()) {
             failed(FileError::NOT_READABLE_ERR);
             return;
         }
 
-        if (initialBufferLength < 0) {
+        if (initialBufferLength < 0)
             m_rawData = adoptPtr(new ArrayBufferBuilder());
-        } else {
+        else
             m_rawData = adoptPtr(new ArrayBufferBuilder(static_cast<unsigned>(initialBufferLength)));
+
+        if (!m_rawData || !m_rawData->isValid()) {
+            failed(FileError::NOT_READABLE_ERR);
+            return;
+        }
+
+        if (initialBufferLength >= 0) {
             // Total size is known. Set m_rawData to ignore overflowed data.
             m_rawData->setVariableCapacity(false);
         }
-
-        if (!m_rawData) {
-            failed(FileError::NOT_READABLE_ERR);
-            return;
-        }
     }
 
     if (m_client)
         m_client->didStartLoading();
 }
 
 void FileReaderLoader::didReceiveData(const char* data, int dataLength)
 {
     ASSERT(data);
     ASSERT(dataLength > 0);
@@ skipping 166 matching lines @@
     m_stringResult = builder.toString();
 }
 
 void FileReaderLoader::setEncoding(const String& encoding)
 {
     if (!encoding.isEmpty())
         m_encoding = WTF::TextEncoding(encoding);
 }
 
 } // namespace WebCore