Speculative nullptr dereference fix for HarfBuzz face creation

third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp

Index: third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp
diff --git a/third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp b/third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp
index a83e979194b5edc3bc6d67e75bf7172ce8452ecb..60dfefe02db50c1a7ae8820fc30b54489b588be9 100644
--- a/third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp
+++ b/third_party/WebKit/Source/platform/fonts/shaping/HarfBuzzFace.cpp
@@ -332,9 +332,10 @@ hb_face_t* HarfBuzzFace::createFace()
         zeroCopySuccessHistogram,
         ("Blink.Fonts.HarfBuzzFaceZeroCopyAccess"));
     SkTypeface* typeface = m_platformData->typeface();
+    CHECK(typeface);
     int ttcIndex = 0;
     SkStreamAsset* typefaceStream = typeface->openStream(&ttcIndex);
-    if (typefaceStream->getMemoryBase()) {
+    if (typefaceStream && typefaceStream->getMemoryBase()) {
         std::unique_ptr<hb_blob_t, void(*)(hb_blob_t*)> faceBlob(hb_blob_create(
             reinterpret_cast<const char*>(typefaceStream->getMemoryBase()),
             typefaceStream->getLength(),