WaveShaperNode should copy its curve.

third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp

 /*
  * Copyright (C) 2011, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1.  Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 58 matching lines @@
                 curve->length(),
                 2));
         return;
     }
 
     getWaveShaperProcessor()->setCurve(curve);
 }
 
 DOMFloat32Array* WaveShaperNode::curve()
 {
-    return getWaveShaperProcessor()->curve();
+    Vector<float>* curve = getWaveShaperProcessor()->curve();
+    if (!curve)
+        return nullptr;
+
+    unsigned size = curve->size();
+    RefPtr<WTF::Float32Array> newCurve = WTF::Float32Array::create(size);
+
+    memcpy(newCurve->data(), curve->data(), sizeof(float) * size);
+
+    return DOMFloat32Array::create(newCurve.release());
 }
 
 void WaveShaperNode::setOversample(const String& type)
 {
     ASSERT(isMainThread());
 
     // This is to synchronize with the changes made in
     // AudioBasicProcessorNode::checkNumberOfChannelsForInput() where we can
     // initialize() and uninitialize().
     BaseAudioContext::AutoLocker contextLocker(context());
@@ skipping 19 matching lines @@
     case WaveShaperProcessor::OverSample4x:
         return "4x";
     default:
         ASSERT_NOT_REACHED();
         return "none";
     }
 }
 
 } // namespace blink