WaveShaperNode should copy its curve.

third_party/WebKit/Source/modules/webaudio/WaveShaperProcessor.cpp

 /*
  * Copyright (C) 2011, Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1.  Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 33 matching lines @@
 std::unique_ptr<AudioDSPKernel> WaveShaperProcessor::createKernel()
 {
     return wrapUnique(new WaveShaperDSPKernel(this));
 }
 
 void WaveShaperProcessor::setCurve(DOMFloat32Array* curve)
 {
     // This synchronizes with process().
     MutexLocker processLocker(m_processLock);
 
-    m_curve = curve;
+    // Copy the curve data, if any, to our internal buffer.
+    if (!curve) {
+        m_curve = nullptr;
+        return;
+    }
+
+    m_curve = wrapUnique(new Vector<float>(curve->length()));
+    memcpy(m_curve->data(), curve->data(), sizeof(float)*curve->length());
 }
 
 void WaveShaperProcessor::setOversample(OverSampleType oversample)
 {
     // This synchronizes with process().
     MutexLocker processLocker(m_processLock);
 
     m_oversample = oversample;
 
     if (oversample != OverSampleNone) {
@@ skipping 23 matching lines @@
         for (unsigned i = 0; i < m_kernels.size(); ++i)
             m_kernels[i]->process(source->channel(i)->data(), destination->channel(i)->mutableData(), framesToProcess);
     } else {
         // Too bad - the tryLock() failed. We must be in the middle of a setCurve() call.
         destination->zero();
     }
 }
 
 } // namespace blink