WaveShaperNode should copy its curve.

third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp

Index: third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp
diff --git a/third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp b/third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp
index c0046ed6be52bd0d75837b9971810c644c701c62..e4d9ba1e094d483e6aca15a411df168e28104339 100644
--- a/third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp
+++ b/third_party/WebKit/Source/modules/webaudio/WaveShaperNode.cpp
@@ -76,7 +76,16 @@ void WaveShaperNode::setCurve(DOMFloat32Array* curve, ExceptionState& exceptionS
 
 DOMFloat32Array* WaveShaperNode::curve()
 {
-    return getWaveShaperProcessor()->curve();
+    Vector<float>* curve = getWaveShaperProcessor()->curve();
+    if (!curve)
+        return nullptr;
+
+    unsigned size = curve->size();
+    RefPtr<WTF::Float32Array> newCurve = WTF::Float32Array::create(size);
+
+    memcpy(newCurve->data(), curve->data(), sizeof(float) * size);
+
+    return DOMFloat32Array::create(newCurve.release());
 }
 
 void WaveShaperNode::setOversample(const String& type)