Not for commit: crash GPU process in glCreateGpuMemoryBufferImageCHROMIUM.

content/gpu/gpu_child_thread.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/gpu/gpu_child_thread.h"
 
 #include <stddef.h>
 #include <utility>
 
 #include "base/bind.h"
@@ skipping 92 matching lines @@
   }
 
  protected:
   ~GpuMemoryBufferMessageFilter() override {}
 
   void OnCreateGpuMemoryBuffer(
       const GpuMsg_CreateGpuMemoryBuffer_Params& params) {
     TRACE_EVENT2("gpu", "GpuMemoryBufferMessageFilter::OnCreateGpuMemoryBuffer",
                  "id", params.id.id, "client_id", params.client_id);
 
+    static int numAllocs = 0;
+
+    if (++numAllocs == 8) {
+      volatile int* crash = 0;
+      *crash = 0xDEADBEEF;
+    }
+
     DCHECK(gpu_memory_buffer_factory_);
     sender_->Send(new GpuHostMsg_GpuMemoryBufferCreated(
         gpu_memory_buffer_factory_->CreateGpuMemoryBuffer(
             params.id, params.size, params.format, params.usage,
             params.client_id, params.surface_handle)));
   }
 
   gpu::GpuMemoryBufferFactory* const gpu_memory_buffer_factory_;
   IPC::Sender* sender_;
 };
@@ skipping 433 matching lines @@
 
 void GpuChildThread::BindProcessControlRequest(
     mojom::ProcessControlRequest request) {
   DVLOG(1) << "GPU: Binding ProcessControl request";
   DCHECK(process_control_);
   process_control_bindings_.AddBinding(process_control_.get(),
                                        std::move(request));
 }
 
 }  // namespace content