Merge 223735 "Fix OOB read when parsing protocol-relative URLs"

url/url_canon_relative.cc

Index: url/url_canon_relative.cc
===================================================================
--- url/url_canon_relative.cc	(revision 224779)
+++ url/url_canon_relative.cc	(working copy)
@@ -372,9 +372,8 @@
   // Parse the relative URL, just like we would for anything following a
   // scheme.
   url_parse::Parsed relative_parsed;  // Everything but the scheme is valid.
-  url_parse::ParseAfterScheme(&relative_url[relative_component.begin],
-                              relative_component.len, relative_component.begin,
-                              &relative_parsed);
+  url_parse::ParseAfterScheme(relative_url, relative_component.end(),
+                              relative_component.begin, &relative_parsed);
 
   // Now we can just use the replacement function to replace all the necessary
   // parts of the old URL with the new one.