Fix a fuzzer crash in VideoFramePool

media/base/video_frame_pool.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "media/base/video_frame_pool.h"
 
 #include <list>
 
 #include "base/bind.h"
 #include "base/macros.h"
@@ skipping 64 matching lines @@
         frame = pool_frame;
         frame->set_timestamp(timestamp);
         frame->metadata()->Clear();
         break;
       }
   }
 
   if (!frame.get()) {
     frame = VideoFrame::CreateZeroInitializedFrame(
         format, coded_size, visible_rect, natural_size, timestamp);
-    LOG_IF(ERROR, !frame.get()) << "Failed to create a video frame";
+    // This can happen if the arguments are not valid.
+    if (!frame) {
+      LOG(ERROR) << "Failed to create a video frame";
+      return nullptr;
+    }
   }
 
   scoped_refptr<VideoFrame> wrapped_frame = VideoFrame::WrapVideoFrame(
       frame, frame->format(), frame->visible_rect(), frame->natural_size());
   wrapped_frame->AddDestructionObserver(
       base::Bind(&VideoFramePool::PoolImpl::FrameReleased, this, frame));
   return wrapped_frame;
 }
 
 void VideoFramePool::PoolImpl::Shutdown() {
@@ skipping 26 matching lines @@
     base::TimeDelta timestamp) {
   return pool_->CreateFrame(format, coded_size, visible_rect, natural_size,
                             timestamp);
 }
 
 size_t VideoFramePool::GetPoolSizeForTesting() const {
   return pool_->GetPoolSizeForTesting();
 }
 
 }  // namespace media