Fix silent truncations when extracting values from CheckedNumeric

gpu/command_buffer/client/gles2_implementation.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // A class to emulate GLES2 over command buffers.
 
 #include "gpu/command_buffer/client/gles2_implementation.h"
 
 #include <GLES2/gl2.h>
 #include <GLES2/gl2ext.h>
@@ skipping 6335 matching lines @@
     }
     total_size += len;
     total_size += 1;  // NULL at the end of each char array.
     if (!total_size.IsValid()) {
       SetGLError(GL_INVALID_VALUE, func_name, "overflow");
       return false;
     }
     header[ii + 1] = len;
   }
   // Pack data into a bucket on the service.
-  helper_->SetBucketSize(kResultBucketId, total_size.ValueOrDefault(0));
+  helper_->SetBucketSize(kResultBucketId,
+                         total_size.template ValueOrDefault<uint32_t>(0));
   size_t offset = 0;
   for (GLsizei ii = 0; ii <= count; ++ii) {
     const char* src =
         (ii == 0) ? reinterpret_cast<const char*>(&header[0]) : str[ii - 1];
     base::CheckedNumeric<size_t> checked_size =
         (ii == 0) ? header_size : static_cast<size_t>(header[ii]);
     if (ii > 0) {
       checked_size += 1;  // NULL in the end.
     }
     if (!checked_size.IsValid()) {
@@ skipping 663 matching lines @@
   cached_extensions_.clear();
 }
 
 // Include the auto-generated part of this file. We split this because it means
 // we can easily edit the non-auto generated parts right here in this file
 // instead of having to edit some template or the code generator.
 #include "gpu/command_buffer/client/gles2_implementation_impl_autogen.h"
 
 }  // namespace gles2
 }  // namespace gpu