Discard SSL certificates for non-committed entries to save memory.

content/public/browser/ssl_status.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_SSL_STATUS_H_
 #define CONTENT_PUBLIC_BROWSER_SSL_STATUS_H_
 
 #include <stdint.h>
 
 #include <vector>
@@ skipping 56 matching lines @@
            cert_status == status.cert_status &&
            security_bits == status.security_bits &&
            key_exchange_group == status.key_exchange_group &&
            connection_status == status.connection_status &&
            content_status == status.content_status &&
            sct_statuses == status.sct_statuses &&
            pkp_bypassed == status.pkp_bypassed;
   }
 
   bool initialized;
+  // Note: this is only valid for committed entries. For other entries in the
+  // NavigationController (e.g. previous entries) we prune the certificate to
+  // save memory.
   scoped_refptr<net::X509Certificate> certificate;
   net::CertStatus cert_status;
   int security_bits;
   uint16_t key_exchange_group;
   int connection_status;
   // A combination of the ContentStatusFlags above.
   int content_status;
   // The validation statuses of the Signed Certificate Timestamps (SCTs)
   // of Certificate Transparency (CT) that were served with the
   // main resource.
   std::vector<net::ct::SCTVerifyStatus> sct_statuses;
   // True if PKP was bypassed due to a local trust anchor.
   bool pkp_bypassed;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_SSL_STATUS_H_