CHECK correct context usage in V8ScriptRunner::callFunction

third_party/WebKit/Source/bindings/core/v8/V8LazyEventListener.cpp

 /*
  * Copyright (C) 2006, 2007, 2008, 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 87 matching lines @@
     return v8::Local<v8::Value>();
 
   LocalFrame* frame = toDocument(scriptState->getExecutionContext())->frame();
   if (!frame)
     return v8::Local<v8::Value>();
 
   if (!scriptState->getExecutionContext()->canExecuteScripts(
           AboutToExecuteScript))
     return v8::Local<v8::Value>();
 
+  CHECK(BindingSecurity::shouldAllowAccessToFrame(
+      toDOMWindow(handlerFunction->CreationContext())->toLocalDOMWindow(),
+      frame, BindingSecurity::ErrorReportOption::DoNotReport));
+
   v8::Local<v8::Value> parameters[1] = {jsEvent};
   v8::Local<v8::Value> result;
   if (!V8ScriptRunner::callFunction(handlerFunction, frame->document(),
                                     receiver, WTF_ARRAY_LENGTH(parameters),
                                     parameters, scriptState->isolate())
            .ToLocal(&result))
     return v8::Local<v8::Value>();
   return result;
 }
 
@@ skipping 126 matching lines @@
   AccessControlStatus accessControlStatus = NotSharableCrossOrigin;
   if (message->IsOpaque())
     accessControlStatus = OpaqueResource;
   else if (message->IsSharedCrossOrigin())
     accessControlStatus = SharableCrossOrigin;
 
   executionContext->dispatchErrorEvent(event, accessControlStatus);
 }
 
 }  // namespace blink