[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/core/html/ImageData.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 187 matching lines @@
     return nullptr;
 
   DOMUint8ClampedArray* byteArray =
       DOMUint8ClampedArray::createOrNull(dataSize.ValueOrDie());
   if (!byteArray)
     return nullptr;
 
   return new ImageData(size, byteArray);
 }
 
-ImageData* ImageData::create(const IntSize& size,
-                             DOMUint8ClampedArray* byteArray) {
+ImageData* ImageData::create(
+    const IntSize& size,
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, nullptr))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(kParamSize | kParamData, &size,
-                                               0, 0, byteArray))
+                                               0, 0, data))
     return nullptr;
-  return new ImageData(size, byteArray);
+  return new ImageData(size, data);
 }
 
-ImageData* ImageData::create(const IntSize& size,
-                             DOMUint8ClampedArray* byteArray,
-                             const String& colorSpace) {
+ImageData* ImageData::create(
+    const IntSize& size,
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared,
+    const String& colorSpace) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, nullptr))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(
-          kParamSize | kParamData | kParamColorSpace, &size, 0, 0, byteArray,
+          kParamSize | kParamData | kParamColorSpace, &size, 0, 0, data,
           &colorSpace))
     return nullptr;
-  return new ImageData(size, byteArray, colorSpace);
+  return new ImageData(size, data, colorSpace);
 }
 
 ImageData* ImageData::create(unsigned width,
                              unsigned height,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                nullptr, &exceptionState))
     return nullptr;
   DOMUint8ClampedArray* byteArray =
       ImageData::allocateAndValidateUint8ClampedArray(4 * width * height,
                                                       &exceptionState);
   return byteArray ? new ImageData(IntSize(width, height), byteArray) : nullptr;
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
-                             unsigned width,
-                             ExceptionState& exceptionState) {
+ImageData* ImageData::create(
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared,
+    unsigned width,
+    ExceptionState& exceptionState) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, &exceptionState))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(kParamData | kParamWidth,
                                                nullptr, width, 0, data, nullptr,
                                                &exceptionState))
     return nullptr;
   unsigned height = data->length() / (width * 4);
   return new ImageData(IntSize(width, height), data);
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
-                             unsigned width,
-                             unsigned height,
-                             ExceptionState& exceptionState) {
+ImageData* ImageData::create(
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared,
+    unsigned width,
+    unsigned height,
+    ExceptionState& exceptionState) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, &exceptionState))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(
           kParamData | kParamWidth | kParamHeight, nullptr, width, height, data,
           nullptr, &exceptionState))
     return nullptr;
   return new ImageData(IntSize(width, height), data);
 }
 
 ImageData* ImageData::createImageData(unsigned width,
                                       unsigned height,
                                       String colorSpace,
                                       ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(
           kParamWidth | kParamHeight | kParamColorSpace, nullptr, width, height,
           nullptr, &colorSpace, &exceptionState))
     return nullptr;
 
   DOMUint8ClampedArray* byteArray =
       ImageData::allocateAndValidateUint8ClampedArray(4 * width * height,
                                                       &exceptionState);
   return byteArray
              ? new ImageData(IntSize(width, height), byteArray, colorSpace)
              : nullptr;
 }
 
-ImageData* ImageData::createImageData(DOMUint8ClampedArray* data,
-                                      unsigned width,
-                                      String colorSpace,
-                                      ExceptionState& exceptionState) {
+ImageData* ImageData::createImageData(
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared,
+    unsigned width,
+    String colorSpace,
+    ExceptionState& exceptionState) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, &exceptionState))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(
           kParamData | kParamWidth | kParamColorSpace, nullptr, width, 0, data,
           &colorSpace, &exceptionState))
     return nullptr;
   unsigned height = data->length() / (width * 4);
   return new ImageData(IntSize(width, height), data, colorSpace);
 }
 
-ImageData* ImageData::createImageData(DOMUint8ClampedArray* data,
-                                      unsigned width,
-                                      unsigned height,
-                                      String colorSpace,
-                                      ExceptionState& exceptionState) {
+ImageData* ImageData::createImageData(
+    const MaybeShared<DOMUint8ClampedArray>& maybeShared,
+    unsigned width,
+    unsigned height,
+    String colorSpace,
+    ExceptionState& exceptionState) {
+  if (!ImageData::validateDataArgumentIsNotShared(maybeShared, &exceptionState))
+    return nullptr;
+  DOMUint8ClampedArray* data = maybeShared.viewNotShared();
   if (!ImageData::validateConstructorArguments(
           kParamData | kParamWidth | kParamHeight | kParamColorSpace, nullptr,
           width, height, data, &colorSpace, &exceptionState))
     return nullptr;
   return new ImageData(IntSize(width, height), data, colorSpace);
 }
 
 ScriptPromise ImageData::createImageBitmap(ScriptState* scriptState,
                                            EventTarget& eventTarget,
                                            Optional<IntRect> cropRect,
@@ skipping 89 matching lines @@
     : m_size(size),
       m_colorSpace(getImageDataColorSpace(colorSpaceName)),
       m_data(byteArray) {
   DCHECK_GE(size.width(), 0);
   DCHECK_GE(size.height(), 0);
   SECURITY_CHECK(static_cast<unsigned>(size.width() * size.height() * 4) <=
                  m_data->length());
 }
 
 }  // namespace blink