[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/core/html/ImageData.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 209 matching lines @@
         ImageData::imageDataStorageFormat(colorSettings->storageFormat());
   }
   DOMArrayBufferView* dataArray =
       allocateAndValidateDataArray(4 * static_cast<unsigned>(size.width()) *
                                        static_cast<unsigned>(size.height()),
                                    storageFormat);
   return dataArray ? new ImageData(size, dataArray, colorSettings) : nullptr;
 }
 
 ImageData* ImageData::create(const IntSize& size,
-                             DOMArrayBufferView* dataArray,
+                             NotShared<DOMArrayBufferView> dataArray,
                              const ImageDataColorSettings* colorSettings) {
   if (!ImageData::validateConstructorArguments(kParamSize | kParamData, &size,
-                                               0, 0, dataArray, colorSettings))
+                                               0, 0, dataArray.view(),
+                                               colorSettings))
     return nullptr;
-  return new ImageData(size, dataArray, colorSettings);
+  return new ImageData(size, dataArray.view(), colorSettings);
 }
 
 ImageData* ImageData::create(unsigned width,
                              unsigned height,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                nullptr, &exceptionState))
     return nullptr;
 
   DOMArrayBufferView* byteArray = allocateAndValidateDataArray(
       4 * width * height, kUint8ClampedArrayStorageFormat, &exceptionState);
   return byteArray ? new ImageData(IntSize(width, height), byteArray) : nullptr;
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
+ImageData* ImageData::create(NotShared<DOMUint8ClampedArray> data,
                              unsigned width,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamData | kParamWidth,
-                                               nullptr, width, 0, data, nullptr,
-                                               &exceptionState))
+                                               nullptr, width, 0, data.view(),
+                                               nullptr, &exceptionState))
     return nullptr;
 
-  unsigned height = data->length() / (width * 4);
-  return new ImageData(IntSize(width, height), data);
+  unsigned height = data.view()->length() / (width * 4);
+  return new ImageData(IntSize(width, height), data.view());
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
+ImageData* ImageData::create(NotShared<DOMUint8ClampedArray> data,
                              unsigned width,
                              unsigned height,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(
-          kParamData | kParamWidth | kParamHeight, nullptr, width, height, data,
-          nullptr, &exceptionState))
+          kParamData | kParamWidth | kParamHeight, nullptr, width, height,
+          data.view(), nullptr, &exceptionState))
     return nullptr;
 
-  return new ImageData(IntSize(width, height), data);
+  return new ImageData(IntSize(width, height), data.view());
 }
 
 ImageData* ImageData::createImageData(
     unsigned width,
     unsigned height,
     const ImageDataColorSettings& colorSettings,
     ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                &colorSettings, &exceptionState))
@@ skipping 15 matching lines @@
                                       unsigned height,
                                       ImageDataColorSettings& colorSettings,
                                       ExceptionState& exceptionState) {
   DOMArrayBufferView* bufferView = nullptr;
   // When pixels data is provided, we need to override the storage format of
   // ImageDataColorSettings with the one that matches the data type of the
   // pixels.
   String storageFormatName;
 
   if (data.isUint8ClampedArray()) {
-    bufferView = data.getAsUint8ClampedArray();
+    bufferView = data.getAsUint8ClampedArray().view();
     storageFormatName = kUint8ClampedArrayStorageFormatName;
   } else if (data.isUint16Array()) {
-    bufferView = data.getAsUint16Array();
+    bufferView = data.getAsUint16Array().view();
     storageFormatName = kUint16ArrayStorageFormatName;
   } else if (data.isFloat32Array()) {
-    bufferView = data.getAsFloat32Array();
+    bufferView = data.getAsFloat32Array().view();
     storageFormatName = kFloat32ArrayStorageFormatName;
   } else {
     NOTREACHED();
   }
 
   if (storageFormatName != colorSettings.storageFormat())
     colorSettings.setStorageFormat(storageFormatName);
 
   if (!ImageData::validateConstructorArguments(
           kParamData | kParamWidth | kParamHeight, nullptr, width, height,
@@ skipping 429 matching lines @@
       SECURITY_CHECK(static_cast<unsigned>(size.width() * size.height() * 4) <=
                      m_dataF32->length());
       break;
 
     default:
       NOTREACHED();
   }
 }
 
 }  // namespace blink