[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/modules/mediasource/SourceBuffer.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 341 matching lines @@
 
 void SourceBuffer::appendBuffer(DOMArrayBuffer* data,
                                 ExceptionState& exceptionState) {
   BLINK_SBLOG << __func__ << " this=" << this << " size=" << data->byteLength();
   // Section 3.2 appendBuffer()
   // https://dvcs.w3.org/hg/html-media/raw-file/default/media-source/media-source.html#widl-SourceBuffer-appendBuffer-void-ArrayBufferView-data
   appendBufferInternal(static_cast<const unsigned char*>(data->data()),
                        data->byteLength(), exceptionState);
 }
 
-void SourceBuffer::appendBuffer(DOMArrayBufferView* data,
+void SourceBuffer::appendBuffer(NotShared<DOMArrayBufferView> data,
                                 ExceptionState& exceptionState) {
-  BLINK_SBLOG << __func__ << " this=" << this << " size=" << data->byteLength();
+  BLINK_SBLOG << __func__ << " this=" << this
+              << " size=" << data.view()->byteLength();
   // Section 3.2 appendBuffer()
   // https://dvcs.w3.org/hg/html-media/raw-file/default/media-source/media-source.html#widl-SourceBuffer-appendBuffer-void-ArrayBufferView-data
-  appendBufferInternal(static_cast<const unsigned char*>(data->baseAddress()),
-                       data->byteLength(), exceptionState);
+  appendBufferInternal(
+      static_cast<const unsigned char*>(data.view()->baseAddress()),
+      data.view()->byteLength(), exceptionState);
 }
 
 void SourceBuffer::abort(ExceptionState& exceptionState) {
   BLINK_SBLOG << __func__ << " this=" << this;
   // http://w3c.github.io/media-source/#widl-SourceBuffer-abort-void
   // 1. If this object has been removed from the sourceBuffers attribute of the
   //    parent media source then throw an InvalidStateError exception and abort
   //    these steps.
   // 2. If the readyState attribute of the parent media source is not in the
   //    "open" state then throw an InvalidStateError exception and abort these
@@ skipping 919 matching lines @@
   visitor->trace(m_asyncEventQueue);
   visitor->trace(m_appendBufferAsyncPartRunner);
   visitor->trace(m_removeAsyncPartRunner);
   visitor->trace(m_audioTracks);
   visitor->trace(m_videoTracks);
   EventTargetWithInlineData::trace(visitor);
   SuspendableObject::trace(visitor);
 }
 
 }  // namespace blink