[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/modules/canvas2d/BaseRenderingContext2D.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/canvas2d/BaseRenderingContext2D.h"
 
 #include "bindings/core/v8/ExceptionMessages.h"
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/ScriptState.h"
 #include "core/css/cssom/CSSURLImageValue.h"
 #include "core/css/parser/CSSParser.h"
+#include "core/dom/NotShared.h"
 #include "core/frame/ImageBitmap.h"
 #include "core/html/HTMLCanvasElement.h"
 #include "core/html/HTMLImageElement.h"
 #include "core/html/HTMLVideoElement.h"
 #include "core/html/ImageData.h"
 #include "core/offscreencanvas/OffscreenCanvas.h"
 #include "core/svg/SVGImageElement.h"
 #include "modules/canvas2d/CanvasGradient.h"
 #include "modules/canvas2d/CanvasPattern.h"
 #include "modules/canvas2d/CanvasStyle.h"
@@ skipping 1581 matching lines @@
     return result;
   }
 
   WTF::ArrayBufferContents contents;
   if (!buffer->GetImageData(kUnmultiplied, image_data_rect, contents)) {
     exception_state.ThrowRangeError("Out of memory at ImageData creation");
     return nullptr;
   }
 
   DOMArrayBuffer* array_buffer = DOMArrayBuffer::Create(contents);
-  return ImageData::Create(image_data_rect.size(),
-                           DOMUint8ClampedArray::Create(
-                               array_buffer, 0, array_buffer->ByteLength()));
+  return ImageData::Create(
+      image_data_rect.size(),
+      NotShared<DOMUint8ClampedArray>(DOMUint8ClampedArray::Create(
+          array_buffer, 0, array_buffer->ByteLength())));
 }
 
 void BaseRenderingContext2D::putImageData(ImageData* data,
                                           int dx,
                                           int dy,
                                           ExceptionState& exception_state) {
   putImageData(data, dx, dy, 0, 0, data->width(), data->height(),
                exception_state);
 }
 
@@ skipping 422 matching lines @@
       ExpensiveCanvasHeuristicParameters::kShadowFixedCost[index] *
           usage_counters_.num_blurred_shadows +
       ExpensiveCanvasHeuristicParameters::
               kShadowVariableCostPerAreaTimesShadowBlurSquared[index] *
           usage_counters_.bounding_box_area_times_shadow_blur_squared;
 
   return basic_cost_of_draw_calls + fill_type_adjustment + shadow_adjustment;
 }
 
 }  // namespace blink