[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/core/html/ImageData.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 211 matching lines @@
         ImageData::GetImageDataStorageFormat(color_settings->storageFormat());
   }
   DOMArrayBufferView* data_array =
       AllocateAndValidateDataArray(4 * static_cast<unsigned>(size.Width()) *
                                        static_cast<unsigned>(size.Height()),
                                    storage_format);
   return data_array ? new ImageData(size, data_array, color_settings) : nullptr;
 }
 
 ImageData* ImageData::Create(const IntSize& size,
-                             DOMArrayBufferView* data_array,
+                             NotShared<DOMArrayBufferView> data_array,
                              const ImageDataColorSettings* color_settings) {
-  if (!ImageData::ValidateConstructorArguments(
-          kParamSize | kParamData, &size, 0, 0, data_array, color_settings))
+  if (!ImageData::ValidateConstructorArguments(kParamSize | kParamData, &size,
+                                               0, 0, data_array.View(),
+                                               color_settings))
     return nullptr;
-  return new ImageData(size, data_array, color_settings);
+  return new ImageData(size, data_array.View(), color_settings);
 }
 
 ImageData* ImageData::Create(unsigned width,
                              unsigned height,
                              ExceptionState& exception_state) {
   if (!ImageData::ValidateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                nullptr, &exception_state))
     return nullptr;
 
   DOMArrayBufferView* byte_array = AllocateAndValidateDataArray(
       4 * width * height, kUint8ClampedArrayStorageFormat, &exception_state);
   return byte_array ? new ImageData(IntSize(width, height), byte_array)
                     : nullptr;
 }
 
-ImageData* ImageData::Create(DOMUint8ClampedArray* data,
+ImageData* ImageData::Create(NotShared<DOMUint8ClampedArray> data,
                              unsigned width,
                              ExceptionState& exception_state) {
   if (!ImageData::ValidateConstructorArguments(kParamData | kParamWidth,
-                                               nullptr, width, 0, data, nullptr,
-                                               &exception_state))
+                                               nullptr, width, 0, data.View(),
+                                               nullptr, &exception_state))
     return nullptr;
 
-  unsigned height = data->length() / (width * 4);
-  return new ImageData(IntSize(width, height), data);
+  unsigned height = data.View()->length() / (width * 4);
+  return new ImageData(IntSize(width, height), data.View());
 }
 
-ImageData* ImageData::Create(DOMUint8ClampedArray* data,
+ImageData* ImageData::Create(NotShared<DOMUint8ClampedArray> data,
                              unsigned width,
                              unsigned height,
                              ExceptionState& exception_state) {
   if (!ImageData::ValidateConstructorArguments(
-          kParamData | kParamWidth | kParamHeight, nullptr, width, height, data,
-          nullptr, &exception_state))
+          kParamData | kParamWidth | kParamHeight, nullptr, width, height,
+          data.View(), nullptr, &exception_state))
     return nullptr;
 
-  return new ImageData(IntSize(width, height), data);
+  return new ImageData(IntSize(width, height), data.View());
 }
 
 ImageData* ImageData::createImageData(
     unsigned width,
     unsigned height,
     const ImageDataColorSettings& color_settings,
     ExceptionState& exception_state) {
   if (!ImageData::ValidateConstructorArguments(
           kParamWidth | kParamHeight, nullptr, width, height, nullptr,
           &color_settings, &exception_state))
@@ skipping 15 matching lines @@
                                       unsigned height,
                                       ImageDataColorSettings& color_settings,
                                       ExceptionState& exception_state) {
   DOMArrayBufferView* buffer_view = nullptr;
   // When pixels data is provided, we need to override the storage format of
   // ImageDataColorSettings with the one that matches the data type of the
   // pixels.
   String storage_format_name;
 
   if (data.isUint8ClampedArray()) {
-    buffer_view = data.getAsUint8ClampedArray();
+    buffer_view = data.getAsUint8ClampedArray().View();
     storage_format_name = kUint8ClampedArrayStorageFormatName;
   } else if (data.isUint16Array()) {
-    buffer_view = data.getAsUint16Array();
+    buffer_view = data.getAsUint16Array().View();
     storage_format_name = kUint16ArrayStorageFormatName;
   } else if (data.isFloat32Array()) {
-    buffer_view = data.getAsFloat32Array();
+    buffer_view = data.getAsFloat32Array().View();
     storage_format_name = kFloat32ArrayStorageFormatName;
   } else {
     NOTREACHED();
   }
 
   if (storage_format_name != color_settings.storageFormat())
     color_settings.setStorageFormat(storage_format_name);
 
   if (!ImageData::ValidateConstructorArguments(
           kParamData | kParamWidth | kParamHeight, nullptr, width, height,
@@ skipping 431 matching lines @@
       SECURITY_CHECK(static_cast<unsigned>(size.Width() * size.Height() * 4) <=
                      data_f32_->length());
       break;
 
     default:
       NOTREACHED();
   }
 }
 
 }  // namespace blink