[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/core/mojo/MojoHandle.cpp

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/mojo/MojoHandle.h"
 
 #include "bindings/core/v8/ArrayBufferOrArrayBufferView.h"
 #include "bindings/core/v8/ScriptState.h"
 #include "core/dom/DOMArrayBuffer.h"
 #include "core/dom/DOMArrayBufferView.h"
@@ skipping 43 matching lines @@
       handles.begin(), handles.end(), raw_handles.begin(),
       [](MojoHandle* handle) { return handle->handle_.release().value(); });
 
   const void* bytes = nullptr;
   uint32_t num_bytes = 0;
   if (buffer.isArrayBuffer()) {
     DOMArrayBuffer* array = buffer.getAsArrayBuffer();
     bytes = array->Data();
     num_bytes = array->ByteLength();
   } else {
-    DOMArrayBufferView* view = buffer.getAsArrayBufferView();
+    DOMArrayBufferView* view = buffer.getAsArrayBufferView().View();
     bytes = view->BaseAddress();
     num_bytes = view->byteLength();
   }
 
   return MojoWriteMessage(handle_->value(), bytes, num_bytes,
                           raw_handles.Data(), raw_handles.size(),
                           MOJO_WRITE_MESSAGE_FLAG_NONE);
 }
 
 void MojoHandle::readMessage(const MojoReadMessageFlags& flags_dict,
@@ skipping 35 matching lines @@
   if (options_dict.allOrNone())
     flags |= MOJO_WRITE_DATA_FLAG_ALL_OR_NONE;
 
   const void* elements = nullptr;
   uint32_t num_bytes = 0;
   if (buffer.isArrayBuffer()) {
     DOMArrayBuffer* array = buffer.getAsArrayBuffer();
     elements = array->Data();
     num_bytes = array->ByteLength();
   } else {
-    DOMArrayBufferView* view = buffer.getAsArrayBufferView();
+    DOMArrayBufferView* view = buffer.getAsArrayBufferView().View();
     elements = view->BaseAddress();
     num_bytes = view->byteLength();
   }
 
   MojoResult result =
       MojoWriteData(handle_->value(), elements, &num_bytes, flags);
   result_dict.setResult(result);
   result_dict.setNumBytes(result == MOJO_RESULT_OK ? num_bytes : 0);
 }
 
@@ skipping 27 matching lines @@
   if (options_dict.peek())
     flags |= MOJO_READ_DATA_FLAG_PEEK;
 
   void* elements = nullptr;
   unsigned num_bytes = 0;
   if (buffer.isArrayBuffer()) {
     DOMArrayBuffer* array = buffer.getAsArrayBuffer();
     elements = array->Data();
     num_bytes = array->ByteLength();
   } else {
-    DOMArrayBufferView* view = buffer.getAsArrayBufferView();
+    DOMArrayBufferView* view = buffer.getAsArrayBufferView().View();
     elements = view->BaseAddress();
     num_bytes = view->byteLength();
   }
 
   MojoResult result =
       MojoReadData(handle_->value(), elements, &num_bytes, flags);
   result_dict.setResult(result);
   result_dict.setNumBytes(result == MOJO_RESULT_OK ? num_bytes : 0);
 }
 
@@ skipping 26 matching lines @@
   mojo::Handle handle;
   MojoResult result = MojoDuplicateBufferHandle(handle_->value(), &options,
                                                 handle.mutable_value());
   result_dict.setResult(result);
   if (result == MOJO_RESULT_OK) {
     result_dict.setHandle(MojoHandle::Create(mojo::MakeScopedHandle(handle)));
   }
 }
 
 }  // namespace blink