[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/core/html/ImageData.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 187 matching lines @@
 
   DOMUint8ClampedArray* byteArray =
       DOMUint8ClampedArray::createOrNull(dataSize.ValueOrDie());
   if (!byteArray)
     return nullptr;
 
   return new ImageData(size, byteArray);
 }
 
 ImageData* ImageData::create(const IntSize& size,
-                             DOMUint8ClampedArray* byteArray) {
+                             const NotShared<DOMUint8ClampedArray>& byteArray) {
   if (!ImageData::validateConstructorArguments(kParamSize | kParamData, &size,
-                                               0, 0, byteArray))
+                                               0, 0, byteArray.view()))
     return nullptr;
 
-  return new ImageData(size, byteArray);
+  return new ImageData(size, byteArray.view());
 }
 
 ImageData* ImageData::create(unsigned width,
                              unsigned height,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                &exceptionState))
     return nullptr;
 
   DOMArrayBufferView* byteArray = allocateAndValidateDataArray(
       4 * width * height, kUint8ClampedArrayStorageFormat, &exceptionState);
   return byteArray ? new ImageData(IntSize(width, height), byteArray) : nullptr;
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
+ImageData* ImageData::create(const NotShared<DOMUint8ClampedArray>& data,
                              unsigned width,
                              ExceptionState& exceptionState) {
-  if (!ImageData::validateConstructorArguments(
-          kParamData | kParamWidth, nullptr, width, 0, data, &exceptionState))
+  if (!ImageData::validateConstructorArguments(kParamData | kParamWidth,
+                                               nullptr, width, 0, data.view(),
+                                               &exceptionState))
     return nullptr;
 
-  unsigned height = data->length() / (width * 4);
-  return new ImageData(IntSize(width, height), data);
+  unsigned height = data.view()->length() / (width * 4);
+  return new ImageData(IntSize(width, height), data.view());
 }
 
-ImageData* ImageData::create(DOMUint8ClampedArray* data,
+ImageData* ImageData::create(const NotShared<DOMUint8ClampedArray>& data,
                              unsigned width,
                              unsigned height,
                              ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(
-          kParamData | kParamWidth | kParamHeight, nullptr, width, height, data,
-          &exceptionState))
+          kParamData | kParamWidth | kParamHeight, nullptr, width, height,
+          data.view(), &exceptionState))
     return nullptr;
 
-  return new ImageData(IntSize(width, height), data);
+  return new ImageData(IntSize(width, height), data.view());
 }
 
 ImageData* ImageData::createImageData(
     unsigned width,
     unsigned height,
     const ImageDataColorSettings& colorSettings,
     ExceptionState& exceptionState) {
   if (!ImageData::validateConstructorArguments(kParamWidth | kParamHeight,
                                                nullptr, width, height, nullptr,
                                                &exceptionState))
@@ skipping 11 matching lines @@
 }
 
 ImageData* ImageData::createImageData(
     ImageDataArray& data,
     unsigned width,
     unsigned height,
     const ImageDataColorSettings& colorSettings,
     ExceptionState& exceptionState) {
   DOMArrayBufferView* bufferView = nullptr;
   if (data.isUint8ClampedArray())
-    bufferView = data.getAsUint8ClampedArray();
+    bufferView = data.getAsUint8ClampedArray().view();
   else if (data.isUint16Array())
-    bufferView = data.getAsUint16Array();
+    bufferView = data.getAsUint16Array().view();
   else if (data.isFloat32Array())
-    bufferView = data.getAsFloat32Array();
+    bufferView = data.getAsFloat32Array().view();
   else
     NOTREACHED();
 
   if (!ImageData::validateConstructorArguments(
           kParamData | kParamWidth | kParamHeight, nullptr, width, height,
           bufferView, &exceptionState))
     return nullptr;
 
   return new ImageData(IntSize(width, height), bufferView, &colorSettings,
                        kStorageFormatFromBufferType);
@@ skipping 152 matching lines @@
       SECURITY_CHECK(static_cast<unsigned>(size.width() * size.height() * 4) <=
                      m_dataF32->length());
       break;
 
     default:
       NOTREACHED();
   }
 }
 
 }  // namespace blink