[SharedArrayBuffer] Prevent SharedArrayBuffer being used in Web APIs

third_party/WebKit/Source/modules/push_messaging/PushMessageData.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/push_messaging/PushMessageData.h"
 
 #include <memory>
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/ScriptState.h"
@@ skipping 14 matching lines @@
   // be set in the PushEvent.
   if (messageString.isNull())
     return nullptr;
   return PushMessageData::create(
       ArrayBufferOrArrayBufferViewOrUSVString::fromUSVString(messageString));
 }
 
 PushMessageData* PushMessageData::create(
     const ArrayBufferOrArrayBufferViewOrUSVString& messageData) {
   if (messageData.isArrayBuffer() || messageData.isArrayBufferView()) {
-    DOMArrayBuffer* buffer = messageData.isArrayBufferView()
-                                 ? messageData.getAsArrayBufferView()->buffer()
-                                 : messageData.getAsArrayBuffer();
+    DOMArrayBuffer* buffer =
+        messageData.isArrayBufferView()
+            ? messageData.getAsArrayBufferView().view()->buffer()
+            : messageData.getAsArrayBuffer();
 
     return new PushMessageData(static_cast<const char*>(buffer->data()),
                                buffer->byteLength());
   }
 
   if (messageData.isUSVString()) {
     CString encodedString = UTF8Encoding().encode(messageData.getAsUSVString(),
                                                   WTF::EntitiesForUnencodables);
     return new PushMessageData(encodedString.data(), encodedString.length());
   }
@@ skipping 34 matching lines @@
   return ScriptValue(scriptState, parsed);
 }
 
 String PushMessageData::text() const {
   return UTF8Encoding().decode(m_data.data(), m_data.size());
 }
 
 DEFINE_TRACE(PushMessageData) {}
 
 }  // namespace blink