Mojo cpp bindings: add support for validating incoming messages.

mojo/public/cpp/bindings/message.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef MOJO_PUBLIC_CPP_BINDINGS_MESSAGE_H_
 #define MOJO_PUBLIC_CPP_BINDINGS_MESSAGE_H_
 
 #include <assert.h>
 
 #include <vector>
@@ skipping 85 matching lines @@
   //
   virtual bool AcceptWithResponder(
       Message* message, MessageReceiver* responder) MOJO_WARN_UNUSED_RESULT = 0;
 };
 
 // Read a single message from the pipe and dispatch to the given receiver.  The
 // receiver may be null, in which case the message is simply discarded.
 // Returns MOJO_RESULT_SHOULD_WAIT if the caller should wait on the handle to
 // become readable. Returns MOJO_RESULT_OK if a message was dispatched and
 // otherwise returns an error code if something went wrong.
+//
+// NOTE: The message hasn't been validated and may be malformed!
 MojoResult ReadAndDispatchMessage(MessagePipeHandle handle,
                                   MessageReceiver* receiver,
                                   bool* receiver_result);
 
 }  // namespace mojo
 
 #endif  // MOJO_PUBLIC_CPP_BINDINGS_MESSAGE_H_