Exclude files from FileSelectChooser if they can't convert to WebStrings.

content/renderer/render_frame_impl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/render_frame_impl.h"
 
 #include <map>
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 5740 matching lines @@
 void RenderFrameImpl::OnFileChooserResponse(
     const std::vector<content::FileChooserFileInfo>& files) {
   // This could happen if we navigated to a different page before the user
   // closed the chooser.
   if (file_chooser_completions_.empty())
     return;
 
   // Convert Chrome's SelectedFileInfo list to WebKit's.
   WebVector<blink::WebFileChooserCompletion::SelectedFileInfo> selected_files(
       files.size());
+  size_t current_size = 0;
   for (size_t i = 0; i < files.size(); ++i) {
     blink::WebFileChooserCompletion::SelectedFileInfo selected_file;
     selected_file.path = blink::FilePathToWebString(files[i].file_path);
+
+    // Exclude files whose paths can't be converted into WebStrings. Blink won't
+    // be able to handle these, and the browser process would kill the renderer
+    // when it claims to have chosen an empty file path.
+    if (selected_file.path.IsEmpty())
+      continue;
+
     selected_file.display_name =
         blink::FilePathToWebString(base::FilePath(files[i].display_name));
     if (files[i].file_system_url.is_valid()) {
       selected_file.file_system_url = files[i].file_system_url;
       selected_file.length = files[i].length;
       selected_file.modification_time = files[i].modification_time.ToDoubleT();
       selected_file.is_directory = files[i].is_directory;
     }
-    selected_files[i] = selected_file;
+
+    selected_files[current_size] = selected_file;
+    current_size++;
+  }
+
+  // If not all files were included, truncate the WebVector.
+  if (current_size < selected_files.size()) {
+    WebVector<blink::WebFileChooserCompletion::SelectedFileInfo> truncated_list(
+        selected_files.Data(), current_size);
+    selected_files.Swap(truncated_list);
   }
 
   if (file_chooser_completions_.front()->completion) {
     file_chooser_completions_.front()->completion->DidChooseFile(
         selected_files);
   }
   file_chooser_completions_.pop_front();
 
   // If there are more pending file chooser requests, schedule one now.
   if (!file_chooser_completions_.empty()) {
@@ skipping 1192 matching lines @@
       policy(info.default_policy),
       replaces_current_history_item(info.replaces_current_history_item),
       history_navigation_in_new_child_frame(
           info.is_history_navigation_in_new_child_frame),
       client_redirect(info.is_client_redirect),
       cache_disabled(info.is_cache_disabled),
       form(info.form),
       source_location(info.source_location) {}
 
 }  // namespace content