Exclude files from FileSelectChooser if they can't convert to WebStrings.

content/browser/frame_host/render_frame_host_impl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/render_frame_host_impl.h"
 
 #include <algorithm>
 #include <utility>
 
 #include "base/bind.h"
@@ skipping 3199 matching lines @@
   return frame_tree_node_->render_manager()->GetProxyCount();
 }
 
 void RenderFrameHostImpl::FilesSelectedInChooser(
     const std::vector<content::FileChooserFileInfo>& files,
     FileChooserParams::Mode permissions) {
   storage::FileSystemContext* const file_system_context =
       BrowserContext::GetStoragePartition(GetProcess()->GetBrowserContext(),
                                           GetSiteInstance())
           ->GetFileSystemContext();
+
+  // Exclude files whose paths can't be converted into WebStrings, which we can
+  // approximate with AsUTF8Unsafe.  Blink won't be able to handle these, and we
+  // would kill the renderer when it claims to have chosen an empty file path.
+  std::vector<content::FileChooserFileInfo> filtered_files;
+  for (const auto& file : files) {
+    if (!file.file_path.AsUTF8Unsafe().empty())
+      filtered_files.push_back(file);
+  }
+
   // Grant the security access requested to the given files.
-  for (const auto& file : files) {
+  for (const auto& file : filtered_files) {
     if (permissions == FileChooserParams::Save) {
       ChildProcessSecurityPolicyImpl::GetInstance()->GrantCreateReadWriteFile(
           GetProcess()->GetID(), file.file_path);
     } else {
       ChildProcessSecurityPolicyImpl::GetInstance()->GrantReadFile(
           GetProcess()->GetID(), file.file_path);
     }
     if (file.file_system_url.is_valid()) {
       ChildProcessSecurityPolicyImpl::GetInstance()->GrantReadFileSystem(
           GetProcess()->GetID(),
           file_system_context->CrackURL(file.file_system_url)
               .mount_filesystem_id());
     }
   }
 
-  Send(new FrameMsg_RunFileChooserResponse(routing_id_, files));
+  Send(new FrameMsg_RunFileChooserResponse(routing_id_, filtered_files));
 }
 
 bool RenderFrameHostImpl::HasSelection() {
   return has_selection_;
 }
 
 void RenderFrameHostImpl::GetInterfaceProvider(
     service_manager::mojom::InterfaceProviderRequest interfaces) {
   service_manager::InterfaceProviderSpec browser_spec, renderer_spec;
   // TODO(beng): CHECK these return true.
@@ skipping 450 matching lines @@
 }
 
 void RenderFrameHostImpl::ForwardGetInterfaceToRenderFrame(
     const std::string& interface_name,
     mojo::ScopedMessagePipeHandle pipe) {
   GetRemoteInterfaces()->GetInterface(interface_name, std::move(pipe));
 }
 #endif
 
 }  // namespace content