cc: Reject CompositorFrames to old child surfaces

cc/surfaces/surface_factory.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "cc/surfaces/surface_factory.h"
 
 #include <utility>
 
 #include "base/memory/ptr_util.h"
 #include "base/trace_event/trace_event.h"
 #include "cc/output/compositor_frame.h"
 #include "cc/output/copy_output_request.h"
 #include "cc/surfaces/surface.h"
 #include "cc/surfaces/surface_factory_client.h"
 #include "cc/surfaces/surface_info.h"
 #include "cc/surfaces/surface_manager.h"
 #include "ui/gfx/geometry/size.h"
 
 namespace cc {
 SurfaceFactory::SurfaceFactory(
     const FrameSinkId& frame_sink_id,
     SurfaceManager* manager,
     SurfaceFactoryClient* client,
     SurfaceResourceHolderClient* resource_holder_client)
     : frame_sink_id_(frame_sink_id),
       manager_(manager),
       client_(client),
+      resource_holder_client_(resource_holder_client),
       holder_(resource_holder_client),
       needs_sync_points_(true),
       weak_factory_(this) {}
 
 SurfaceFactory::~SurfaceFactory() {
   // This is to prevent troubles when a factory that resides in a client is
   // being destroyed. In such cases, the factory might attempt to return
   // resources to the client while it's in the middle of destruction and this
   // could cause a crash or some unexpected behaviour.
   DCHECK(!current_surface_) << "Please call EvictSurface before destruction";
@@ skipping 108 matching lines @@
   surface->AddObserver(this);
   return surface;
 }
 
 void SurfaceFactory::Destroy(std::unique_ptr<Surface> surface) {
   surface->RemoveObserver(this);
   manager_->DestroySurface(std::move(surface));
 }
 
 }  // namespace cc