Add missing return statement after ReceivedBadMessage call.

content/browser/renderer_host/render_process_host_impl.cc

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Represents the browser side of the browser <--> renderer communication
 // channel. There will be one RenderProcessHost per renderer process.
 
 #include "content/browser/renderer_host/render_process_host_impl.h"
 
 #include <algorithm>
@@ skipping 3124 matching lines @@
       // May be in case of IPC error, if it takes long time for renderer
       // to exit. Child process will be killed in any case during
       // child_process_launcher_.reset(). Make sure we will not broadcast
       // FrameHostMsg_RenderProcessGone with status
       // TERMINATION_STATUS_STILL_RUNNING, since this will break WebContentsImpl
       // logic.
       status = base::TERMINATION_STATUS_PROCESS_CRASHED;
     }
   }
 
+  if (exit_code == RESULT_CODE_KILLED_BAD_MESSAGE) {
+    // If a renderer sent a bad message, then revoke all the capabilities it was
+    // previously given.
+    // http://crbug.com/726142
+    ChildProcessSecurityPolicyImpl::GetInstance()->Remove(id_);
+    ChildProcessSecurityPolicyImpl::GetInstance()->Add(id_);
+  }
+
   RendererClosedDetails details(status, exit_code);
 
   child_process_launcher_.reset();
   is_dead_ = true;
   if (route_provider_binding_.is_bound())
     route_provider_binding_.Close();
   associated_interfaces_.reset();
   ResetChannelProxy();
 
   UpdateProcessPriority();
@@ skipping 419 matching lines @@
   LOG(ERROR) << "Terminating render process for bad Mojo message: " << error;
 
   // The ReceivedBadMessage call below will trigger a DumpWithoutCrashing.
   // Capture the error message in a crash key value.
   base::debug::ScopedCrashKey error_key_value("mojo-message-error", error);
   bad_message::ReceivedBadMessage(render_process_id,
                                   bad_message::RPH_MOJO_PROCESS_ERROR);
 }
 
 }  // namespace content