Some security checks around destruction/setting bounds.

mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc

Index: mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc
diff --git a/mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc b/mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc
index 11d1b0107f69f93232c886d0e7ff3f4df1d33c67..54fabb7a989d7d4da8d04a264830daed6c7b72a9 100644
--- a/mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc
+++ b/mojo/services/public/cpp/view_manager/lib/view_manager_synchronizer.cc
@@ -26,13 +26,15 @@ uint32_t MakeTransportId(uint16_t connection_id, uint16_t local_id) {
 ViewTreeNode* AddNodeToViewManager(ViewManager* manager,
                                    ViewTreeNode* parent,
                                    TransportNodeId node_id,
-                                   TransportViewId view_id) {
+                                   TransportViewId view_id,
+                                   const gfx::Rect& bounds) {
   // We don't use the ctor that takes a ViewManager here, since it will call
   // back to the service and attempt to create a new node.
   ViewTreeNode* node = ViewTreeNodePrivate::LocalCreate();
   ViewTreeNodePrivate private_node(node);
   private_node.set_view_manager(manager);
   private_node.set_id(node_id);
+  private_node.LocalSetBounds(gfx::Rect(), bounds);
   if (parent)
     ViewTreeNodePrivate(parent).LocalAddChild(node);
   ViewManagerPrivate private_manager(manager);
@@ -69,7 +71,8 @@ ViewTreeNode* BuildNodeTree(ViewManager* manager,
         manager,
         !parents.empty() ? parents.back() : NULL,
         nodes[i].node_id(),
-        nodes[i].view_id());
+        nodes[i].view_id(),
+        nodes[i].bounds());
     if (!last_node)
       root = node;
     last_node = node;