Remove implicit conversions from scoped_refptr to T* in content/

content/browser/security_exploit_browsertest.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "base/containers/hash_tables.h"
 #include "content/browser/dom_storage/dom_storage_context_wrapper.h"
 #include "content/browser/dom_storage/session_storage_namespace_impl.h"
 #include "content/browser/frame_host/navigator.h"
 #include "content/browser/renderer_host/render_view_host_factory.h"
@@ skipping 121 matching lines @@
   ViewHostMsg_CreateWindow_Params params;
   DOMStorageContextWrapper* dom_storage_context =
       static_cast<DOMStorageContextWrapper*>(
           BrowserContext::GetStoragePartition(
               shell()->web_contents()->GetBrowserContext(),
               pending_rvh->GetSiteInstance())->GetDOMStorageContext());
   scoped_refptr<SessionStorageNamespaceImpl> session_storage(
       new SessionStorageNamespaceImpl(dom_storage_context));
   // Cause a deliberate collision in routing ids.
   int main_frame_routing_id = duplicate_routing_id + 1;
-  pending_rvh->CreateNewWindow(
-      duplicate_routing_id, main_frame_routing_id, params, session_storage);
+  pending_rvh->CreateNewWindow(duplicate_routing_id,
+                               main_frame_routing_id,
+                               params,
+                               session_storage.get());
 
   // If the above operation doesn't cause a crash, the test has succeeded!
 }
 
 // This is a test for crbug.com/312016. It tries to create two RenderWidgetHosts
 // with the same process and routing ids, which causes a collision. It is almost
 // identical to the AttemptDuplicateRenderViewHost test case.
 IN_PROC_BROWSER_TEST_F(SecurityExploitBrowserTest,
                        AttemptDuplicateRenderWidgetHost) {
   int duplicate_routing_id = MSG_ROUTING_NONE;
   RenderViewHostImpl* pending_rvh =
       PrepareToDuplicateHosts(shell(), &duplicate_routing_id);
   EXPECT_NE(MSG_ROUTING_NONE, duplicate_routing_id);
 
   // Since this test executes on the UI thread and hopping threads might cause
   // different timing in the test, let's simulate a CreateNewWidget call coming
   // from the IO thread.  Use the existing window routing id to cause a
   // deliberate collision.
   pending_rvh->CreateNewWidget(duplicate_routing_id, blink::WebPopupTypeSelect);
 
   // If the above operation doesn't crash, the test has succeeded!
 }
 
 }  // namespace content