Fix a crash when saving a <canvas> or <img> image which is large.

chrome/browser/renderer_context_menu/render_view_context_menu.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/renderer_context_menu/render_view_context_menu.h"
 
 #include <algorithm>
 #include <set>
 #include <utility>
 
@@ skipping 1068 matching lines @@
           ProfileIOData::IsHandledProtocol(params_.link_url.scheme());
     }
 
     case IDC_CONTENT_CONTEXT_SAVEIMAGEAS: {
       PrefService* local_state = g_browser_process->local_state();
       DCHECK(local_state);
       // Test if file-selection dialogs are forbidden by policy.
       if (!local_state->GetBoolean(prefs::kAllowFileSelectionDialogs))
         return false;
 
-      if (params_.media_type == WebContextMenuData::MediaTypeCanvas)
-        return true;
-
-      return params_.src_url.is_valid() &&
-          ProfileIOData::IsHandledProtocol(params_.src_url.scheme());
+      return params_.src_url.is_empty() ||

[Avi (use Gerrit), 2014/09/02 22:33:12]

Can you comment that "is_empty" means canvas? (It does, doesn't it?)

[zino, 2014/09/03 01:45:58]

I added comments.
Thank you.

+          (params_.src_url.is_valid() &&
+          ProfileIOData::IsHandledProtocol(params_.src_url.scheme()));
     }
 
     // The images shown in the most visited thumbnails can't be opened or
     // searched for conventionally.
     case IDC_CONTENT_CONTEXT_OPENIMAGENEWTAB:
     case IDC_CONTENT_CONTEXT_SEARCHWEBFORIMAGE:
       return params_.src_url.is_valid() &&
           (params_.src_url.scheme() != content::kChromeUIScheme);
 
     case IDC_CONTENT_CONTEXT_COPYIMAGE:
@@ skipping 234 matching lines @@
       dl_params->set_referrer(referrer);
       dl_params->set_referrer_encoding(params_.frame_charset);
       dl_params->set_suggested_name(params_.suggested_filename);
       dl_params->set_prompt(true);
       dlm->DownloadUrl(dl_params.Pass());
       break;
     }
 
     case IDC_CONTENT_CONTEXT_SAVEAVAS:
     case IDC_CONTENT_CONTEXT_SAVEIMAGEAS: {
-      if (params_.media_type == WebContextMenuData::MediaTypeCanvas) {
+      if (params_.media_type == WebContextMenuData::MediaTypeCanvas ||
+          (params_.media_type == WebContextMenuData::MediaTypeImage &&
+          params_.src_url.is_empty())) {
         source_web_contents_->GetRenderViewHost()->SaveImageAt(
           params_.x, params_.y);
       } else {
-        // TODO(zino): We can use SaveImageAt() like a case of canvas.
         RecordDownloadSource(DOWNLOAD_INITIATED_BY_CONTEXT_MENU);
         const GURL& url = params_.src_url;
         content::Referrer referrer = CreateSaveAsReferrer(url, params_);
         source_web_contents_->SaveFrame(url, referrer);
       }
       break;
     }
 
     case IDC_CONTENT_CONTEXT_COPYLINKLOCATION:
       WriteURLToClipboard(params_.unfiltered_link_url);
@@ skipping 408 matching lines @@
   source_web_contents_->GetRenderViewHost()->
       ExecuteMediaPlayerActionAtLocation(location, action);
 }
 
 void RenderViewContextMenu::PluginActionAt(
     const gfx::Point& location,
     const WebPluginAction& action) {
   source_web_contents_->GetRenderViewHost()->
       ExecutePluginActionAtLocation(location, action);
 }