Correct data size argument type in resource loading path to unsigned

Source/core/html/ImageDocument.cpp

 /*
  * Copyright (C) 2006, 2007, 2008, 2010 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 25 matching lines @@
 #include "core/frame/Settings.h"
 #include "core/html/HTMLBodyElement.h"
 #include "core/html/HTMLHeadElement.h"
 #include "core/html/HTMLHtmlElement.h"
 #include "core/html/HTMLImageElement.h"
 #include "core/html/HTMLMetaElement.h"
 #include "core/loader/DocumentLoader.h"
 #include "core/loader/FrameLoader.h"
 #include "core/loader/FrameLoaderClient.h"
 #include "wtf/text/StringBuilder.h"
+#include <limits.h>
 
 using std::min;
 
 namespace blink {
 
 using namespace HTMLNames;
 
 class ImageEventListener : public EventListener {
 public:
     static PassRefPtr<ImageEventListener> create(ImageDocument* document) { return adoptRef(new ImageEventListener(document)); }
@@ skipping 65 matching lines @@
 void ImageDocumentParser::appendBytes(const char* data, size_t length)
 {
     if (!length)
         return;
 
     LocalFrame* frame = document()->frame();
     Settings* settings = frame->settings();
     if (!frame->loader().client()->allowImage(!settings || settings->imagesEnabled(), document()->url()))
         return;
 
-    if (document()->cachedImage())
+    if (document()->cachedImage()) {
+        ASSERT(length <= UINT_MAX);

[kouhei (in TOK), 2014/09/30 07:23:03]

Can we have more reasonable limit for this?

[kouhei (in TOK), 2014/09/30 07:41:22]

RELEASE_ASSERT(length <= std::numeric_limits<unsigned>::max());

[tyoshino (SeeGerritForStatus), 2014/09/30 08:14:28]

Done.

         document()->cachedImage()->appendData(data, length);
+    }
     // Make sure the image renderer gets created because we need the renderer
     // to read the aspect ratio. See crbug.com/320244
     document()->updateRenderTreeIfNeeded();
     document()->imageUpdated();
 }
 
 void ImageDocumentParser::finish()
 {
     if (!isStopped() && document()->imageElement() && document()->cachedImage()) {
         ImageResource* cachedImage = document()->cachedImage();
@@ skipping 250 matching lines @@
 }
 
 bool ImageEventListener::operator==(const EventListener& listener)
 {
     if (const ImageEventListener* imageEventListener = ImageEventListener::cast(&listener))
         return m_doc == imageEventListener->m_doc;
     return false;
 }
 
 }