Fix Pepper2D on the Mac so that it runs in the sandbox. Note that trusted

plugins still have to run outside of the sandbox (this is not a regression).
This CL allows untrusted Pepper 2D plugins to run in the sandbox on the Mac.

BUG=40701
TEST=pepper_test_plugin (has to run w/ --no-sandbox on Mac), run any untrusted
    .nexe that uses Pepper 2D or 3D (examples are inthe NaCl SDK).

Review URL: http://codereview.chromium.org/1558032

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@44016 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 8 insertions, 2 deletions

diff --git a/chrome/browser/renderer_host/render_widget_helper.h b/chrome/browser/renderer_host/render_widget_helper.h
index 728bb7c..53b336c 100644
--- a/chrome/browser/renderer_host/render_widget_helper.h
+++ b/chrome/browser/renderer_host/render_widget_helper.h
@@ -128,8 +128,14 @@ class RenderWidgetHelper
                        int* route_id);
 
 #if defined(OS_MACOSX)
-  // Called on the IO thread to handle the allocation of a transport DIB
-  void AllocTransportDIB(size_t size, TransportDIB::Handle* result);
+  // Called on the IO thread to handle the allocation of a TransportDIB.  If
+  // |cache_in_browser| is |true|, then a copy of the shmem is kept by the
+  // browser, and it is the caller's repsonsibility to call
+  // FreeTransportDIB().  In all cases, the caller is responsible for deleting
+  // the resulting TransportDIB.
+  void AllocTransportDIB(size_t size,
+                         bool cache_in_browser,
+                         TransportDIB::Handle* result);
 
   // Called on the IO thread to handle the freeing of a transport DIB
   void FreeTransportDIB(TransportDIB::Id dib_id);