Only dlopen() OMX/VAAPI libs in the GPU process, and only lazily dlsym() their symbols.

content/common/gpu/media/vaapi_video_decode_accelerator.h

Index: content/common/gpu/media/vaapi_video_decode_accelerator.h
diff --git a/content/common/gpu/media/vaapi_video_decode_accelerator.h b/content/common/gpu/media/vaapi_video_decode_accelerator.h
index a5abed4807302ff548146910b85cbdfcf4ff9349..eda41177dc0a5c0eeefc29c63a63e53d8515aa4a 100644
--- a/content/common/gpu/media/vaapi_video_decode_accelerator.h
+++ b/content/common/gpu/media/vaapi_video_decode_accelerator.h
@@ -56,7 +56,10 @@ class CONTENT_EXPORT VaapiVideoDecodeAccelerator :
   virtual void Reset() OVERRIDE;
   virtual void Destroy() OVERRIDE;
 
- private:
+  // Do any necessary initialization before the sandbox is enabled.
+  static void PreSandboxInitialization();
+
+private:
   // Ensure data has been synced with the output texture and notify
   // the client it is ready for displaying.
   void SyncAndNotifyPictureReady(int32 input_id, int32 output_id);
@@ -122,6 +125,10 @@ class CONTENT_EXPORT VaapiVideoDecodeAccelerator :
   // Helper for Destroy(), doing all the actual work except for deleting self.
   void Cleanup();
 
+  // Lazily initialize static data after sandbox is enabled.  Return false on
+  // init failure.
+  static bool PostSandboxInitialization();
+
   // Client-provided X/GLX state.
   Display* x_display_;
   GLXContext glx_context_;