Pepper Flash Mac: Fix crash when playing video on MB retina

content/browser/renderer_host/backing_store_mac.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import <Cocoa/Cocoa.h>
 
 #include "content/browser/renderer_host/backing_store_mac.h"
 
 #include "base/logging.h"
 #include "base/mac/mac_util.h"
@@ skipping 69 matching lines @@
   *scheduled_completion_callback = false;
   DCHECK_NE(static_cast<bool>(cg_layer()), static_cast<bool>(cg_bitmap()));
 
   TransportDIB* dib = process->GetTransportDIB(bitmap);
   if (!dib)
     return;
 
   gfx::Size pixel_size = size().Scale(device_scale_factor_);
   gfx::Rect pixel_bitmap_rect = bitmap_rect.Scale(scale_factor);
 
+  size_t bitmap_byte_count =
+      pixel_bitmap_rect.width() * pixel_bitmap_rect.height() * 4;
+  DCHECK_GE(dib->size(), bitmap_byte_count);
+
   base::mac::ScopedCFTypeRef<CGDataProviderRef> data_provider(
       CGDataProviderCreateWithData(NULL, dib->memory(),
-      pixel_bitmap_rect.width() * pixel_bitmap_rect.height() * 4, NULL));
+      bitmap_byte_count, NULL));
 
   base::mac::ScopedCFTypeRef<CGImageRef> bitmap_image(
       CGImageCreate(pixel_bitmap_rect.width(), pixel_bitmap_rect.height(),
           8, 32, 4 * pixel_bitmap_rect.width(),
           base::mac::GetSystemColorSpace(),
           kCGImageAlphaPremultipliedFirst | kCGBitmapByteOrder32Host,
           data_provider, NULL, false, kCGRenderingIntentDefault));
 
   for (size_t i = 0; i < copy_rects.size(); i++) {
     const gfx::Rect& copy_rect = copy_rects[i];
@@ skipping 157 matching lines @@
                                                8, pixel_size.width() * 4,
                                                base::mac::GetSystemColorSpace(),
                                                kCGImageAlphaPremultipliedFirst |
                                                    kCGBitmapByteOrder32Host);
   DCHECK(context);
 
   return context;
 }
 
 }  // namespace content