Code: bool IsTraceEventArgsWhitelisted(const char* category_group_name,
                                 const char* event_name) {
   base::CStringTokenizer category_group_tokens(
       category_group_name, category_group_name + strlen(category_group_name),
       ",");
   while (category_group_tokens.GetNext()) {
     const std::string& category_group_token = category_group_tokens.token();
    for (int i = 0; kEventArgsWhitelist[i][0] != NULL; ++i) {
      DCHECK(kEventArgsWhitelist[i][1]);
 
       if (base::MatchPattern(category_group_token.c_str(),
                             kEventArgsWhitelist[i][0]) &&
          base::MatchPattern(event_name, kEventArgsWhitelist[i][1])) {
         return true;
       }
     }
  }

  return false;
}

Vulnerability Type: DoS 
CWE ID: CWE-399
Summary: Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.
Commit Message: Tracing: Add support for PII whitelisting of individual trace event arguments

R=dsinclair,shatch
BUG=546093

Review URL: https://codereview.chromium.org/1415013003

Cr-Commit-Position: refs/heads/master@{#356690}