It looks like the code below does not check whether StringToInt() was successful, and may assign an uninitialized value to *result....



 753 bool HttpResponseHeaders::GetCacheControlDirective(const StringPiece& directive,
 754                                                    TimeDelta* result) const {
 755   StringPiece name("cache-control");
 756   std::string value;
 757 
 758   size_t directive_size = directive.size();
 759 
 760   size_t iter = 0;
 761   while (EnumerateHeader(&iter, name, &value)) {
 762     if (value.size() > directive_size + 1 &&
 763         base::StartsWith(value, directive,
 764                          base::CompareCase::INSENSITIVE_ASCII) &&
 765         value[directive_size] == '=') {
 766       int64_t seconds;
 767       base::StringToInt64(
 768           StringPiece(value.begin() + directive_size + 1, value.end()),
 769           &seconds);
 770       *result = TimeDelta::FromSeconds(seconds);
 771       return true;
 772     }
 773   }  
 774 
 775   return false;
 776 }