  void Wait() {
    if (!scroll_end_received_) {
      message_loop_runner_->Run();
    }
  }

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.