Changeset 227449 in webkit

Timestamp:

Jan 23, 2018 2:30:39 PM (6 years ago)

Author:

commit-queue@webkit.org

Message:

[Curl] CurlRequest must protect its client from disposal while it's on duty.
​https://bugs.webkit.org/show_bug.cgi?id=181875

Patch by Basuke Suzuki <Basuke Suzuki> on 2018-01-23
Reviewed by Alex Christensen.

No new tests. It's covered by existing tests.

• platform/network/curl/CurlDownload.h:
• platform/network/curl/CurlRequest.cpp:

(WebCore::CurlRequest::callClient):
(WebCore::CurlRequest::didReceiveData):
(WebCore::CurlRequest::didReceiveDataFromMultipart):
(WebCore::CurlRequest::didCompleteTransfer):
(WebCore::CurlRequest::invokeDidReceiveResponse):

• platform/network/curl/CurlRequest.h:
• platform/network/curl/CurlRequestClient.h:
• platform/network/curl/ResourceHandleCurlDelegate.h:

Location:

trunk/Source/WebCore

Files:

• ChangeLog (modified) (1 diff)
• platform/network/curl/CurlDownload.h (modified) (1 diff)
• platform/network/curl/CurlRequest.cpp (modified) (6 diffs)
• platform/network/curl/CurlRequest.h (modified) (1 diff)
• platform/network/curl/CurlRequestClient.h (modified) (1 diff)
• platform/network/curl/ResourceHandleCurlDelegate.h (modified) (1 diff)

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2018-01-23  Basuke Suzuki  <Basuke.Suzuki@sony.com>
+
+        [Curl] CurlRequest must protect its client from disposal while it's on duty.
+        https://bugs.webkit.org/show_bug.cgi?id=181875
+
+        Reviewed by Alex Christensen.
+
+        No new tests. It's covered by existing tests.
+
+        * platform/network/curl/CurlDownload.h:
+        * platform/network/curl/CurlRequest.cpp:
+        (WebCore::CurlRequest::callClient):
+        (WebCore::CurlRequest::didReceiveData):
+        (WebCore::CurlRequest::didReceiveDataFromMultipart):
+        (WebCore::CurlRequest::didCompleteTransfer):
+        (WebCore::CurlRequest::invokeDidReceiveResponse):
+        * platform/network/curl/CurlRequest.h:
+        * platform/network/curl/CurlRequestClient.h:
+        * platform/network/curl/ResourceHandleCurlDelegate.h:
+
 2018-01-23  Commit Queue  <commit-queue@webkit.org>
 

trunk/Source/WebCore/platform/network/curl/CurlDownload.h

@@ -53 +53 @@
     ~CurlDownload();
 
+    void ref() override { ThreadSafeRefCounted<CurlDownload>::ref(); }
+    void deref() override { ThreadSafeRefCounted<CurlDownload>::deref(); }
+
     void init(CurlDownloadListener&, const URL&);
     void init(CurlDownloadListener&, ResourceHandle*, const ResourceRequest&, const ResourceResponse&);

trunk/Source/WebCore/platform/network/curl/CurlRequest.cpp

@@ -143 +143 @@
 
 /* `this` is protected inside this method. */
-void CurlRequest::callClient(WTF::Function<void(CurlRequestClient*)> task)
+void CurlRequest::callClient(WTF::Function<void(CurlRequestClient&)> task)
 {
     if (isMainThread()) {
-        if (CurlRequestClient* client = m_client)
-            task(client);
+        if (CurlRequestClient* client = m_client) {
+            RefPtr<CurlRequestClient> protectedClient(client);
+            task(*client);
+        }
     } else {
         callOnMainThread([protectedThis = makeRef(*this), task = WTFMove(task)]() mutable {
-            if (CurlRequestClient* client = protectedThis->m_client)
-                task(client);
+            if (CurlRequestClient* client = protectedThis->m_client) {
+                RefPtr<CurlRequestClient> protectedClient(client);
+                task(*client);
+            }
         });
     }
@@ -357 +361 @@
             m_multipartHandle->didReceiveData(buffer);
         else {
-            callClient([this, buffer = WTFMove(buffer)](CurlRequestClient* client) mutable {
-                if (client)
-                    client->curlDidReceiveBuffer(WTFMove(buffer));
+            callClient([buffer = WTFMove(buffer)](CurlRequestClient& client) mutable {
+                client.curlDidReceiveBuffer(WTFMove(buffer));
             });
         }
@@ -390 +393 @@
 
     if (receiveBytes) {
-        callClient([this, buffer = WTFMove(buffer)](CurlRequestClient* client) mutable {
-            if (client)
-                client->curlDidReceiveBuffer(WTFMove(buffer));
+        callClient([buffer = WTFMove(buffer)](CurlRequestClient& client) mutable {
+            client.curlDidReceiveBuffer(WTFMove(buffer));
         });
     }
@@ -419 +421 @@
 
             finalizeTransfer();
-            callClient([this](CurlRequestClient* client) {
-                if (client)
-                    client->curlDidComplete();
+            callClient([](CurlRequestClient& client) {
+                client.curlDidComplete();
             });
         }
@@ -431 +432 @@
 
         finalizeTransfer();
-        callClient([this, error = resourceError.isolatedCopy()](CurlRequestClient* client) {
-            if (client)
-                client->curlDidFailWithError(error);
+        callClient([error = resourceError.isolatedCopy()](CurlRequestClient& client) {
+            client.curlDidFailWithError(error);
         });
     }
@@ -532 +532 @@
     m_actionAfterInvoke = behaviorAfterInvoke;
 
-    callClient([this, response = response.isolatedCopy()](CurlRequestClient* client) {
-        if (client)
-            client->curlDidReceiveResponse(response);
+    callClient([response = response.isolatedCopy()](CurlRequestClient& client) {
+        client.curlDidReceiveResponse(response);
     });
 }

trunk/Source/WebCore/platform/network/curl/CurlRequest.h

@@ -103 +103 @@
     void startWithJobManager();
 
-    void callClient(WTF::Function<void(CurlRequestClient*)>);
+    void callClient(WTF::Function<void(CurlRequestClient&)>);
 
     // Transfer processing of Request body, Response header/body

trunk/Source/WebCore/platform/network/curl/CurlRequestClient.h

@@ -36 +36 @@
 class CurlRequestClient {
 public:
+    virtual void ref() = 0;
+    virtual void deref() = 0;
+
     virtual void curlDidReceiveResponse(const CurlResponse&) = 0;
     virtual void curlDidReceiveBuffer(Ref<SharedBuffer>&&) = 0;

trunk/Source/WebCore/platform/network/curl/ResourceHandleCurlDelegate.h

@@ -43 +43 @@
     ResourceHandleCurlDelegate(ResourceHandle*);
     ~ResourceHandleCurlDelegate();
+
+    void ref() override { ThreadSafeRefCounted<ResourceHandleCurlDelegate>::ref(); }
+    void deref() override { ThreadSafeRefCounted<ResourceHandleCurlDelegate>::deref(); }
 
     bool hasHandle() const;