A number of poorly written IE BHO's crash IE if ChromeFrame is the currently ...

chrome_frame/urlmon_moniker.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_FRAME_URLMON_MONIKER_H_
 #define CHROME_FRAME_URLMON_MONIKER_H_
 
 #include <atlbase.h>
 #include <atlcom.h>
+#include <ExDisp.h>
 #include <urlmon.h>
 #include <string>
 
 #include "base/lazy_instance.h"
 #include "base/logging.h"
 #include "base/threading/thread_local.h"
+#include "base/win/scoped_comptr.h"
 #include "base/win/scoped_variant.h"
 #include "googleurl/src/gurl.h"
 #include "chrome_frame/utils.h"
 
 // This file contains classes that are used to cache the contents of a top-level
 // http request (not for sub frames) while that request is parsed for the
 // presence of a meta tag indicating that the page should be rendered in CF.
 
 // Here are a few scenarios we handle and how the classes come to play.
 
@@ skipping 55 matching lines @@
 // this interface for easier testability.
 class NavigationManager {
  public:
   NavigationManager() {
   }
 
   // Returns the Bho instance for the current thread. This is returned from
   // TLS.  Returns NULL if no instance exists on the current thread.
   static NavigationManager* GetThreadInstance();
 
-  void RegisterThreadInstance();
+  void RegisterThreadInstance(IWebBrowser2* web_browser2);
   void UnregisterThreadInstance();
 
   virtual ~NavigationManager() {
     DCHECK(GetThreadInstance() != this);
   }
 
   // Returns the url of the current top level navigation.
   const std::wstring& url() const {
     return url_;
   }
@@ skipping 41 matching lines @@
     headers_.Reset();
     if (headers) {
       headers_ = *headers;
     }
   }
 
   const base::win::ScopedVariant& headers() const {
     return headers_;
   }
 
+  IWebBrowser2* web_browser() {
+    return web_browser2_.get();
+  }
+
  protected:
   std::string referrer_;
   std::wstring url_;
   base::win::ScopedVariant post_data_;
   base::win::ScopedVariant headers_;
 
   static base::LazyInstance<base::ThreadLocalPointer<NavigationManager> >
       thread_singleton_;
+  // The IWebBrowser2 instance associated with this NavigationManager
+  // instance.
+  base::win::ScopedComPtr<IWebBrowser2> web_browser2_;
 
  private:
   DISALLOW_COPY_AND_ASSIGN(NavigationManager);
 };
 
 // static-only class that manages an IMoniker patch.
 // We need this patch to stay in the loop when top-level HTML content is
 // downloaded that might have the CF http-equiv meta tag.
 // When we detect candidates for those requests, we add our own callback
 // object (as explained at the top of this file) and use it to cache the
@@ skipping 20 matching lines @@
 
   static STDMETHODIMP BindToStorage(IMoniker_BindToStorage_Fn original,
                                     IMoniker* me, IBindCtx* bind_ctx,
                                     IMoniker* to_left, REFIID iid, void** obj);
 
 };
 
 extern wchar_t* kChromeRequestParam;
 
 #endif  // CHROME_FRAME_URLMON_MONIKER_H_