QUIC - Crash when there is a bad packet loss and the session is closed.

net/quic/quic_stream_factory.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/quic_stream_factory.h"
 
 #include <set>
 
 #include "base/cpu.h"
 #include "base/message_loop/message_loop.h"
@@ skipping 772 matching lines @@
   }
 
   if (http_server_properties_) {
     // We mark it as recently broken, which means that 0-RTT will be disabled
     // but we'll still race.
     http_server_properties_->MarkAlternativeServiceRecentlyBroken(
         AlternativeService(QUIC, session->server_id().host(), port));
   }
 
   // We abandon the connection if packet loss rate is too bad.
-  session->CloseSessionOnError(ERR_ABORTED, QUIC_BAD_PACKET_LOSS_RATE);
+  session->CloseSessionOnErrorAndNotifyFactoryLater(ERR_ABORTED,
+                                                    QUIC_BAD_PACKET_LOSS_RATE);
 
   if (IsQuicDisabled(port))
     return true;  // Exit if Quic is already disabled for this port.
 
   if (++number_of_lossy_connections_[port] >=
       max_number_of_lossy_connections_) {
     UMA_HISTOGRAM_SPARSE_SLOWLY("Net.QuicStreamFactory.QuicIsDisabled", port);
   }
 
   return true;
@@ skipping 401 matching lines @@
   // Since the session was active, there's no longer an
   // HttpStreamFactoryImpl::Job running which can mark it broken, unless the TCP
   // job also fails. So to avoid not using QUIC when we otherwise could, we mark
   // it as recently broken, which means that 0-RTT will be disabled but we'll
   // still race.
   http_server_properties_->MarkAlternativeServiceRecentlyBroken(
       alternative_service);
 }
 
 }  // namespace net