[WIP] Migrate hasPendingActivity from ActiveDOMObject to ScriptWrappable.

third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp

Index: third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp
diff --git a/third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp b/third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp
index 4e934b943e95673a62bf4e59e956e0bc52a61673..06a431dad6d13304a7fc16ef6876fe7927ef4c89 100644
--- a/third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp
+++ b/third_party/WebKit/Source/bindings/core/v8/V8GCController.cpp
@@ -133,9 +133,8 @@ public:
         // Note that node->wrapper().IsEmpty() returns true for nodes that
         // do not have wrappers in the main world.
         if (node->containsWrapper()) {
-            const WrapperTypeInfo* type = toWrapperTypeInfo(wrapper);
-            ActiveDOMObject* activeDOMObject = type->toActiveDOMObject(wrapper);
-            if (activeDOMObject && activeDOMObject->hasPendingActivity())
+            ScriptWrappable* scriptwrappable = toScriptWrappable(wrapper);
+            if (scriptwrappable && scriptwrappable->hasPendingActivity())
                 return;
             // FIXME: Remove the special handling for image elements.
             // The same special handling is in V8GCController::opaqueRootForGC().
@@ -263,8 +262,8 @@ public:
 
         const WrapperTypeInfo* type = toWrapperTypeInfo(wrapper);
 
-        ActiveDOMObject* activeDOMObject = type->toActiveDOMObject(wrapper);
-        if (activeDOMObject && activeDOMObject->hasPendingActivity()) {
+        ScriptWrappable* scriptwrappable = toScriptWrappable(wrapper);
+        if (scriptwrappable && scriptwrappable->hasPendingActivity()) {

[haraken, 2015/10/09 13:26:26]

What happens if you change this to:

  if (strcmp(type->interfaceName, "NPObject") && scriptwrappable &&
scriptwrappable->hasPendingActivity())

?

If the crash is gone, we can know that the crash is caused by calling
hasPendingActivity for NPObject.

             m_isolate->SetObjectGroupId(*value, liveRootId());
             ++m_domObjectsWithPendingActivity;
         }