Oilpan: eagerly finalize WebGLRenderingContext objects.

Source/core/html/canvas/WebGLContextGroup.h

 /*
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 14 matching lines @@
 
 #ifndef WebGLContextGroup_h
 #define WebGLContextGroup_h
 
 #include "core/html/canvas/WebGLRenderingContextBase.h"
 #include "wtf/HashSet.h"
 #include "wtf/PassRefPtr.h"
 #include "wtf/RefCounted.h"
 
 namespace blink {
+
 class WebGraphicsContext3D;
-}
-
-namespace blink {
-
 class WebGLSharedObject;
 class WebGLRenderingContextBase;
 
-typedef int ExceptionCode;
-
 class WebGLContextGroup final : public RefCounted<WebGLContextGroup> {
 public:
     static PassRefPtr<WebGLContextGroup> create();
     ~WebGLContextGroup();
 
     void addContext(WebGLRenderingContextBase*);
     void removeContext(WebGLRenderingContextBase*);
 
     void addObject(WebGLSharedObject*);
     void removeObject(WebGLSharedObject*);
 
     WebGraphicsContext3D* getAWebGraphicsContext3D();
 
     void loseContextGroup(WebGLRenderingContextBase::LostContextMode, WebGLRenderingContextBase::AutoRecoveryMethod);
 
+#if ENABLE(OILPAN) && defined(ADDRESS_SANITIZER)
+    void poisonContext(bool);
+    void poisonObject(WebGLSharedObject*, bool);
+
+    class UnpoisonScope final {
+        STACK_ALLOCATED();
+    public:
+        UnpoisonScope(WebGLContextGroup*);
+        UnpoisonScope(WebGLContextGroup*, WebGLSharedObject*);
+        ~UnpoisonScope();
+
+    private:
+        Member<WebGLContextGroup> m_context;
+        Member<WebGLSharedObject> m_object;
+    };
+#endif
+
 private:
     friend class WebGLObject;
 
     WebGLContextGroup();
 
     void detachAndRemoveAllObjects();
 
     // FIXME: Oilpan: this object is not on the heap, but keeps bare
     // pointers to garbage collected objects in the two hash sets
     // below. The objects are responsible for managing their
     // registration with WebGLContextGroup, and vice versa, the
     // WebGLContextGroup takes care of detaching the group objects if
     // the set of WebGLRenderingContextBase contexts becomes empty.
     HashSet<WebGLRenderingContextBase*> m_contexts;
     HashSet<WebGLSharedObject*> m_groupObjects;
 };
 
 } // namespace blink
 
 #endif // WebGLContextGroup_h