Oilpan: Support nested pre-finalizers

Source/platform/heap/ThreadState.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 1281 matching lines @@
 void ThreadState::lockThreadAttachMutex()
 {
     threadAttachMutex().lock();
 }
 
 void ThreadState::unlockThreadAttachMutex()
 {
     threadAttachMutex().unlock();
 }
 
-void ThreadState::unregisterPreFinalizerInternal(void* target)
-{
-    checkThread();
-    if (sweepForbidden())
-        return;
-    auto it = m_preFinalizers.find(target);
-    ASSERT(it != m_preFinalizers.end());
-    m_preFinalizers.remove(it);
-}
-
 void ThreadState::invokePreFinalizers()
 {
     checkThread();
     ASSERT(!sweepForbidden());
     TRACE_EVENT0("blink_gc", "ThreadState::invokePreFinalizers");
 
     if (isMainThread())
         ScriptForbiddenScope::enter();
 
     SweepForbiddenScope forbiddenScope(this);
     Vector<void*> deadObjects;
-    for (auto& entry : m_preFinalizers) {
-        if (entry.value(entry.key))
-            deadObjects.append(entry.key);
+    for (auto& it : m_preFinalizers) {
+        void* object = it.key;
+        Vector<PreFinalizerCallback>* callbackVector = it.value.get();
+        size_t preFinalizerCount = callbackVector->size();
+        ASSERT(preFinalizerCount >= 1);
+        // Call the pre-finalizers in the reverse order in which they
+        // are registered.
+        if (!(callbackVector->at(preFinalizerCount - 1))(object))
+            continue;
+        deadObjects.append(object);
+        for (int i = preFinalizerCount - 2; i >= 0; --i) {
+            bool ret = (callbackVector->at(i))(object);
+            ASSERT_UNUSED(ret, ret);
+        }
     }
     // FIXME: removeAll is inefficient.  It can shrink repeatedly.
     m_preFinalizers.removeAll(deadObjects);
 
     if (isMainThread())
         ScriptForbiddenScope::exit();
 }
 
 void ThreadState::clearHeapAges()
 {
@@ skipping 171 matching lines @@
         json->beginArray(it->key.ascii().data());
         for (size_t age = 0; age <= maxHeapObjectAge; ++age)
             json->pushInteger(it->value.ages[age]);
         json->endArray();
     }
     TRACE_EVENT_OBJECT_SNAPSHOT_WITH_ID(TRACE_DISABLED_BY_DEFAULT("blink_gc"), statsName, this, json.release());
 }
 #endif
 
 } // namespace blink