Have ScriptPromiseResolver on the Oilpan heap always.

Source/modules/crypto/CryptoResultImpl.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 45 matching lines @@
     if (!resolver->executionContext() || resolver->executionContext()->activeDOMObjectsAreStopped())
         return;
 
     ScriptState::Scope scope(resolver->scriptState());
     v8::Isolate* isolate = resolver->scriptState()->isolate();
     resolver->reject(v8::Exception::TypeError(v8String(isolate, errorDetails)));
 }
 
 class CryptoResultImpl::Resolver final : public ScriptPromiseResolver {
 public:
-    static PassRefPtrWillBeRawPtr<ScriptPromiseResolver> create(ScriptState* scriptState, CryptoResultImpl* result)
+    static Resolver* create(ScriptState* scriptState, CryptoResultImpl* result)
     {
-        RefPtrWillBeRawPtr<Resolver> resolver = adoptRefWillBeNoop(new Resolver(scriptState, result));
+        Resolver* resolver = new Resolver(scriptState, result);
         resolver->suspendIfNeeded();
         resolver->keepAliveWhilePending();
-        return resolver.release();
+        return resolver;
     }
 
     void stop() override
     {
         m_result->cancel();
         m_result->clearResolver();
         m_result = nullptr;
         ScriptPromiseResolver::stop();
     }
 
+    DEFINE_INLINE_VIRTUAL_TRACE()
+    {
+        visitor->trace(m_result);
+        ScriptPromiseResolver::trace(visitor);
+    }
+
 private:
     Resolver(ScriptState* scriptState, CryptoResultImpl* result)
         : ScriptPromiseResolver(scriptState)
         , m_result(result) { }
-    RefPtr<CryptoResultImpl> m_result;
+
+    Member<CryptoResultImpl> m_result;
 };
 
 ExceptionCode webCryptoErrorToExceptionCode(WebCryptoErrorType errorType)
 {
     switch (errorType) {
     case WebCryptoErrorTypeNotSupported:
         return NotSupportedError;
     case WebCryptoErrorTypeSyntax:
         return SyntaxError;
     case WebCryptoErrorTypeInvalidAccess:
         return InvalidAccessError;
     case WebCryptoErrorTypeData:
         return DataError;
     case WebCryptoErrorTypeOperation:
         return OperationError;
     case WebCryptoErrorTypeType:
         return V8TypeError;
     }
 
     ASSERT_NOT_REACHED();
     return 0;
 }
 
+CryptoResultImpl::CryptoResultImpl(ScriptState* scriptState)
+    : m_cancelled(0)
+{
+    ASSERT(scriptState->contextIsValid());
+    if (scriptState->executionContext()->activeDOMObjectsAreStopped()) {

[haraken, 2015/07/17 01:40:36]

Not related to this CL, why do we need this special logic only in
CryptoResultImpl? If we need this here, I guess we need it for all Resolver
owners.

[sof, 2015/07/17 09:43:26]

It's due to
https://codereview.chromium.org/780793002/diff/60001/Source/modules/crypto/Cr...

As CryptoResultImpl now keeps a Member<>, we no longer this special case. (I
thought it was there as a leak-preventing measure, but it was needed for weak
pointer safety.)

+        // If active dom objects have been stopped, avoid creating
+        // CryptoResultResolver.
+        m_resolver = nullptr;
+    } else {
+        m_resolver = Resolver::create(scriptState, this);
+    }
+}
+
 CryptoResultImpl::~CryptoResultImpl()
 {
     ASSERT(!m_resolver);
 }
 
+DEFINE_TRACE(CryptoResultImpl)
+{
+    visitor->trace(m_resolver);
+    CryptoResult::trace(visitor);
+}
+
 void CryptoResultImpl::clearResolver()
 {
     m_resolver = nullptr;
 }
 
-PassRefPtrWillBeRawPtr<CryptoResultImpl> CryptoResultImpl::create(ScriptState* scriptState)
+CryptoResultImpl* CryptoResultImpl::create(ScriptState* scriptState)
 {
-    return adoptRefWillBeNoop(new CryptoResultImpl(scriptState));
+    return new CryptoResultImpl(scriptState);
 }
 
 void CryptoResultImpl::completeWithError(WebCryptoErrorType errorType, const WebString& errorDetails)
 {
     if (m_resolver) {
         ExceptionCode ec = webCryptoErrorToExceptionCode(errorType);
 
         // Handle TypeError separately, as it cannot be created using
         // DOMException.
         if (ec == V8TypeError)
@@ skipping 63 matching lines @@
 bool CryptoResultImpl::cancelled() const
 {
     return acquireLoad(&m_cancelled);
 }
 
 void CryptoResultImpl::cancel()
 {
     releaseStore(&m_cancelled, 1);
 }
 
-CryptoResultImpl::CryptoResultImpl(ScriptState* scriptState)
-    : m_cancelled(0)
-{
-    ASSERT(scriptState->contextIsValid());
-    if (scriptState->executionContext()->activeDOMObjectsAreStopped()) {
-        // If active dom objects have been stopped, avoid creating
-        // CryptoResultResolver.
-        m_resolver = nullptr;
-    } else {
-        m_resolver = Resolver::create(scriptState, this).get();
-    }
-}
-
 ScriptPromise CryptoResultImpl::promise()
 {
     return m_resolver ? m_resolver->promise() : ScriptPromise();
 }
 
 } // namespace blink