ChromeOS: fix crash in TokenHandleFetcher destructor.

chrome/browser/chromeos/login/signin/token_handle_fetcher.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/login/signin/token_handle_fetcher.h"
 
 #include "base/metrics/histogram_macros.h"
 #include "chrome/browser/chromeos/login/signin/token_handle_util.h"
 #include "chrome/browser/chromeos/profiles/profile_helper.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/signin/profile_oauth2_token_service_factory.h"
 #include "chrome/browser/signin/signin_manager_factory.h"
 #include "chrome/browser/signin/signin_manager_factory.h"
+#include "components/keyed_service/content/browser_context_keyed_service_shutdown_notifier_factory.h"
 #include "components/signin/core/browser/profile_oauth2_token_service.h"
 #include "components/signin/core/browser/signin_manager.h"
 #include "google_apis/gaia/gaia_constants.h"
 
 namespace {
 const int kMaxRetries = 3;
+
+class ShutdownNotifierFactory
+    : public BrowserContextKeyedServiceShutdownNotifierFactory {
+ public:
+  static ShutdownNotifierFactory* GetInstance() {
+    return Singleton<ShutdownNotifierFactory>::get();
+  }
+
+ private:
+  friend struct DefaultSingletonTraits<ShutdownNotifierFactory>;
+
+  ShutdownNotifierFactory()
+      : BrowserContextKeyedServiceShutdownNotifierFactory(
+            "TokenHandleFetcher") {
+    DependsOn(ProfileOAuth2TokenServiceFactory::GetInstance());
+  }
+  ~ShutdownNotifierFactory() override {}
+
+  DISALLOW_COPY_AND_ASSIGN(ShutdownNotifierFactory);
+};
+
 }  // namespace
 
 TokenHandleFetcher::TokenHandleFetcher(TokenHandleUtil* util,
                                        const user_manager::UserID& user_id)
     : OAuth2TokenService::Consumer("user_session_manager"),
       token_handle_util_(util),
       user_id_(user_id),
       token_service_(nullptr),
       waiting_for_refresh_token_(false),
       profile_(nullptr),
       tokeninfo_response_start_time_(base::TimeTicks()) {
 }
 
 TokenHandleFetcher::~TokenHandleFetcher() {
   if (waiting_for_refresh_token_)
     token_service_->RemoveObserver(this);
 }
 
 void TokenHandleFetcher::BackfillToken(Profile* profile,
                                        const TokenFetchingCallback& callback) {
   profile_ = profile;
   callback_ = callback;
 
   token_service_ = ProfileOAuth2TokenServiceFactory::GetForProfile(profile);
   SigninManagerBase* signin_manager =
       SigninManagerFactory::GetForProfile(profile);
   std::string account_id = signin_manager->GetAuthenticatedAccountId();
   if (!token_service_->RefreshTokenIsAvailable(account_id)) {
     account_without_token_ = account_id;
+    profile_shutdown_notification_ =
+        ShutdownNotifierFactory::GetInstance()->Get(profile)->Subscribe(
+            base::Bind(&TokenHandleFetcher::OnProfileDestroyed,
+                       base::Unretained(this)));
+
     token_service_->AddObserver(this);
     waiting_for_refresh_token_ = true;
     return;
   }
   RequestAccessToken(account_id);
 }
 
 void TokenHandleFetcher::OnRefreshTokenAvailable(
     const std::string& account_id) {
   if (account_without_token_ != account_id)
@@ skipping 58 matching lines @@
     if (token_info->GetString("token_handle", &handle)) {
       success = true;
       token_handle_util_->StoreTokenHandle(user_id_, handle);
     }
   }
   const base::TimeDelta duration =
       base::TimeTicks::Now() - tokeninfo_response_start_time_;
   UMA_HISTOGRAM_TIMES("Login.TokenObtainResponseTime", duration);
   callback_.Run(user_id_, success);
 }
+
+void TokenHandleFetcher::OnProfileDestroyed() {
+  callback_.Run(user_id_, false);
+}