Fix crash due to VisibilityTimerTabHelper not being cancelled

chrome/browser/notifications/notification_permission_context_unittest.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/notifications/notification_permission_context.h"
 
 #include "base/bind.h"
 #include "base/message_loop/message_loop.h"
 #include "base/test/test_mock_time_task_runner.h"
 #include "base/time/time.h"
 #include "chrome/browser/content_settings/host_content_settings_map_factory.h"
 #include "chrome/browser/notifications/desktop_notification_profile_util.h"
+#include "chrome/browser/permissions/permission_manager.h"
+#include "chrome/browser/permissions/permission_manager_factory.h"
 #include "chrome/browser/permissions/permission_request_id.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/test/base/chrome_render_view_host_test_harness.h"
 #include "chrome/test/base/testing_profile.h"
 #include "components/content_settings/core/browser/host_content_settings_map.h"
+#include "content/public/browser/permission_manager.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/browser/web_contents.h"
+#include "content/public/common/permission_status.mojom.h"
 #include "content/public/test/test_browser_thread_bundle.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "url/gurl.h"
 
 namespace {
 
 void DoNothing(ContentSetting content_setting) {}
+void DoNothing2(content::PermissionStatus status) {}
 
 class TestNotificationPermissionContext : public NotificationPermissionContext {
  public:
   explicit TestNotificationPermissionContext(Profile* profile)
       : NotificationPermissionContext(profile),
         permission_set_count_(0),
         last_permission_set_persisted_(false),
         last_permission_set_setting_(CONTENT_SETTING_DEFAULT) {}
 
   int permission_set_count() const { return permission_set_count_; }
@@ skipping 26 matching lines @@
         id, requesting_origin, embedder_origin, callback, persist,
         content_setting);
   }
 
   int permission_set_count_;
   bool last_permission_set_persisted_;
   ContentSetting last_permission_set_setting_;
 };
 
 class NotificationPermissionContextTest
-    : public ChromeRenderViewHostTestHarness {};
+    : public ChromeRenderViewHostTestHarness {
+ public:
+  scoped_refptr<base::TestMockTimeTaskRunner> SwitchToMockTime() {
+    old_task_runner_ = base::MessageLoop::current()->task_runner();
+    scoped_refptr<base::TestMockTimeTaskRunner> task_runner(
+        new base::TestMockTimeTaskRunner(base::Time::Now(),
+                                         base::TimeTicks::Now()));
+    base::MessageLoop::current()->SetTaskRunner(task_runner);
+    return task_runner;
+  }
+
+  void TearDown() override {
+    if (old_task_runner_) {
+      base::MessageLoop::current()->SetTaskRunner(old_task_runner_);
+      old_task_runner_ = nullptr;
+    }
+    ChromeRenderViewHostTestHarness::TearDown();
+  }
+
+ private:
+  scoped_refptr<base::SingleThreadTaskRunner> old_task_runner_;
+};
 
 }  // namespace
 
 // Web Notification permission requests will completely ignore the embedder
 // origin. See https://crbug.com/416894.
 TEST_F(NotificationPermissionContextTest, IgnoresEmbedderOrigin) {
   GURL requesting_origin("https://example.com");
   GURL embedding_origin("https://chrome.com");
   GURL different_origin("https://foobar.com");
 
@@ skipping 36 matching lines @@
 TEST_F(NotificationPermissionContextTest, TestDenyInIncognitoAfterDelay) {
   TestNotificationPermissionContext permission_context(
       profile()->GetOffTheRecordProfile());
   GURL url("https://www.example.com");
   NavigateAndCommit(url);
 
   const PermissionRequestID id(web_contents()->GetRenderProcessHost()->GetID(),
                                web_contents()->GetMainFrame()->GetRoutingID(),
                                -1);
 
-  scoped_refptr<base::SingleThreadTaskRunner> old_task_runner(
-      base::MessageLoop::current()->task_runner());
-  scoped_refptr<base::TestMockTimeTaskRunner> task_runner(
-      new base::TestMockTimeTaskRunner(base::Time::Now(),
-                                       base::TimeTicks::Now()));
-  base::MessageLoop::current()->SetTaskRunner(task_runner);
+  scoped_refptr<base::TestMockTimeTaskRunner> task_runner(SwitchToMockTime());
 
   ASSERT_EQ(0, permission_context.permission_set_count());
   ASSERT_FALSE(permission_context.last_permission_set_persisted());
   ASSERT_EQ(CONTENT_SETTING_DEFAULT,
             permission_context.last_permission_set_setting());
 
   permission_context.RequestPermission(
       web_contents(), id, url, true /* user_gesture */, base::Bind(&DoNothing));
 
   // Should be blocked after 1-2 seconds, but the timer is reset whenever the
@@ skipping 32 matching lines @@
   // But 5*500ms > 2 seconds, so it should now be blocked.
   for (int n = 0; n < 4; n++)
     task_runner->FastForwardBy(base::TimeDelta::FromMilliseconds(500));
 
   EXPECT_EQ(1, permission_context.permission_set_count());
   EXPECT_TRUE(permission_context.last_permission_set_persisted());
   EXPECT_EQ(CONTENT_SETTING_BLOCK,
             permission_context.last_permission_set_setting());
   EXPECT_EQ(CONTENT_SETTING_BLOCK,
             permission_context.GetContentSettingFromMap(url, url));
+}
 
-  base::MessageLoop::current()->SetTaskRunner(old_task_runner);
+// Tests that navigating cancels incognito permission requests without crashing.
+TEST_F(NotificationPermissionContextTest, TestCancelledIncognitoRequest) {
+  TestNotificationPermissionContext permission_context(
+      profile()->GetOffTheRecordProfile());
+  GURL url("https://www.example.com");
+  NavigateAndCommit(url);
+
+  const PermissionRequestID id(web_contents()->GetRenderProcessHost()->GetID(),
+                               web_contents()->GetMainFrame()->GetRoutingID(),
+                               -1);
+
+  scoped_refptr<base::TestMockTimeTaskRunner> task_runner(SwitchToMockTime());
+
+  content::PermissionManager* permission_manager =
+      PermissionManagerFactory::GetForProfile(
+          profile()->GetOffTheRecordProfile());
+
+  // Request and cancel the permission via PermissionManager. That way if
+  // https://crbug.com/586944 regresses, then as well as the EXPECT_EQs below
+  // failing, PermissionManager::OnPermissionsRequestResponseStatus will crash.
+  int request_id = permission_manager->RequestPermission(
+      content::PermissionType::NOTIFICATIONS, web_contents()->GetMainFrame(),
+      url.GetOrigin(), true /* user_gesture */, base::Bind(&DoNothing2));
+
+  permission_manager->CancelPermissionRequest(request_id);
+
+  task_runner->FastForwardBy(base::TimeDelta::FromDays(1));
+
+  EXPECT_EQ(0, permission_context.permission_set_count());
+  EXPECT_EQ(CONTENT_SETTING_ASK,
+            permission_context.GetContentSettingFromMap(url, url));
 }
 
 // Tests how multiple parallel permission requests get auto-denied in incognito.
 TEST_F(NotificationPermissionContextTest, TestParallelDenyInIncognito) {
   TestNotificationPermissionContext permission_context(
       profile()->GetOffTheRecordProfile());
   GURL url("https://www.example.com");
   NavigateAndCommit(url);
   web_contents()->WasShown();
 
   const PermissionRequestID id0(web_contents()->GetRenderProcessHost()->GetID(),
                                 web_contents()->GetMainFrame()->GetRoutingID(),
                                 0);
   const PermissionRequestID id1(web_contents()->GetRenderProcessHost()->GetID(),
                                 web_contents()->GetMainFrame()->GetRoutingID(),
                                 1);
 
-  scoped_refptr<base::SingleThreadTaskRunner> old_task_runner(
-      base::MessageLoop::current()->task_runner());
-  scoped_refptr<base::TestMockTimeTaskRunner> task_runner(
-      new base::TestMockTimeTaskRunner(base::Time::Now(),
-                                       base::TimeTicks::Now()));
-  base::MessageLoop::current()->SetTaskRunner(task_runner);
+  scoped_refptr<base::TestMockTimeTaskRunner> task_runner(SwitchToMockTime());
 
   ASSERT_EQ(0, permission_context.permission_set_count());
   ASSERT_FALSE(permission_context.last_permission_set_persisted());
   ASSERT_EQ(CONTENT_SETTING_DEFAULT,
             permission_context.last_permission_set_setting());
 
   permission_context.RequestPermission(web_contents(), id0, url,
                                        true /* user_gesture */,
                                        base::Bind(&DoNothing));
   permission_context.RequestPermission(web_contents(), id1, url,
@@ skipping 22 matching lines @@
 
   // After another 2.5 seconds, the second permission request should also have
   // received a response.
   task_runner->FastForwardBy(base::TimeDelta::FromMilliseconds(2500));
   EXPECT_EQ(2, permission_context.permission_set_count());
   EXPECT_TRUE(permission_context.last_permission_set_persisted());
   EXPECT_EQ(CONTENT_SETTING_BLOCK,
             permission_context.last_permission_set_setting());
   EXPECT_EQ(CONTENT_SETTING_BLOCK,
             permission_context.GetContentSettingFromMap(url, url));
-
-  base::MessageLoop::current()->SetTaskRunner(old_task_runner);
 }