[Cronet] Fix race in UploadDataStream.attachToRequest.

components/cronet/android/java/src/org/chromium/net/CronetUrlRequest.java

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package org.chromium.net;
 
 import android.os.SystemClock;
 import android.support.annotation.Nullable;
 import android.util.Log;
 
@@ skipping 193 matching lines @@
                         throw new IllegalArgumentException(
                                 "Invalid header " + header.getKey() + "=" + header.getValue());
                     }
                 }
                 if (mUploadDataStream != null) {
                     if (!hasContentType) {
                         throw new IllegalArgumentException(
                                 "Requests with upload data must have a Content-Type.");
                     }
                     mStarted = true;
-                    mUploadDataStream.attachToRequest(this, mUrlRequestAdapter, new Runnable() {
+                    mUploadDataStream.postTaskToExecutor(new Runnable() {
                         @Override
                         public void run() {
+                            mUploadDataStream.initializeWithRequest(CronetUrlRequest.this);
                             synchronized (mUrlRequestAdapterLock) {
+                                if (isDoneLocked()) {
+                                    return;
+                                }
+                                mUploadDataStream.attachNativeAdapterToRequest(mUrlRequestAdapter);
                                 startInternalLocked();
                             }
                         }
                     });
                     return;
                 }
             } catch (RuntimeException e) {
                 // If there's an exception, cleanup and then throw the
                 // exception to the caller.
                 destroyRequestAdapter(false);
                 throw e;
             }
             mStarted = true;
             startInternalLocked();
         }
     }
 
+    /*
+     * Starts fully configured request. Could execute on UploadDataProvider executor.
+     * Caller is expected to ensure that request isn't canceled and mUrlRequestAdapter is valid.
+     */
     @GuardedBy("mUrlRequestAdapterLock")
     private void startInternalLocked() {
         if (mDisableCache) {
             nativeDisableCache(mUrlRequestAdapter);
         }
         if (mRequestMetricsAccumulator != null) {
             mRequestMetricsAccumulator.onRequestStarted();
         }
         nativeStart(mUrlRequestAdapter);
     }
@@ skipping 491 matching lines @@
     @NativeClassQualifiedName("CronetURLRequestAdapter")
     private native boolean nativeReadData(long nativePtr, ByteBuffer byteBuffer,
             int position, int capacity);
 
     @NativeClassQualifiedName("CronetURLRequestAdapter")
     private native void nativeDestroy(long nativePtr, boolean sendOnCanceled);
 
     @NativeClassQualifiedName("CronetURLRequestAdapter")
     private native void nativeGetStatus(long nativePtr, UrlRequest.StatusListener listener);
 }