Use correct creation context when converting sequences to V8

third_party/WebKit/Source/bindings/core/v8/ToV8.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef ToV8_h
 #define ToV8_h
 
 // toV8() provides C++ -> V8 conversion. Note that toV8() can return an empty
 // handle. Call sites must check IsEmpty() before using return value.
 
@@ skipping 180 matching lines @@
 {
     RELEASE_NOTREACHED();
     return v8::Local<v8::Value>();
 }
 
 // Array
 
 template<typename Sequence>
 inline v8::Local<v8::Value> toV8SequenceInternal(const Sequence& sequence, v8::Local<v8::Object> creationContext, v8::Isolate* isolate)
 {
-    v8::Local<v8::Array> array = v8::Array::New(isolate, sequence.size());
+    v8::Local<v8::Array> array;
+    {
+        v8::Context::Scope contextScope(creationContext->CreationContext());
+        array = v8::Array::New(isolate, sequence.size());
+    }
     uint32_t index = 0;
     typename Sequence::const_iterator end = sequence.end();
     for (typename Sequence::const_iterator iter = sequence.begin(); iter != end; ++iter) {
-        v8::Local<v8::Value> value = toV8(*iter, creationContext, isolate);
+        v8::Local<v8::Value> value = toV8(*iter, array, isolate);
         if (value.IsEmpty())
             value = v8::Undefined(isolate);
         if (!v8CallBoolean(array->Set(isolate->GetCurrentContext(), v8::Integer::New(isolate, index++), value)))
             return v8::Local<v8::Value>();
     }
     return array;
 }
 
 template<typename T, size_t inlineCapacity>
 inline v8::Local<v8::Value> toV8(const Vector<T, inlineCapacity>& value, v8::Local<v8::Object> creationContext, v8::Isolate* isolate)
 {
     return toV8SequenceInternal(value, creationContext, isolate);
 }
 
 template<typename T, size_t inlineCapacity>
 inline v8::Local<v8::Value> toV8(const HeapVector<T, inlineCapacity>& value, v8::Local<v8::Object> creationContext, v8::Isolate* isolate)
 {
     return toV8SequenceInternal(value, creationContext, isolate);
 }
 
 template<typename T>
 inline v8::Local<v8::Value> toV8(const Vector<std::pair<String, T>>& value, v8::Local<v8::Object> creationContext, v8::Isolate* isolate)
 {
-    v8::Local<v8::Object> object = v8::Object::New(isolate);
+    v8::Local<v8::Object> object;
+    {
+        v8::Context::Scope contextScope(creationContext->CreationContext());
+        object = v8::Object::New(isolate);
+    }
     for (unsigned i = 0; i < value.size(); ++i) {
-        v8::Local<v8::Value> v8Value = toV8(value[i].second, creationContext, isolate);
+        v8::Local<v8::Value> v8Value = toV8(value[i].second, object, isolate);
         if (v8Value.IsEmpty())
             v8Value = v8::Undefined(isolate);
         if (!v8CallBoolean(object->Set(isolate->GetCurrentContext(), v8String(isolate, value[i].first), v8Value)))
             return v8::Local<v8::Value>();
     }
     return object;
 }
 
 // In all cases allow script state instead of creation context + isolate.
 // Use this function only if the call site does not otherwise need the global,
@@ skipping 17 matching lines @@
 // Cannot define in ScriptValue because of the circular dependency between toV8 and ScriptValue
 template<typename T>
 inline ScriptValue ScriptValue::from(ScriptState* scriptState, T&& value)
 {
     return ScriptValue(scriptState, toV8(std::forward<T>(value), scriptState));
 }
 
 } // namespace blink
 
 #endif // ToV8_h