Do a null check in CronetURLRequestAdapter::GetStatusOnNetworkThread

components/cronet/android/cronet_url_request_adapter.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cronet/android/cronet_url_request_adapter.h"
 
 #include <limits>
 #include <utility>
 #include <vector>
 
 #include "base/bind.h"
 #include "base/location.h"
 #include "base/logging.h"
 #include "components/cronet/android/cronet_url_request_context_adapter.h"
 #include "components/cronet/android/io_buffer_with_byte_buffer.h"
 #include "components/cronet/android/url_request_error.h"
 #include "jni/CronetUrlRequest_jni.h"
 #include "net/base/load_flags.h"
+#include "net/base/load_states.h"
 #include "net/base/net_errors.h"
 #include "net/base/request_priority.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/http/http_response_headers.h"
 #include "net/http/http_status_code.h"
 #include "net/http/http_util.h"
 #include "net/ssl/ssl_info.h"
 #include "net/url_request/redirect_info.h"
 #include "net/url_request/url_request_context.h"
 
@@ skipping 263 matching lines @@
   if (upload_)
     url_request_->set_upload(std::move(upload_));
   url_request_->Start();
 }
 
 void CronetURLRequestAdapter::GetStatusOnNetworkThread(
     const base::android::ScopedJavaGlobalRef<jobject>& status_listener_ref)
     const {
   DCHECK(context_->IsOnNetworkThread());
   JNIEnv* env = base::android::AttachCurrentThread();
+  int status = net::LOAD_STATE_IDLE;
+  // |url_request_| is initialized in StartOnNetworkThread, and it is
+  // never nulled. If it is null, it must be that StartOnNetworkThread
+  // has not been called, pretend that we are in LOAD_STATE_IDLE.
+  // See crbug.com/606872.
+  if (url_request_)
+    status = url_request_->GetLoadState().state;
   cronet::Java_CronetUrlRequest_onStatus(env, owner_.obj(),
-                                         status_listener_ref.obj(),
-                                         url_request_->GetLoadState().state);
+                                         status_listener_ref.obj(), status);
 }
 
 base::android::ScopedJavaLocalRef<jobjectArray>
 CronetURLRequestAdapter::GetResponseHeaders(JNIEnv* env) {
   DCHECK(context_->IsOnNetworkThread());
 
   std::vector<std::string> response_headers;
   const net::HttpResponseHeaders* headers = url_request_->response_headers();
   // Returns an empty array if |headers| is nullptr.
   if (headers != nullptr) {
@@ skipping 54 matching lines @@
       ConvertUTF8ToJavaString(env, net::ErrorToString(net_error)).obj(),
       request->GetTotalReceivedBytes());
   return true;
 }
 
 net::URLRequest* CronetURLRequestAdapter::GetURLRequestForTesting() {
   return url_request_.get();
 }
 
 }  // namespace cronet