To reproduce crashes of JSONPrefStore

chrome/browser/safe_browsing/safe_browsing_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/safe_browsing/safe_browsing_service.h"
 
 #include <stddef.h>
 
 #include <vector>
 
@@ skipping 591 matching lines @@
     case chrome::NOTIFICATION_PROFILE_CREATED: {
       DCHECK_CURRENTLY_ON(BrowserThread::UI);
       Profile* profile = content::Source<Profile>(source).ptr();
       if (!profile->IsOffTheRecord())
         AddPrefService(profile->GetPrefs());
       break;
     }
     case chrome::NOTIFICATION_PROFILE_DESTROYED: {
       DCHECK_CURRENTLY_ON(BrowserThread::UI);
       Profile* profile = content::Source<Profile>(source).ptr();
+      PrefService* pref_service = profile->GetPrefs();
       if (!profile->IsOffTheRecord())
-        RemovePrefService(profile->GetPrefs());
+        RemovePrefService(pref_service);
       break;
     }
     default:
       NOTREACHED();
   }
 }
 
 void SafeBrowsingService::AddPrefService(PrefService* pref_service) {
   DCHECK(prefs_map_.find(pref_service) == prefs_map_.end());
   PrefChangeRegistrar* registrar = new PrefChangeRegistrar();
@@ skipping 11 matching lines @@
 
   // Record the current pref state.
   UMA_HISTOGRAM_BOOLEAN("SafeBrowsing.Pref.General",
                         pref_service->GetBoolean(prefs::kSafeBrowsingEnabled));
   UMA_HISTOGRAM_BOOLEAN(
       "SafeBrowsing.Pref.Extended",
       pref_service->GetBoolean(prefs::kSafeBrowsingExtendedReportingEnabled));
 }
 
 void SafeBrowsingService::RemovePrefService(PrefService* pref_service) {
+  // If the profile fails to initialize, then |pref_service| was not added
+  // before, and therefore there is nothing to remove.
   if (prefs_map_.find(pref_service) != prefs_map_.end()) {
     delete prefs_map_[pref_service];
     prefs_map_.erase(pref_service);
     RefreshState();
-  } else {
-    NOTREACHED();
   }
 }
 
 std::unique_ptr<SafeBrowsingService::StateSubscription>
 SafeBrowsingService::RegisterStateCallback(
     const base::Callback<void(void)>& callback) {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   return state_callback_list_.Add(callback);
 }
 
@@ skipping 37 matching lines @@
     ping_manager()->ReportThreatDetails(report);
 }
 
 void SafeBrowsingService::ProcessResourceRequest(
     const ResourceRequestInfo& request) {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   services_delegate_->ProcessResourceRequest(&request);
 }
 
 }  // namespace safe_browsing