IndexedDB: Ignore open/delete requests from terminated renderers.

content/browser/indexed_db/indexed_db_dispatcher_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_INDEXED_DB_INDEXED_DB_DISPATCHER_HOST_H_
 #define CONTENT_BROWSER_INDEXED_DB_INDEXED_DB_DISPATCHER_HOST_H_
 
 #include <stdint.h>
 
 #include <map>
@@ skipping 97 matching lines @@
   int64_t HostTransactionId(int64_t transaction_id);
   int64_t RendererTransactionId(int64_t host_transaction_id);
 
   // These are called to decode a host transaction ID, for diagnostic purposes.
   static uint32_t TransactionIdToRendererTransactionId(
       int64_t host_transaction_id);
   static uint32_t TransactionIdToProcessId(int64_t host_transaction_id);
 
   std::string HoldBlobData(const IndexedDBBlobInfo& blob_info);
 
+  // True if the channel is closing/closed and outstanding requests
+  // can be abandoned. Only access on IndexedDB thread.
+  bool is_open() const { return is_open_; }

[cmumford, 2016/10/03 18:39:27]

What about moving this into the *.cc file and adding:

  DCHECK(indexed_db_context_->TaskRunner()->RunsTasksOnCurrentThread());

[jsbell, 2016/10/03 19:28:37]

Done.

+
  private:
   // Friends to enable OnDestruct() delegation.
   friend class BrowserThread;
   friend class base::DeleteHelper<IndexedDBDispatcherHost>;
 
   // Used in nested classes.
   typedef std::map<int64_t, int64_t> TransactionIDToDatabaseIDMap;
   typedef std::map<int64_t, uint64_t> TransactionIDToSizeMap;
   typedef std::map<int64_t, url::Origin> TransactionIDToOriginMap;
   typedef std::map<int32_t, url::Origin> WebIDBObjectIDToOriginMap;
@@ skipping 181 matching lines @@
   scoped_refptr<ChromeBlobStorageContext> blob_storage_context_;
 
   // Maps blob uuid to a pair (handle, ref count). Entry is added and/or count
   // is incremented in HoldBlobData(), and count is decremented and/or entry
   // removed in DropBlobData().
   std::map<std::string,
            std::pair<std::unique_ptr<storage::BlobDataHandle>, int>>
       blob_data_handle_map_;
 
   // Only access on IndexedDB thread.
+  bool is_open_ = true;
   std::unique_ptr<DatabaseDispatcherHost> database_dispatcher_host_;
   std::unique_ptr<CursorDispatcherHost> cursor_dispatcher_host_;
 
   // Used to set file permissions for blob storage.
   int ipc_process_id_;
 
   DISALLOW_IMPLICIT_CONSTRUCTORS(IndexedDBDispatcherHost);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_INDEXED_DB_INDEXED_DB_DISPATCHER_HOST_H_