ServiceWorker: OnSimpleEventFinished could be called after timed out

content/browser/service_worker/service_worker_version.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/service_worker/service_worker_version.h"
 
 #include <stddef.h>
 
 #include <limits>
 #include <map>
@@ skipping 1093 matching lines @@
   }
 
   embedded_worker_->SendMessage(
       ServiceWorkerMsg_DidGetClients(request_id, *clients));
 }
 
 void ServiceWorkerVersion::OnSimpleEventFinished(
     int request_id,
     ServiceWorkerStatusCode status,
     base::Time dispatch_event_time) {
+  PendingRequest* request = pending_requests_.Lookup(request_id);
+  // |request| will be null when the request has been timed out.
+  if (!request)
+    return;
   // Copy error callback before calling FinishRequest.
-  PendingRequest* request = pending_requests_.Lookup(request_id);
-  DCHECK(request) << "Invalid request id";
   StatusCallback callback = request->error_callback;
 
   FinishRequest(request_id, status == SERVICE_WORKER_OK, dispatch_event_time);
 
   callback.Run(status);
 }
 
 void ServiceWorkerVersion::NotifyMainScriptRequestHandlerCreated() {
   main_script_request_handler_created_ = true;
 }
@@ skipping 797 matching lines @@
 
 void ServiceWorkerVersion::CleanUpExternalRequest(
     const std::string& request_uuid,
     ServiceWorkerStatusCode status) {
   if (status == SERVICE_WORKER_OK)
     return;
   external_request_uuid_to_request_id_.erase(request_uuid);
 }
 
 }  // namespace content