Fix for Crash in VideoCaptureController::DoNewBufferOnIOThread

content/browser/renderer_host/media/video_capture_controller.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/media/video_capture_controller.h"
 
 #include <stddef.h>
 #include <stdint.h>
 
 #include <map>
@@ skipping 130 matching lines @@
         media::VideoFrameConsumerFeedbackObserver::kNoUtilizationRecorded;
   }
 }
 
 bool VideoCaptureController::BufferState::HasZeroConsumerHoldCount() {
   return consumer_hold_count_ == 0;
 }
 
 void VideoCaptureController::BufferState::SetConsumerFeedbackObserver(
     media::VideoFrameConsumerFeedbackObserver* consumer_feedback_observer) {
+  DCHECK_CURRENTLY_ON(BrowserThread::IO);
   consumer_feedback_observer_ = consumer_feedback_observer;
 }
 
 void VideoCaptureController::BufferState::SetFrameBufferPool(
     media::FrameBufferPool* frame_buffer_pool) {
+  DCHECK_CURRENTLY_ON(BrowserThread::IO);
   frame_buffer_pool_ = frame_buffer_pool;
 }
 
 VideoCaptureController::VideoCaptureController()
     : frame_buffer_pool_(nullptr),
       consumer_feedback_observer_(nullptr),
       state_(VIDEO_CAPTURE_STATE_STARTED),
       has_received_frames_(false),
       weak_ptr_factory_(this) {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
@@ skipping 199 matching lines @@
 const media::VideoCaptureFormat&
 VideoCaptureController::GetVideoCaptureFormat() const {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
   return video_capture_format_;
 }
 
 void VideoCaptureController::OnIncomingCapturedVideoFrame(
     std::unique_ptr<media::VideoCaptureDevice::Client::Buffer> buffer,
     scoped_refptr<VideoFrame> frame) {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
-  DCHECK(frame_buffer_pool_);
+  if (!frame_buffer_pool_)
+    return;
+
   const int buffer_id = buffer->id();
   DCHECK_NE(buffer_id, media::VideoCaptureBufferPool::kInvalidId);
 
   // Insert if not exists.
   const auto it =
       buffer_id_to_state_map_
           .insert(std::make_pair(
               buffer_id, BufferState(buffer_id, buffer->frame_feedback_id(),
                                      consumer_feedback_observer_.get(),
                                      frame_buffer_pool_.get(), frame)))
@@ skipping 82 matching lines @@
   }
 }
 
 void VideoCaptureController::OnLog(const std::string& message) {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
   MediaStreamManager::SendMessageToNativeLog("Video capture: " + message);
 }
 
 void VideoCaptureController::OnBufferDestroyed(int buffer_id_to_drop) {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
-  DCHECK(frame_buffer_pool_);
 
   for (const auto& client : controller_clients_) {
     if (client->session_closed)
       continue;
 
     auto known_buffers_entry_iter =
         std::find(std::begin(client->known_buffers),
                   std::end(client->known_buffers), buffer_id_to_drop);
     if (known_buffers_entry_iter != std::end(client->known_buffers)) {
       client->known_buffers.erase(known_buffers_entry_iter);
@@ skipping 35 matching lines @@
     int session_id,
     const ControllerClients& clients) {
   for (const auto& client : clients) {
     if (client->session_id == session_id)
       return client.get();
   }
   return nullptr;
 }
 
 }  // namespace content