Adding tests for two recent regressions due to RenderViewImpl's Swapped Out State

content/renderer/render_view_browsertest_mac.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/strings/string16.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
+#include "content/common/frame_messages.h"
+#include "content/common/frame_replication_state.h"
+#include "content/common/input_messages.h"
+#include "content/common/text_input_client_messages.h"
 #include "content/public/browser/native_web_keyboard_event.h"
 #include "content/public/common/web_preferences.h"
 #include "content/public/test/render_view_test.h"
 #include "content/renderer/render_view_impl.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "third_party/WebKit/public/web/WebFrameContentDumper.h"
 #include "third_party/WebKit/public/web/WebLocalFrame.h"
 #include "third_party/WebKit/public/web/WebView.h"
 
 #include <Carbon/Carbon.h>  // for the kVK_* constants.
 #include <Cocoa/Cocoa.h>
 
 using blink::WebFrameContentDumper;
+using blink::WebCompositionUnderline;
 
 namespace content {
 
 NSEvent* CmdDeadKeyEvent(NSEventType type, unsigned short code) {
   UniChar uniChar = 0;
   switch(code) {
     case kVK_UpArrow:
       uniChar = NSUpArrowFunctionKey;
       break;
     case kVK_DownArrow:
@@ skipping 114 matching lines @@
       EditCommands(1, EditCommand("moveToBeginningOfDocument", "")));
   SendNativeKeyEvent(NativeWebKeyboardEvent(arrowUpKeyDown));
   ProcessPendingMessages();
   ExecuteJavaScriptForTests("scroll.textContent = window.pageYOffset");
   output = WebFrameContentDumper::dumpWebViewAsText(view->GetWebView(),
                                                     kMaxOutputCharacters)
                .ascii();
   EXPECT_EQ(kArrowUpNoScroll, output);
 }
 
+// TODO(ekaramad): This test could be removed once we do not send irrelevant
+// IPCs from browser during the time RenderViewImpl is swapped out
+// (https://crbug.com/669219).
+// This test verfies that when RenderViewImpl is swapped out, handling IPCs
+// which need a WebFrameWidget will not lead to a crash.
+TEST_F(RenderViewTest, HandleIPCsInSwappedOutState) {
+  LoadHTML("<input/>");
+
+  // Normally, we have a WebFrameWidget.
+  EXPECT_TRUE(GetWebWidget()->isWebFrameWidget());
+
+  // Swap out the main frame so that the frame widget is destroyed.
+  auto* view = static_cast<RenderViewImpl*>(view_);
+  auto* main_frame = view->GetMainRenderFrame();
+  main_frame->OnMessageReceived(FrameMsg_SwapOut(
+      main_frame->GetRoutingID(), 123, true, FrameReplicationState()));
+
+  // We no longer have a frame widget.
+  EXPECT_FALSE(GetWebWidget()->isWebFrameWidget());
+
+  int routing_id = view->GetRoutingID();
+  // Now simulate some TextInputClientMac IPCs. These will be handled by
+  // RenderWidget which forwards them to the TextInputClientObserver
+  using Range = gfx::Range;
+  using Point = gfx::Point;
+  view->OnMessageReceived(
+      TextInputClientMsg_CharacterIndexForPoint(routing_id, Point()));
+  view->OnMessageReceived(
+      TextInputClientMsg_FirstRectForCharacterRange(routing_id, Range()));
+  view->OnMessageReceived(
+      TextInputClientMsg_StringForRange(routing_id, Range()));
+  view->OnMessageReceived(
+      TextInputClientMsg_CharacterIndexForPoint(routing_id, Point()));
+
+  // Simulate some IME related IPCs.
+  using Text = base::string16;
+  using Underlines = std::vector<blink::WebCompositionUnderline>;
+  view->OnMessageReceived(InputMsg_ImeSetComposition(
+      routing_id, Text(), Underlines(), Range(), 0, 0));
+  view->OnMessageReceived(
+      InputMsg_ImeCommitText(routing_id, Text(), Underlines(), Range(), 0));
+  view->OnMessageReceived(InputMsg_ImeFinishComposingText(routing_id, false));
+}
+
 }  // namespace content