(CANCELED) Forbid GC during copyToVector()

third_party/WebKit/Source/wtf/HashCountedSet.h

 /*
  * Copyright (C) 2005, 2006, 2008 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ skipping 144 matching lines @@
 }
 
 template <typename Value,
           typename HashFunctions,
           typename Traits,
           typename Allocator,
           typename VectorType>
 inline void copyToVector(
     const HashCountedSet<Value, HashFunctions, Traits, Allocator>& collection,
     VectorType& vector) {
-  {
-    // Disallow GC across resize allocation, see crbug.com/568173
-    typename VectorType::GCForbiddenScope scope;
-    vector.resize(collection.size());
-  }
+  // Disallow GC across resize and iterations, see crbug.com/568173
+  typename VectorType::GCForbiddenScope scope;
+
+  vector.resize(collection.size());
 
   auto it = collection.begin();
   auto end = collection.end();
   for (unsigned i = 0; it != end; ++it, ++i)
     vector[i] = (*it).key;
 }
 
 template <typename T, typename U, typename V, typename W>
 inline Vector<T> HashCountedSet<T, U, V, W>::asVector() const {
   Vector<T> vector;
   copyToVector(*this, vector);
   return vector;
 }
 
 }  // namespace WTF
 
 using WTF::HashCountedSet;
 
 #endif  // WTF_HashCountedSet_h