Temporarily CHECK use after free in Value

base/trace_event/trace_event_argument.cc

 // Copyright (c) 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/trace_event/trace_event_argument.h"
 
 #include <stdint.h>
 
 #include <utility>
 
@@ skipping 274 matching lines @@
     } break;
 
     case base::Value::Type::LIST: {
       const ListValue* list_value;
       value.GetAsList(&list_value);
       BeginArrayWithCopiedName(name);
       for (const auto& base_value : *list_value)
         AppendBaseValue(*base_value);
       EndArray();
     } break;
+
+    case base::Value::Type::DELETED:
+      // TODO(crbug.com/697817): This means |value| is used after free.
+      CHECK(false);
+      return;
   }
 }
 
 void TracedValue::AppendBaseValue(const base::Value& value) {
   DCHECK_CURRENT_CONTAINER_IS(kStackTypeArray);
   switch (value.GetType()) {
     case base::Value::Type::NONE:
     case base::Value::Type::BINARY:
       NOTREACHED();
       break;
@@ skipping 34 matching lines @@
     } break;
 
     case base::Value::Type::LIST: {
       const ListValue* list_value;
       value.GetAsList(&list_value);
       BeginArray();
       for (const auto& base_value : *list_value)
         AppendBaseValue(*base_value);
       EndArray();
     } break;
+
+    case base::Value::Type::DELETED:
+      // TODO(crbug.com/697817): This means |value| is used after free.
+      CHECK(false);
+      return;
   }
 }
 
 std::unique_ptr<base::Value> TracedValue::ToBaseValue() const {
   std::unique_ptr<DictionaryValue> root(new DictionaryValue);
   DictionaryValue* cur_dict = root.get();
   ListValue* cur_list = nullptr;
   std::vector<Value*> stack;
   PickleIterator it(pickle_);
   const char* type;
@@ skipping 105 matching lines @@
     TraceEventMemoryOverhead* overhead) {
   overhead->Add("TracedValue",
                 /* allocated size */
                 pickle_.GetTotalAllocatedSize(),
                 /* resident size */
                 pickle_.size());
 }
 
 }  // namespace trace_event
 }  // namespace base