Temporarily CHECK use after free in Value

components/policy/core/browser/android/policy_converter.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/policy/core/browser/android/policy_converter.h"
 
 #include <utility>
 #include <vector>
 
 #include "base/android/jni_android.h"
@@ skipping 158 matching lines @@
     case base::Value::Type::LIST: {
       std::string string_value;
       if (value->GetAsString(&string_value)) {
         std::unique_ptr<base::Value> decoded_value =
             base::JSONReader::Read(string_value);
         if (decoded_value)
           return decoded_value;
       }
       return value;
     }
+    case base::Value::Type::DELETED: {
+      // TODO(crbug.com/697817): This means a use-after-free.
+      CHECK(false);
+      return nullptr;
+    }
   }
 
   NOTREACHED();
   return std::unique_ptr<base::Value>();
 }
 
 // static
 bool PolicyConverter::Register(JNIEnv* env) {
   return RegisterNativesImpl(env);
 }
 
 void PolicyConverter::SetPolicyValue(const std::string& key,
                                      std::unique_ptr<base::Value> value) {
   const Schema schema = policy_schema_->GetKnownProperty(key);
   const PolicyNamespace ns(POLICY_DOMAIN_CHROME, std::string());
   policy_bundle_->Get(ns).Set(
       key, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_MACHINE, POLICY_SOURCE_PLATFORM,
       ConvertValueToSchema(std::move(value), schema), nullptr);
 }
 
 }  // namespace android
 }  // namespace policy