| Index: content/browser/android/java/gin_java_script_to_java_types_coercion.cc
|
| diff --git a/content/browser/android/java/gin_java_script_to_java_types_coercion.cc b/content/browser/android/java/gin_java_script_to_java_types_coercion.cc
|
| index afc71437195b6d8a12e8d86c082a531643d40054..872af05a472023ce7972fecd2f3e15b790956e3d 100644
|
| --- a/content/browser/android/java/gin_java_script_to_java_types_coercion.cc
|
| +++ b/content/browser/android/java/gin_java_script_to_java_types_coercion.cc
|
| @@ -722,6 +722,10 @@ jvalue CoerceJavaScriptValueToJavaValue(JNIEnv* env,
|
| case base::Value::Type::BINARY:
|
| return CoerceGinJavaBridgeValueToJavaValue(
|
| env, value, target_type, coerce_to_string, object_refs, error);
|
| + case base::Value::Type::DELETED:
|
| + // TODO(crbug.com/697817): This means a use-after-free.
|
| + CHECK(false);
|
| + break;
|
| }
|
| NOTREACHED();
|
| return jvalue();
|
|
|