Fix process reuse for dedicated processes when over process limit.

content/browser/child_process_security_policy_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 
 #include <map>
 #include <memory>
 #include <set>
@@ skipping 158 matching lines @@
   bool CanCopyIntoFileSystemFile(int child_id,
                                  const storage::FileSystemURL& filesystem_url);
   bool CanDeleteFileSystemFile(int child_id,
                                const storage::FileSystemURL& filesystem_url);
 
   // Returns true if the specified child_id has been granted ReadRawCookies.
   bool CanReadRawCookies(int child_id);
 
   // Sets the process as only permitted to use and see the cookies for the
   // given origin.
-  // Origin lock is applied only if the --site-per-process flag is used.
   void LockToOrigin(int child_id, const GURL& gurl);
 
+  // Used to indicate the result of comparing a process's origin lock to
+  // another value:
+  enum class CheckOriginLockResult {
+    // The process does not exist, or it has no origin lock.
+    NO_LOCK,
+    // The process has an origin lock and it matches the passed-in value.
+    HAS_EQUAL_LOCK,
+    // The process has an origin lock and it does not match the passed-in
+    // value.
+    HAS_WRONG_LOCK,
+  };
+
+  // Check the origin lock of the process specified by |child_id| against
+  // |site_url|.  See the definition of |CheckOriginLockResult| for possible
+  // returned values.
+  CheckOriginLockResult CheckOriginLock(int child_id, const GURL& site_url);
+
   // Register FileSystem type and permission policy which should be used
   // for the type.  The |policy| must be a bitwise-or'd value of
   // storage::FilePermissionPolicy.
   void RegisterFileSystemPermissionPolicy(storage::FileSystemType type,
                                           int policy);
 
   // Returns true if sending system exclusive messages is allowed.
   bool CanSendMidiSysExMessage(int child_id);
 
   // Add an origin to the list of origins that require process isolation.
@@ skipping 120 matching lines @@
   // eTLD+1. Each of these origins requires a dedicated process.  This set is
   // protected by |lock_|.
   std::set<url::Origin> isolated_origins_;
 
   DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_