[Android] Check for Java object types covariance in Java Bridge

content/browser/android/java/gin_java_method_invocation_helper.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/android/java/gin_java_method_invocation_helper.h"
 
 #include <unistd.h>
 
 #include "base/android/event_log.h"
 #include "base/android/jni_android.h"
@@ skipping 129 matching lines @@
   if (method->is_static()) {
     cls = object_->GetLocalClassRef(env);
   } else {
     obj = object_->GetLocalRef(env);
   }
   if (obj.is_null() && cls.is_null()) {
     SetInvocationError(kGinJavaBridgeObjectIsGone);
     return;
   }
 
+  GinJavaBridgeError coercion_error = kGinJavaBridgeNoError;
   std::vector<jvalue> parameters(method->num_parameters());
   for (size_t i = 0; i < method->num_parameters(); ++i) {
     const base::Value* argument;
     arguments_->Get(i, &argument);
-    parameters[i] = CoerceJavaScriptValueToJavaValue(
-        env, argument, method->parameter_type(i), true, object_refs_);
+    parameters[i] = CoerceJavaScriptValueToJavaValue(env,
+                                                     argument,
+                                                     method->parameter_type(i),
+                                                     true,
+                                                     object_refs_,
+                                                     &coercion_error);
   }
-  if (method->is_static()) {
-    InvokeMethod(
-        NULL, cls.obj(), method->return_type(), method->id(), &parameters[0]);
+
+  if (coercion_error == kGinJavaBridgeNoError) {
+    if (method->is_static()) {
+      InvokeMethod(
+          NULL, cls.obj(), method->return_type(), method->id(), &parameters[0]);
+    } else {
+      InvokeMethod(
+          obj.obj(), NULL, method->return_type(), method->id(), &parameters[0]);
+    }
   } else {
-    InvokeMethod(
-        obj.obj(), NULL, method->return_type(), method->id(), &parameters[0]);
+    SetInvocationError(coercion_error);
   }
 
   // Now that we're done with the jvalue, release any local references created
   // by CoerceJavaScriptValueToJavaValue().
   for (size_t i = 0; i < method->num_parameters(); ++i) {
     ReleaseJavaValueIfRequired(env, &parameters[i], method->parameter_type(i));
   }
 }
 
 void GinJavaMethodInvocationHelper::SetInvocationError(
@@ skipping 162 matching lines @@
   }
   // This is for all cases except JavaType::TypeObject.
   if (!base::android::ClearException(env)) {
     SetPrimitiveResult(result_wrapper);
   } else {
     SetInvocationError(kGinJavaBridgeJavaExceptionRaised);
   }
 }
 
 }  // namespace content