Cronet Fix Channel Write after Close when request is canceled after success.

components/cronet/android/chromium_url_request.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cronet/android/chromium_url_request.h"
 
 #include "base/android/jni_android.h"
 #include "base/android/jni_string.h"
 #include "base/macros.h"
 #include "components/cronet/android/url_request_adapter.h"
@@ skipping 46 matching lines @@
  public:
   JniURLRequestAdapterDelegate(JNIEnv* env, jobject owner) {
     owner_ = env->NewGlobalRef(owner);
   }
 
   void OnResponseStarted(URLRequestAdapter* request_adapter) override {
     JNIEnv* env = base::android::AttachCurrentThread();
     cronet::Java_ChromiumUrlRequest_onResponseStarted(env, owner_);
   }
 
-  void OnBytesRead(URLRequestAdapter* request_adapter) override {
-    int bytes_read = request_adapter->bytes_read();
+  void OnBytesRead(URLRequestAdapter* request_adapter,
+                   int bytes_read) override {
     if (bytes_read != 0) {
       JNIEnv* env = base::android::AttachCurrentThread();
       base::android::ScopedJavaLocalRef<jobject> java_buffer(
           env, env->NewDirectByteBuffer(request_adapter->Data(), bytes_read));
       cronet::Java_ChromiumUrlRequest_onBytesRead(
           env, owner_, java_buffer.obj());
     }
   }
 
   void OnRequestFinished(URLRequestAdapter* request_adapter) override {
@@ skipping 324 matching lines @@
 
 static void DisableRedirects(JNIEnv* env, jobject jcaller,
                              jlong jrequest_adapter) {
   URLRequestAdapter* request_adapter =
       reinterpret_cast<URLRequestAdapter*>(jrequest_adapter);
   if (request_adapter != NULL)
     request_adapter->DisableRedirects();
 }
 
 }  // namespace cronet