ChangeLog

2017-11-28  Youenn Fablet  <youenn@apple.com>

        NetworkCache::Storage should protect itself when removing operations from its maps

        https://bugs.webkit.org/show_bug.cgi?id=180118

        Reviewed by NOBODY (OOPS!).

        The operations can contain ref to the Storage object and removing them from the map may destroy the Storage object

        * NetworkProcess/cache/NetworkCacheStorage.cpp:

        (WebKit::NetworkCache::Storage::finishReadOperation):

        (WebKit::NetworkCache::Storage::finishWriteOperation):

        (WebKit::NetworkCache::Storage::traverse):

2017-11-27  Youenn Fablet  <youenn@apple.com>

        Register Documents as ServiceWorker clients to the StorageProcess

Source/WebKit/NetworkProcess/cache/NetworkCacheStorage.cpp

@@void Storage::finishReadOperation(ReadOperation& readOperation)

        else if (!readOperation.isCanceled)

            remove(readOperation.key);

669 auto protectedThis = makeRef(*this);

670

        ASSERT(m_activeReadOperations.contains(&readOperation));

        m_activeReadOperations.remove(&readOperation);

@@void Storage::finishWriteOperation(WriteOperation& writeOperation)

    if (--writeOperation.activeCount)

        return;

799 auto protectedThis = makeRef(*this);

800

    m_activeWriteOperations.remove(&writeOperation);

    dispatchPendingWriteOperations();

@@void Storage::traverse(const String& type, TraverseFlags flags, TraverseHandler&

        }

        RunLoop::main().dispatch([this, &traverseOperation] {

            traverseOperation.handler(nullptr, { });

            auto protectedThis = makeRef(*this);

            m_activeTraverseOperations.remove(&traverseOperation);

        });

    });