Each side of the language barrier maintains a map of reference numbers to objects. Each entry has a reference count that exactly matches the number of active proxy objects on the other side. When a reference crosses the barrier, the count is incremented and when a proxy finalizer is run, the count is decremented. If the count reaches 0, the reference number and its object are removed from the map. There is a possibility that a reference number is passed to the other side, and the last proxy is then immediately garbage collected and finalized. The reference counter then reaches 0 before the other side has converted the reference number to its object, crashing the program. This is possible in both Go/Java/ObjC but is most likely to happen in ObjC because its own automatic reference count runtime frees objects as soon as they are statically never referenced again. Fix the race by always incrementing the reference count before sending a reference across the barrier. When converting the reference back into an object on the other side, decrement the counter again. Only the new ObjC test fails without this fix, but I left the Java counterpart in for good measure. Change-Id: I92743aabec275b4a5b82b952052e7e284872ce02 Reviewed-on: https://go-review.googlesource.com/21311 Reviewed-by: Hyang-Ah Hana Kim <hyangah@gmail.com>
22 lines
873 B
Go
22 lines
873 B
Go
// Copyright 2014 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Package seq implements the machine-dependent seq serialization format.
|
|
//
|
|
// Implementations of Transact and FinalizeRef are provided by a
|
|
// specific foreign language binding package, e.g. go.mobile/bind/java.
|
|
//
|
|
// Designed only for use by the code generated by gobind. Don't try to
|
|
// use this directly.
|
|
package seq // import "golang.org/x/mobile/bind/seq"
|
|
|
|
import _ "golang.org/x/mobile/internal/mobileinit"
|
|
|
|
// FinalizeRef is the finalizer used on foreign objects.
|
|
var FinalizeRef func(ref *Ref)
|
|
|
|
// IncRef increments the foreign reference count for ref while it is in transit.
|
|
// The count is decremented after the ref is received and translated on the foreign side.
|
|
var IncForeignRef func(refnum int32)
|