media: Make MediaKeys ref-counted.

media/base/media_keys.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef MEDIA_BASE_MEDIA_KEYS_H_
 #define MEDIA_BASE_MEDIA_KEYS_H_
 
 #include <string>
 #include <vector>
 
 #include "base/basictypes.h"
 #include "base/callback.h"
+#include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/memory/scoped_vector.h"
 #include "media/base/eme_constants.h"
 #include "media/base/media_export.h"
 #include "url/gurl.h"
 
 namespace base {
 class Time;
 }
 
 namespace media {
 
 class CdmContext;
 struct CdmKeyInformation;
+struct MediaKeysTraits;
 
 template <typename... T>
 class CdmPromiseTemplate;
 
 typedef CdmPromiseTemplate<std::string> NewSessionCdmPromise;
 typedef CdmPromiseTemplate<> SimpleCdmPromise;
 typedef ScopedVector<CdmKeyInformation> CdmKeysInfo;
 
-// Performs media key operations.
+// An interface for the Content Decryption Module (CDM) in the Encrypted Media

[ddorwin, 2015/11/03 00:28:50]

This makes it sound like _this_ represents the CDM in the spec. But that is
really WebCDM. Should we be more precise?

[xhwang, 2015/11/03 00:50:29]

Added the "in chromium" part, since "WebCDM" is a Blink interface that
represents the CDM. WDYT?

+// Extensions (EME) spec. See http://w3c.github.io/encrypted-media/#definitions

[ddorwin, 2015/11/03 00:28:50]

http://w3c.github.io/encrypted-media/#cdm

[xhwang, 2015/11/03 00:50:29]

Done.

 //
-// All key operations are called on the renderer thread. Therefore, these calls
-// should be fast and nonblocking; key events should be fired asynchronously.
-class MEDIA_EXPORT MediaKeys{
+// * Ownership
+//
+// This class is ref-counted. However, a ref-count should only be held by:
+// - The owner of the CDM. This is usually some class in the EME stack, e.g.
+//   CdmSessionAdapter in the render process, or MojoCdmService in a non-render
+//   process.
+// - The media player that uses the CDM, to prevent the CDM from being
+//   destructed while still being used by the media player.
+//
+// When binding class methods into callbacks, prefer WeakPtr to using |this|
+// directly to avoid having a ref-count held by the callback.
+//
+// * Thread Safety
+//
+// Most CDM operations happen on one thread. However, it is not uncommon that
+// the media player lives on a different thread and may call into the CDM from
+// that thread. For example, if the CDM supports a Decryptor interface, the
+// Decryptor methods could be called on a different thread. The CDM
+// implementation should make sure it's thread safe for these situations.
+//
+// TODO(xhwang): Rename MediaKeys to ContentDecryptionModule. See
+// http://crbug.com/309237
+
+class MEDIA_EXPORT MediaKeys
+    : public base::RefCountedThreadSafe<MediaKeys, MediaKeysTraits> {
  public:
   // Reported to UMA, so never reuse a value!
   // Must be kept in sync with blink::WebMediaPlayerClient::MediaKeyErrorCode
   // (enforced in webmediaplayer_impl.cc).
   // TODO(jrummell): Can this be moved to proxy_decryptor as it should only be
   // used by the prefixed EME code?
   enum KeyError {
     kUnknownError = 1,
     kClientError,
     // The commented v0.1b values below have never been used.
@@ skipping 29 matching lines @@
   // Type of message being sent to the application.
   // Must be consistent with the values specified in the spec:
   // https://w3c.github.io/encrypted-media/#idl-def-MediaKeyMessageType
   enum MessageType {
     LICENSE_REQUEST,
     LICENSE_RENEWAL,
     LICENSE_RELEASE,
     MESSAGE_TYPE_MAX = LICENSE_RELEASE
   };
 
-  virtual ~MediaKeys();
-
   // Provides a server certificate to be used to encrypt messages to the
   // license server.
   virtual void SetServerCertificate(const std::vector<uint8_t>& certificate,
                                     scoped_ptr<SimpleCdmPromise> promise) = 0;
 
   // Creates a session with |session_type|. Then generates a request with the
   // |init_data_type| and |init_data|.
   // Note:
   // 1. The session ID will be provided when the |promise| is resolved.
   // 2. The generated request should be returned through a SessionMessageCB,
@@ skipping 29 matching lines @@
   // Removes stored session data associated with the session specified by
   // |session_id|.
   virtual void RemoveSession(const std::string& session_id,
                              scoped_ptr<SimpleCdmPromise> promise) = 0;
 
   // Returns the CdmContext associated with |this|, which must NOT be null.
   // Usually the CdmContext is owned by |this|. Caller needs to make sure it is
   // not used after |this| is destructed.
   virtual CdmContext* GetCdmContext() = 0;
 
+  // Deletes |this| on the correct thread. By default |this| is deleted
+  // immediately. Override this method if |this| needs to be deleted on a
+  // specific thread.
+  virtual void DeleteOnCorrectThread() const;
+
  protected:
+  friend class base::RefCountedThreadSafe<MediaKeys, MediaKeysTraits>;
+
   MediaKeys();
+  virtual ~MediaKeys();
 
  private:
   DISALLOW_COPY_AND_ASSIGN(MediaKeys);
 };
 
-// Key event callbacks. See the spec for details:
-// https://dvcs.w3.org/hg/html-media/raw-file/default/encrypted-media/encrypted-media.html#event-summary
+struct MEDIA_EXPORT MediaKeysTraits {
+  // Destroys |media_keys| on the correct thread.
+  static void Destruct(const MediaKeys* media_keys);
+};
 
+// CDM session event callbacks.
+// See the spec for details: http://w3c.github.io/encrypted-media/

[ddorwin, 2015/11/03 00:28:50]

https://w3c.github.io/encrypted-media/#mediakeysession-interface

But do we even need this link since each has a link?

[xhwang, 2015/11/03 00:50:29]

Removed.

+
+// Called when the CDM needs to queue a message event to the session object.
+// See http://w3c.github.io/encrypted-media/#dom-evt-message
 typedef base::Callback<void(const std::string& session_id,
                             MediaKeys::MessageType message_type,
                             const std::vector<uint8_t>& message,
                             const GURL& legacy_destination_url)>
     SessionMessageCB;
 
 // Called when the session specified by |session_id| is closed. Note that the
 // CDM may close a session at any point, such as in response to a CloseSession()
 // call, when the session is no longer needed, or when system resources are
-// lost. See for details: http://w3c.github.io/encrypted-media/#session-close
+// lost. See http://w3c.github.io/encrypted-media/#session-close
 typedef base::Callback<void(const std::string& session_id)> SessionClosedCB;
 
+// TODO(xhwang): Remove after prefixed EME support is removed. See
+// http://crbug.com/249976
 typedef base::Callback<void(const std::string& session_id,
                             MediaKeys::Exception exception,
                             uint32_t system_code,
                             const std::string& error_message)>
     LegacySessionErrorCB;
 
+// Called when there has been a change in the keys in the session or their
+// status. See http://w3c.github.io/encrypted-media/#dom-evt-keystatuseschange
 typedef base::Callback<void(const std::string& session_id,
                             bool has_additional_usable_key,
                             CdmKeysInfo keys_info)> SessionKeysChangeCB;
 
+// Called when the CDM changes the expiration time of a session.
+// See http://w3c.github.io/encrypted-media/#update-expiration
 typedef base::Callback<void(const std::string& session_id,
                             const base::Time& new_expiry_time)>
     SessionExpirationUpdateCB;
 
 }  // namespace media
 
 #endif  // MEDIA_BASE_MEDIA_KEYS_H_