tree 13c9270e51364ecd4fa3e5f96a2a14ab685c6af5
parent 40a0d587a65320cba1eab074774740c2f7a8a67b
author lfg <lfg@chromium.org> 1480524745 -0800
committer Commit bot <commit-bot@chromium.org> 1480524984 +0000

Fix UaF in RenderFrameImpl::OnBeforeUnload.

BUG=666714

Review-Url: https://codereview.chromium.org/2514323003
Cr-Commit-Position: refs/heads/master@{#434226}
(cherry picked from commit 0dd441a0007aa46917779e782ee9094f111a02b3)

TBR=creis@chromium.org,thestig@chromium.org
NOTRY=true
NOPRESUBMIT=true

Review-Url: https://codereview.chromium.org/2541073002
Cr-Commit-Position: refs/branch-heads/2924@{#187}
Cr-Branched-From: 3a87aecc31cd1ffe751dd72c04e5a96a1fc8108a-refs/heads/master@{#433059}