Adds NULL check in NotifySessionServiceOfRestoredTabs for

chrome/browser/sessions/session_restore.cc

Index: chrome/browser/sessions/session_restore.cc
diff --git a/chrome/browser/sessions/session_restore.cc b/chrome/browser/sessions/session_restore.cc
index 79fc1cb1a9156966457ce41665be1a280d1e7928..b1bc7e9d3a109b301a53830054c68d0f0102229b 100644
--- a/chrome/browser/sessions/session_restore.cc
+++ b/chrome/browser/sessions/session_restore.cc
@@ -953,6 +953,8 @@ class SessionRestoreImpl : public content::NotificationObserver {
   void NotifySessionServiceOfRestoredTabs(Browser* browser, int initial_count) {
     SessionService* session_service =
         SessionServiceFactory::GetForProfile(profile_);
+    if (!session_service)

[marja, 2012/04/30 18:20:27]

Hmm, SessionServiceFactory calls
ProfileKeyedServiceFactory::GetServiceForProfile with create = true. It can
return NULL if GetProfileForUse returns NULL or
SessionServiceFactory::BuildServiceInstanceFor returns NULL (that cannot
happen).

GetProfileToUse can return NULL if the profile is incognito &&
ServiceRedirectedInIncognito() == false && ServiceHasOwnInstanceInIncognito() ==
false, and those are the defaults (code search doesn't work so much that I could
check if SessionServiceFactory overrides them and I'm sitting in a park :) So,
this can happen if this is called for incognito profiles..

How could it happen in the "service already destroyed" case since create = true?

+      return;
     for (int i = initial_count; i < browser->tab_count(); ++i)
       session_service->TabRestored(browser->GetTabContentsWrapperAt(i),
                                    browser->IsTabPinned(i));