Fix crash in P2P IPC host.

content/browser/renderer_host/p2p_sockets_host.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/p2p_sockets_host.h"
 
 #include "content/browser/renderer_host/p2p_socket_host.h"
 #include "content/common/p2p_messages.h"
 
 P2PSocketsHost::P2PSocketsHost() {
 }
 
 P2PSocketsHost::~P2PSocketsHost() {
 }
 
 void P2PSocketsHost::OnChannelClosing() {
   BrowserMessageFilter::OnChannelClosing();
 
   // Since the IPC channel is gone, close pending connections.
-  for (IDMap<P2PSocketHost>::iterator i(&sockets_); !i.IsAtEnd(); i.Advance()) {
+  for (IDMap<P2PSocketHost, IDMapOwnPointer>::iterator i(&sockets_);
+       !i.IsAtEnd(); i.Advance()) {
     sockets_.Remove(i.GetCurrentKey());
   }
 }
 
 void P2PSocketsHost::OnDestruct() const {
   BrowserThread::DeleteOnIOThread::Destruct(this);
 }
 
 bool P2PSocketsHost::OnMessageReceived(const IPC::Message& message,
                                        bool* message_was_ok) {
@@ skipping 41 matching lines @@
   if (!socket) {
     LOG(ERROR) << "Received P2PHostMsg_Send for invalid socket_id.";
     return;
   }
   socket->Send(socket_address, data);
 }
 
 void P2PSocketsHost::OnDestroySocket(const IPC::Message& msg, int socket_id) {
   sockets_.Remove(socket_id);
 }