Fix 99596.

media/filters/ffmpeg_demuxer.cc

Index: media/filters/ffmpeg_demuxer.cc
diff --git a/media/filters/ffmpeg_demuxer.cc b/media/filters/ffmpeg_demuxer.cc
index f59c665a0ed35d73fea6e9fa8c34e02b86108bd6..c9d9e9e79ae16a25ff37775dad62e2eafe806034 100644
--- a/media/filters/ffmpeg_demuxer.cc
+++ b/media/filters/ffmpeg_demuxer.cc
@@ -160,6 +160,14 @@ void FFmpegDemuxerStream::Read(const ReadCallback& read_callback) {
   DCHECK(!read_callback.is_null());
 
   base::AutoLock auto_lock(lock_);
+  // Don't accept any additional reads if we've been told to stop.
+  // The demuxer_ may have been destroyed in the pipleine thread.
+  //
+  // TODO(scherkus): it would be cleaner if we replied with an error message.
+  if (stopped_) {
+    return;

[acolwell GONE FROM CHROMIUM, 2011/10/14 21:37:35]

I think it would be better to return an EndOfStream buffer in this case. I don't
remember the exact situation, but I believe we can hang if we just drop the
callbacks.

[ddorwin, 2011/10/14 23:41:54]

Okay. I suppose we should be doing that in ReadTask() below too.

+  }
+
   if (!buffer_queue_.empty()) {
     // Dequeue a buffer send back.
     scoped_refptr<Buffer> buffer = buffer_queue_.front();