Fix two crash and potential leak&crash

chrome/browser/ui/views/notifications/balloon_view.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/views/notifications/balloon_view.h"
 
 #include <algorithm>
 #include <vector>
 
 #include "base/bind.h"
@@ skipping 106 matching lines @@
   views::BubbleBorder* bubble_border =
       new views::BubbleBorder(views::BubbleBorder::FLOAT,
                               views::BubbleBorder::NO_SHADOW);
   set_border(bubble_border);
 }
 
 BalloonViewImpl::~BalloonViewImpl() {
 }
 
 void BalloonViewImpl::Close(bool by_user) {
+  animation_->Stop();
+  html_contents_->Shutdown();
+  // Detach contents from widget before then close.
+  // This is necessary because a widget may be deleted
+  // after this when chrome is shutting down.
+  html_container_->GetRootView()->RemoveAllChildViews(true);
+  html_container_->Close();
+  frame_container_->GetRootView()->RemoveAllChildViews(true);
+  frame_container_->Close();
+  // Post the tast at the end to sure this this WidgetDelegate
+  // instance is avaiable when Widget::CloseNow gets called.
   MessageLoop::current()->PostTask(FROM_HERE,
                                    base::Bind(&BalloonViewImpl::DelayedClose,
                                               method_factory_.GetWeakPtr(),
                                               by_user));
 }
 
 gfx::Size BalloonViewImpl::GetSize() const {
   // BalloonView has no size if it hasn't been shown yet (which is when
   // balloon_ is set).
   if (!balloon_)
@@ skipping 32 matching lines @@
 }
 
 void BalloonViewImpl::ButtonPressed(views::Button* sender,
                                     const views::Event&) {
   // The only button currently is the close button.
   DCHECK(sender == close_button_);
   Close(true);
 }
 
 void BalloonViewImpl::DelayedClose(bool by_user) {
-  html_contents_->Shutdown();
-  html_container_->CloseNow();
-  // The BalloonViewImpl has to be detached from frame_container_ now
-  // because CloseNow on linux/views destroys the view hierachy
-  // asynchronously.
-  frame_container_->GetRootView()->RemoveAllChildViews(true);
-  frame_container_->CloseNow();
   balloon_->OnClose(by_user);
 }
 
 gfx::Size BalloonViewImpl::GetPreferredSize() {
   return gfx::Size(1000, 1000);
 }
 
 void BalloonViewImpl::SizeContentsWindow() {
   if (!html_container_ || !frame_container_)
     return;
@@ skipping 332 matching lines @@
     return;
   }
 
   // If the renderer process attached to this balloon is disconnected
   // (e.g., because of a crash), we want to close the balloon.
   notification_registrar_.Remove(
       this, chrome::NOTIFICATION_NOTIFY_BALLOON_DISCONNECTED,
       content::Source<Balloon>(balloon_));
   Close(false);
 }