Index: content/renderer/render_view_impl.cc |
diff --git a/content/renderer/render_view_impl.cc b/content/renderer/render_view_impl.cc |
index a23022d868b4d50e97c987b672a53812c5d68694..a888c643ac3094b5fd695157cd253a10fc2a48b3 100644 |
--- a/content/renderer/render_view_impl.cc |
+++ b/content/renderer/render_view_impl.cc |
@@ -4336,6 +4336,11 @@ void RenderViewImpl::DidFlushPaint() { |
// won't change out from under us. |
pepper_delegate_.ViewFlushedPaint(); |
+ // If the RenderWidget is closing down then early-exit, otherwise we'll crash. |
+ // See crbug.com/112921. |
+ if (!webview()) |
+ return; |
+ |
WebFrame* main_frame = webview()->mainFrame(); |
// If we have a provisional frame we are between the start and commit stages |