Fix bug in SpdySession

net/spdy/spdy_session.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_session.h"
 
 #include <map>
 
 #include "base/basictypes.h"
 #include "base/bind.h"
@@ skipping 998 matching lines @@
 
   while (!active_streams_.empty()) {
     ActiveStreamMap::iterator it = active_streams_.begin();
     const scoped_refptr<SpdyStream>& stream = it->second;
     LogAbandonedStream(stream, status);
     DeleteStream(stream->stream_id(), status);
   }
 
   while (!created_streams_.empty()) {
     CreatedStreamSet::iterator it = created_streams_.begin();
-    const scoped_refptr<SpdyStream>& stream = *it;
+    const scoped_refptr<SpdyStream> stream = *it;
+    created_streams_.erase(it);
     LogAbandonedStream(stream, status);
     stream->OnClose(status);
-    created_streams_.erase(it);
   }
 
   // We also need to drain the queue.
   while (!write_queue_.empty()) {
     scoped_ptr<SpdyIOBufferProducer> producer(write_queue_.top());
     write_queue_.pop();
     stream_producers_.erase(producer.get());
   }
 }
 
@@ skipping 937 matching lines @@
 SSLClientSocket* SpdySession::GetSSLClientSocket() const {
   if (!is_secure_)
     return NULL;
   SSLClientSocket* ssl_socket =
       reinterpret_cast<SSLClientSocket*>(connection_->socket());
   DCHECK(ssl_socket);
   return ssl_socket;
 }
 
 }  // namespace net