Fix network crash.

mojo/services/network/url_loader_impl.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/services/network/url_loader_impl.h"
 
 #include <memory>
 
 #include "base/memory/scoped_vector.h"
 #include "base/message_loop/message_loop.h"
@@ skipping 371 matching lines @@
 
   URLResponsePtr response = MakeURLResponse(url_request);
   response->body = data_pipe.consumer_handle.Pass();
 
   // Build the body fetcher.
   std::unique_ptr<BodyFetcher> body_fetcher(
       new BodyFetcher(this, ++current_fetcher_id_, url_request_.Pass(),
                       data_pipe.producer_handle.Pass()));
 
   SendResponse(response.Pass());
-  body_fetcher->Start();
   body_fetchers_.push_back(std::move(body_fetcher));
+  body_fetchers_.back()->Start();
 }
 
 void URLLoaderImpl::OnReadCompleted(net::URLRequest* url_request,
                                     int bytes_read) {
   // This should never be called on this object.
   DCHECK(false);
 }
 
 void URLLoaderImpl::SendError(
     int error_code,
@@ skipping 155 matching lines @@
   if ((*it)->id() == current_fetcher_id_) {
     last_status_ = fetcher->QueryStatus();
     last_status_->is_loading = false;
   }
   body_fetchers_.erase(it);
   if (body_fetchers_.empty() and !binding_.is_bound())
     delete this;
 }
 
 }  // namespace mojo