Unwind PDFObject destructor calls into heap instead of stack. Notice: the order of the destructors …

src/pdf/SkPDFDevice.cpp

Index: src/pdf/SkPDFDevice.cpp
===================================================================
--- src/pdf/SkPDFDevice.cpp	(revision 7963)
+++ src/pdf/SkPDFDevice.cpp	(working copy)
@@ -644,8 +644,14 @@
     fFontResources.unrefAll();
     fShaderResources.unrefAll();
     SkSafeUnref(fAnnotations);
-    SkSafeUnref(fResourceDict);
 
+    // Transfer ownership of fResourceDict to list.
+    SkTDArray<SkPDFObject*> list;
+    list.push(fResourceDict);
+    fResourceDict = NULL;
+
+    SkPDFObject::safeUnref(&list);
+
     if (clearFontUsage) {
         fFontGlyphUsage->reset();
     }