Make WebRtcLoggingHandlerHost tolerant of out-of-order messages.

chrome/browser/media/webrtc_logging_handler_host.cc

Index: chrome/browser/media/webrtc_logging_handler_host.cc
diff --git a/chrome/browser/media/webrtc_logging_handler_host.cc b/chrome/browser/media/webrtc_logging_handler_host.cc
index bed00cb8757700aefc32b44e7e6485991aaf0205..66f038ac2dc421ca66d79bcfdc424db9f062ccfa 100644
--- a/chrome/browser/media/webrtc_logging_handler_host.cc
+++ b/chrome/browser/media/webrtc_logging_handler_host.cc
@@ -219,6 +219,14 @@ bool WebRtcLoggingHandlerHost::OnMessageReceived(const IPC::Message& message,
 
 void WebRtcLoggingHandlerHost::OnLoggingStoppedInRenderer() {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
+  if (logging_state_ != STOPPING) {
+    // If an out-of-order response is received, stop_callback_ may be invalid,
+    // and must not be invoked.
+    DLOG(ERROR) << "OnLoggingStoppedInRenderer invoked in state "
+                << logging_state_;
+    BadMessageReceived();
+    return;
+  }
   logging_state_ = STOPPED;
   FireGenericDoneCallback(&stop_callback_, true, "");
 }