Properly fix use-after-free of InputTypeViews when the type attribute is modified in the change eve…

Properly fix use-after-free of InputTypeViews when the type attribute is modified in the change event handler.

Follow-up to https://codereview.chromium.org/1366983003/

R=tkent@chromium.org,esprehn@chromium.org
BUG=536917
Committed: https://crrev.com/7338ad634e98e80404df1fa0ea5dd2d198dbdd95
Cr-Commit-Position: refs/heads/master@{#351244}

[Oliver Chang, 2015-09-28 22:58:20]

ptal.

[esprehn, 2015-09-28 23:15:19]

lgtm

[Oliver Chang, 2015-09-28 23:20:48]

The CQ bit was checked by ochang@chromium.org

[commit-bot: I haz the power, 2015-09-28 23:21:14]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1377673002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1377673002/1

[commit-bot: I haz the power, 2015-09-28 23:47:19]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2015-09-28 23:47:20]

Try jobs failed on following builders:
  android_clang_dbg_recipe on tryserver.chromium.linux (JOB_FAILED,
http://build.chromium.org/p/tryserver.chromium.linux/builders/android_clang_d...)

[Oliver Chang, 2015-09-29 00:01:08]

The CQ bit was checked by ochang@chromium.org

[commit-bot: I haz the power, 2015-09-29 00:01:38]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1377673002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1377673002/1

[commit-bot: I haz the power, 2015-09-29 02:29:24]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2015-09-29 02:30:36]

Patchset 1 (id:??) landed as
https://crrev.com/7338ad634e98e80404df1fa0ea5dd2d198dbdd95
Cr-Commit-Position: refs/heads/master@{#351244}

[Lei Zhang, 2015-09-29 02:47:01]

BTW, this broke oilpan, and oilpan is now on the main waterfall, but without
trybots.