InstantExtended: Fixing a crash when the stale timer could fire after InstantController is deleted.

chrome/browser/ui/search/instant_loader.cc

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/search/instant_loader.h"
 
 #include "chrome/browser/content_settings/tab_specific_content_settings.h"
 #include "chrome/browser/extensions/api/web_navigation/web_navigation_api.h"
 #include "chrome/browser/favicon/favicon_tab_helper.h"
 #include "chrome/browser/history/history_tab_helper.h"
@@ skipping 103 matching lines @@
                      &contents_->GetController()));
 #endif
 
   // When the WebContents finishes loading it should be checked to ensure that
   // it is in the instant process.
   registrar_.Add(this, content::NOTIFICATION_LOAD_COMPLETED_MAIN_FRAME,
                  content::Source<content::WebContents>(contents_.get()));
 }
 
 scoped_ptr<content::WebContents> InstantLoader::ReleaseContents() {
+  stale_page_timer_.Stop();
   contents_->SetDelegate(NULL);
 
   // Undo tab helper work done in SetContents().
 
   BlockedContentTabHelper::FromWebContents(contents())->
       SetAllContentsBlocked(false);
   TabSpecificContentSettings::FromWebContents(contents())->
       SetPopupsBlocked(false);
 
   CoreTabHelper::FromWebContents(contents())->set_delegate(NULL);
@@ skipping 94 matching lines @@
 
 bool InstantLoader::OnGoToEntryOffset(int /* offset */) {
   return false;
 }
 
 content::WebContents* InstantLoader::OpenURLFromTab(
     content::WebContents* source,
     const content::OpenURLParams& params) {
   return delegate_->OpenURLFromTab(source, params);
 }