Fix a use-after-free of SaveFileCreateInfo in SaveFileManager.

content/browser/download/save_file_manager.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // Objects that handle file operations for saving files, on the file thread.
 //
 // The SaveFileManager owns a set of SaveFile objects, each of which connects
 // with a SaveItem object which belongs to one SavePackage and runs on the file
 // thread for saving data in order to avoid disk activity on either network IO
 // thread or the UI thread. It coordinates the notifications from the network
@@ skipping 143 matching lines @@
   // Look up one in-progress saving item according to save item id.
   SaveFile* LookupSaveFile(int save_item_id);
 
   // Help function for sending notification of canceling specific request.
   void SendCancelRequest(int save_item_id);
 
   // Notifications sent from the file thread and run on the UI thread.
 
   // Lookup the SaveManager for this WebContents' saving browser context and
   // inform it the saving job has been started.
-  void OnStartSave(const SaveFileCreateInfo* info);
+  void OnStartSave(const SaveFileCreateInfo info);
   // Update the SavePackage with the current state of a started saving job.
   // If the SavePackage for this saving job is gone, cancel the request.
   void OnUpdateSaveProgress(int save_item_id,
                             int64 bytes_so_far,
                             bool write_success);
   // Update the SavePackage with the finish state, and remove the request
   // tracking entries.
   void OnSaveFinished(int save_item_id, int64 bytes_so_far, bool is_success);
   // Notifies SavePackage that the whole page saving job is finished.
   void OnFinishSavePageJob(int render_process_id,
@@ skipping 28 matching lines @@
   // SavePackageMap maps save item ids to their SavePackage.
   typedef base::hash_map<int, SavePackage*> SavePackageMap;
   SavePackageMap packages_;
 
   DISALLOW_COPY_AND_ASSIGN(SaveFileManager);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_DOWNLOAD_SAVE_FILE_MANAGER_H_