Fix a crash by search event handler for <input type=search incremental>.

third_party/WebKit/Source/core/html/forms/SearchInputType.cpp

Index: third_party/WebKit/Source/core/html/forms/SearchInputType.cpp
diff --git a/third_party/WebKit/Source/core/html/forms/SearchInputType.cpp b/third_party/WebKit/Source/core/html/forms/SearchInputType.cpp
index 1bc17c57b11fe9caabc67363fd8724d9a61ebec5..3acf576dd1b31c689188f41fab52584e507810b9 100644
--- a/third_party/WebKit/Source/core/html/forms/SearchInputType.cpp
+++ b/third_party/WebKit/Source/core/html/forms/SearchInputType.cpp
@@ -34,6 +34,7 @@
 #include "bindings/core/v8/ExceptionStatePlaceholder.h"
 #include "core/HTMLNames.h"
 #include "core/InputTypeNames.h"
+#include "core/dom/ExecutionContextTask.h"
 #include "core/dom/shadow/ShadowRoot.h"
 #include "core/events/KeyboardEvent.h"
 #include "core/html/HTMLInputElement.h"
@@ -114,7 +115,7 @@ void SearchInputType::startSearchEventTimer()
 
     if (!length) {
         stopSearchEventTimer();
-        element().onSearch();
+        element().document().postTask(BLINK_FROM_HERE, createSameThreadTask(&HTMLInputElement::onSearch, PassRefPtrWillBeRawPtr<HTMLInputElement>(&element())));
         return;
     }