<webview>: Speculative fix

content/renderer/child_frame_compositing_helper.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_RENDERER_CHILD_FRAME_COMPOSITING_HELPER_H_
 #define CONTENT_RENDERER_CHILD_FRAME_COMPOSITING_HELPER_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 133 matching lines @@
   uint32 last_output_surface_id_;
   int last_host_id_;
   bool last_mailbox_valid_;
   bool ack_pending_;
   bool software_ack_pending_;
   bool opaque_;
   std::vector<unsigned> unacked_software_frames_;
 
   gfx::Size buffer_size_;
 
+  // The lifetime of this weak pointer should be greater than the lifetime of
+  // other member objects, as they may access this pointer during their
+  // destruction.
+  base::WeakPtr<BrowserPlugin> browser_plugin_;
+  RenderFrameImpl* render_frame_;
+
   scoped_refptr<cc::DelegatedFrameResourceCollection> resource_collection_;
   scoped_refptr<cc::DelegatedFrameProvider> frame_provider_;
 
   scoped_refptr<cc::SolidColorLayer> background_layer_;
   scoped_refptr<cc::TextureLayer> texture_layer_;
   scoped_refptr<cc::DelegatedRendererLayer> delegated_layer_;
   scoped_ptr<blink::WebLayer> web_layer_;
   blink::WebFrame* frame_;
 
-  base::WeakPtr<BrowserPlugin> browser_plugin_;
-  RenderFrameImpl* render_frame_;
-
   DISALLOW_COPY_AND_ASSIGN(ChildFrameCompositingHelper);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_RENDERER_CHILD_FRAME_COMPOSITING_HELPER_H_