Weak HTMLMediaElement::m_audioSourceNode reference must be cleared.

third_party/WebKit/Source/core/html/HTMLMediaElement.cpp

 /*
  * Copyright (C) 2007, 2008, 2009, 2010, 2011, 2012, 2013 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 3733 matching lines @@
     ASSERT(code == AbortError || code == NotSupportedError);
 
     for (auto& resolver: m_playResolvers)
         resolver->reject(DOMException::create(code, message));
 
     m_playResolvers.clear();
 }
 
 void HTMLMediaElement::clearWeakMembers(Visitor* visitor)
 {
-    if (!ThreadHeap::isHeapObjectAlive(m_audioSourceNode))
+    if (!ThreadHeap::isHeapObjectAlive(m_audioSourceNode)) {
         getAudioSourceProvider().setClient(nullptr);
+        m_audioSourceNode = nullptr;
+    }
 }
 
 void HTMLMediaElement::AudioSourceProviderImpl::wrap(WebAudioSourceProvider* provider)
 {
     MutexLocker locker(provideInputLock);
 
     if (m_webAudioSourceProvider && provider != m_webAudioSourceProvider)
         m_webAudioSourceProvider->setClient(nullptr);
 
     m_webAudioSourceProvider = provider;
@@ skipping 82 matching lines @@
 
 IntRect HTMLMediaElement::AutoplayHelperClientImpl::absoluteBoundingBoxRect() const
 {
     IntRect result;
     if (LayoutObject* object = m_element->layoutObject())
         result = object->absoluteBoundingBoxRect();
     return result;
 }
 
 } // namespace blink