Don't use SSLStatus from FrameHostMsg_DidCommitProvisionalLoad and instead cache it on the browser …

content/browser/frame_host/render_frame_host_impl.cc

Index: content/browser/frame_host/render_frame_host_impl.cc
diff --git a/content/browser/frame_host/render_frame_host_impl.cc b/content/browser/frame_host/render_frame_host_impl.cc
index 7783a262a27b36201331f3184c5823e7e952f6f8..7d642de4070fcde1f3dfd62b7b35cda40b2659c8 100644
--- a/content/browser/frame_host/render_frame_host_impl.cc
+++ b/content/browser/frame_host/render_frame_host_impl.cc
@@ -2628,6 +2628,24 @@ void RenderFrameHostImpl::SuppressFurtherDialogs() {
   Send(new FrameMsg_SuppressFurtherDialogs(GetRoutingID()));
 }
 
+void RenderFrameHostImpl::SetSSLStatusForPendingNavigate(
+    const GURL& url, const SSLStatus& ssl_status) {
+  pending_navigate_ssl_status_url_ = url;
+  pending_navigate_ssl_status_ = ssl_status;
+}
+
+bool RenderFrameHostImpl::GetSSLStatusForPendingNavigate(
+    const GURL& url, SSLStatus* status) {
+  bool rv = false;
+  if (url == pending_navigate_ssl_status_url_) {
+    *status = pending_navigate_ssl_status_;
+    rv = true;
+  }
+  pending_navigate_ssl_status_url_ = GURL();
+  pending_navigate_ssl_status_ = SSLStatus();
+  return rv;
+}
+
 bool RenderFrameHostImpl::IsSameSiteInstance(
     RenderFrameHostImpl* other_render_frame_host) {
   // As a sanity check, make sure the frame belongs to the same BrowserContext.