Index: content/browser/frame_host/render_frame_host_impl.cc |
diff --git a/content/browser/frame_host/render_frame_host_impl.cc b/content/browser/frame_host/render_frame_host_impl.cc |
index 089bd20f4e4c705bccc4fd996784c4f2707ed96c..97a01f3c6f764582613a052d37fb6502e02b4af0 100644 |
--- a/content/browser/frame_host/render_frame_host_impl.cc |
+++ b/content/browser/frame_host/render_frame_host_impl.cc |
@@ -1777,6 +1777,13 @@ void RenderFrameHostImpl::OnBeginNavigation( |
void RenderFrameHostImpl::OnDispatchLoad() { |
CHECK(SiteIsolationPolicy::AreCrossProcessFramesPossible()); |
+ |
+ // Don't forward the load event if this RFH is pending deletion. This can |
+ // happen in a race where this RenderFrameHost finishes loading just after |
+ // the frame navigates away. See https://crbug.com/626802. |
+ if (!is_active()) |
+ return; |
+ |
// Only frames with an out-of-process parent frame should be sending this |
// message. |
RenderFrameProxyHost* proxy = |