RenderWidgetHostViewChildFrame's called a virtual in its ctor.

content/browser/frame_host/render_widget_host_view_child_frame.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/render_widget_host_view_child_frame.h"
 
 #include <algorithm>
 #include <utility>
 #include <vector>
 
@@ skipping 21 matching lines @@
 #include "content/common/view_messages.h"
 #include "content/public/browser/guest_mode.h"
 #include "content/public/browser/render_process_host.h"
 #include "gpu/ipc/common/gpu_messages.h"
 #include "third_party/WebKit/public/web/WebInputEvent.h"
 #include "ui/gfx/geometry/size_conversions.h"
 #include "ui/gfx/geometry/size_f.h"
 
 namespace content {
 
+RenderWidgetHostViewChildFrame* RenderWidgetHostViewChildFrame::Create(

[clamy, 2016/10/05 12:35:53]

Please add a // static comment above the method.

[dtapuska, 2016/10/05 14:25:00]

Done.

+    RenderWidgetHost* widget) {
+  RenderWidgetHostViewChildFrame* view =
+      new RenderWidgetHostViewChildFrame(widget);
+  view->Init();
+  return view;
+}
+
 RenderWidgetHostViewChildFrame::RenderWidgetHostViewChildFrame(
     RenderWidgetHost* widget_host)
     : host_(RenderWidgetHostImpl::From(widget_host)),
       frame_sink_id_(AllocateFrameSinkId()),
       next_surface_sequence_(1u),
       last_compositor_frame_sink_id_(0),
       current_surface_scale_factor_(1.f),
       ack_pending_count_(0),
       frame_connector_(nullptr),
       begin_frame_source_(nullptr),
       weak_factory_(this) {
   id_allocator_.reset(new cc::SurfaceIdAllocator(frame_sink_id_));
   GetSurfaceManager()->RegisterFrameSinkId(frame_sink_id_);
   RegisterFrameSinkId();
 
-  host_->SetView(this);
   GetTextInputManager();

[kenrb, 2016/10/05 14:10:40]

Would it make sense to move these other method calls into Init(), to avoid
similar bugs in future?

[dtapuska, 2016/10/05 14:25:00]

done.

 }
 
 RenderWidgetHostViewChildFrame::~RenderWidgetHostViewChildFrame() {
   if (!surface_id_.is_null())
     surface_factory_->Destroy(surface_id_);
 
   if (GetSurfaceManager())
     GetSurfaceManager()->InvalidateFrameSinkId(frame_sink_id_);
 }
 
+void RenderWidgetHostViewChildFrame::Init() {
+  host_->SetView(this);
+}
+
 void RenderWidgetHostViewChildFrame::SetCrossProcessFrameConnector(
     CrossProcessFrameConnector* frame_connector) {
   if (frame_connector_ == frame_connector)
     return;
 
   if (frame_connector_) {
     if (!parent_frame_sink_id_.is_null()) {
       GetSurfaceManager()->UnregisterFrameSinkHierarchy(parent_frame_sink_id_,
                                                         frame_sink_id_);
     }
@@ skipping 634 matching lines @@
 
 bool RenderWidgetHostViewChildFrame::IsChildFrameForTesting() const {
   return true;
 }
 
 cc::SurfaceId RenderWidgetHostViewChildFrame::SurfaceIdForTesting() const {
   return surface_id_;
 };
 
 }  // namespace content