Candidate fix for PointerEvent-OOPIF combination not working.

third_party/WebKit/Source/web/WebPagePopupImpl.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 183 matching lines @@
     if (m_popup->m_layerTreeView)
       m_popup->m_layerTreeView->setHaveScrollEventHandlers(hasEventHandlers);
   }
 
   bool hasScrollEventHandlers() const override {
     if (m_popup->m_layerTreeView)
       return m_popup->m_layerTreeView->haveScrollEventHandlers();
     return false;
   }
 
-  void setTouchAction(TouchAction touchAction) override {
-    if (WebViewClient* client = m_popup->m_webView->client())
+  void setTouchAction(LocalFrame* frame, TouchAction touchAction) override {
+    DCHECK(frame);
+    WebLocalFrameImpl* webFrame = WebLocalFrameImpl::fromFrame(frame);
+    WebFrameWidgetBase* widget = webFrame->localRoot()->frameWidget();
+    if (!widget)
+      return;
+
+    if (WebWidgetClient* client = widget->client())
       client->setTouchAction(static_cast<WebTouchAction>(touchAction));
   }
 
   void attachRootGraphicsLayer(GraphicsLayer* graphicsLayer,
                                LocalFrame* localRoot) override {
     m_popup->setRootGraphicsLayer(graphicsLayer);
   }
 
   void postAccessibilityNotification(
       AXObject* obj,
@@ skipping 376 matching lines @@
   // A WebPagePopupImpl instance usually has two references.
   //  - One owned by the instance itself. It represents the visible widget.
   //  - One owned by a WebViewImpl. It's released when the WebViewImpl ask the
   //    WebPagePopupImpl to close.
   // We need them because the closing operation is asynchronous and the widget
   // can be closed while the WebViewImpl is unaware of it.
   return adoptRef(new WebPagePopupImpl(client)).leakRef();
 }
 
 }  // namespace blink