Retrieve NTP thumbnail URLs from the right frame

chrome/renderer/chrome_content_renderer_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/chrome_content_renderer_client.h"
 
 #include <memory>
 #include <utility>
 
 #include "base/bind.h"
@@ skipping 1135 matching lines @@
   if (ChromeExtensionsRendererClient::GetInstance()->WillSendRequest(
           frame, transition_type, url, new_url)) {
     return true;
   }
 #endif
 
   if (!url.protocolIs(chrome::kChromeSearchScheme))
     return false;
 
   SearchBox* search_box =
-      SearchBox::Get(content::RenderFrame::FromWebFrame(frame));
+      SearchBox::Get(content::RenderFrame::FromWebFrame(frame->localRoot()));
   if (search_box) {
     // Note: this GURL copy could be avoided if host() were added to WebURL.
     GURL gurl(url);
     SearchBox::ImageSourceType type = SearchBox::NONE;
     if (gurl.host_piece() == chrome::kChromeUIFaviconHost)
       type = SearchBox::FAVICON;
     else if (gurl.host_piece() == chrome::kChromeUILargeIconHost)
       type = SearchBox::LARGE_ICON;
     else if (gurl.host_piece() == chrome::kChromeUIFallbackIconHost)
       type = SearchBox::FALLBACK_ICON;
@@ skipping 343 matching lines @@
     std::vector<base::SchedulerWorkerPoolParams>* params_vector,
     base::TaskScheduler::WorkerPoolIndexForTraitsCallback*
         index_to_traits_callback) {
   DCHECK(params_vector);
   DCHECK(index_to_traits_callback);
   // If this call fails, content will fall back to the default params.
   *params_vector = task_scheduler_util::GetRendererWorkerPoolParams();
   *index_to_traits_callback =
       base::Bind(&task_scheduler_util::RendererWorkerPoolIndexForTraits);
 }