Don't access .spec on a !is_valid PUSH_PROMISE URL.

net/spdy/spdy_session.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_session.h"
 
 #include <algorithm>
 #include <limits>
 #include <map>
 #include <utility>
@@ skipping 2573 matching lines @@
     return;
   }
 
   streams_pushed_count_++;
 
   // TODO(mbelshe): DCHECK that this is a GET method?
 
   // Verify that the response had a URL for us.
   GURL gurl = GetUrlFromHeaderBlock(headers);
   if (!gurl.is_valid()) {
-    EnqueueResetStreamFrame(stream_id, request_priority,
-                            ERROR_CODE_PROTOCOL_ERROR,
-                            "Pushed stream url was invalid: " + gurl.spec());
+    EnqueueResetStreamFrame(
+        stream_id, request_priority, ERROR_CODE_PROTOCOL_ERROR,
+        "Pushed stream url was invalid: " + gurl.possibly_invalid_spec());
     return;
   }
 
   // Verify we have a valid stream association.
   ActiveStreamMap::iterator associated_it =
       active_streams_.find(associated_stream_id);
   if (associated_it == active_streams_.end()) {
     EnqueueResetStreamFrame(
         stream_id, request_priority, ERROR_CODE_STREAM_CLOSED,
         base::StringPrintf("Received push for inactive associated stream %d",
@@ skipping 522 matching lines @@
     if (!queue->empty()) {
       SpdyStreamId stream_id = queue->front();
       queue->pop_front();
       return stream_id;
     }
   }
   return 0;
 }
 
 }  // namespace net