Fix DetachableResourceHandler when OnResponseCompleted is deferred.

content/browser/loader/detachable_resource_handler.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/loader/detachable_resource_handler.h"
 
 #include <utility>
 
 #include "base/logging.h"
 #include "base/memory/ptr_util.h"
@@ skipping 208 matching lines @@
   // No DCHECK(!is_deferred_) as the request may have been cancelled while
   // deferred.
 
   if (!next_handler_) {
     controller->Resume();
     return;
   }
 
   is_finished_ = true;
 
-  next_handler_->OnResponseCompleted(status, std::move(controller));
+  HoldController(std::move(controller));
+  next_handler_->OnResponseCompleted(status,
+                                     base::MakeUnique<Controller>(this));
 }
 
 void DetachableResourceHandler::OnDataDownloaded(int bytes_downloaded) {
   if (!next_handler_)
     return;
 
   next_handler_->OnDataDownloaded(bytes_downloaded);
 }
 
 void DetachableResourceHandler::OnTimedOut() {
   // Requests are only timed out after being detached, and shouldn't be deferred
   // once detached.
   DCHECK(!next_handler_);
   DCHECK(!has_controller());
 
   OutOfBandCancel(net::ERR_ABORTED, true /* tell_renderer */);
 }
 
 }  // namespace content