Do not use TabModel inside BlockedPopupInfo handler block.

ios/chrome/browser/ui/browser_view_controller.mm

Index: ios/chrome/browser/ui/browser_view_controller.mm
diff --git a/ios/chrome/browser/ui/browser_view_controller.mm b/ios/chrome/browser/ui/browser_view_controller.mm
index 102e29ed46b11aa2b499b3eed04a69cbe1d124f6..04a2708e8e9f170fc7165cf3e0b6820a43492718 100644
--- a/ios/chrome/browser/ui/browser_view_controller.mm
+++ b/ios/chrome/browser/ui/browser_view_controller.mm
@@ -2376,6 +2376,18 @@ class BrowserBookmarkModelBridge : public bookmarks::BookmarkModelObserver {
       webState->GetNavigationManager()->LoadURLWithParams(loadParams);
       return webState;
     }
+    case WindowOpenDisposition::NEW_POPUP: {
+      Tab* tab = [[self tabModel]
+          insertOrUpdateTabWithURL:params.url
+                          referrer:params.referrer
+                        transition:params.transition
+                        windowName:nil
+                            opener:LegacyTabHelper::GetTabForWebState(webState)
+                       openedByDOM:YES
+                           atIndex:TabModelConstants::kTabPositionAutomatically
+                      inBackground:NO];
+      return tab.webState;
+    }
     default:
       NOTIMPLEMENTED();
       return nullptr;