Fix crash when de-referencing the WebFrameWidget.

third_party/WebKit/Source/web/WebViewImpl.cpp

 /*
  * Copyright (C) 2011, 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 2520 matching lines @@
     page()->willCloseLayerTreeView(*m_layerTreeView, nullptr);
 
   setRootLayer(nullptr);
   m_animationHost = nullptr;
 
   m_mutator = nullptr;
   m_layerTreeView = nullptr;
 }
 
 void WebViewImpl::didAcquirePointerLock() {
-  mainFrameImpl()->frameWidget()->didAcquirePointerLock();
+  if (mainFrameImpl())
+    mainFrameImpl()->frameWidget()->didAcquirePointerLock();
 }
 
 void WebViewImpl::didNotAcquirePointerLock() {
-  mainFrameImpl()->frameWidget()->didNotAcquirePointerLock();
+  if (mainFrameImpl())
+    mainFrameImpl()->frameWidget()->didNotAcquirePointerLock();
 }
 
 void WebViewImpl::didLosePointerLock() {
-  mainFrameImpl()->frameWidget()->didLosePointerLock();
+  // Make sure that the main frame wasn't swapped-out when the pointer lock is
+  // lost. There's a race that can happen when a pointer lock is requested, but
+  // the browser swaps out the main frame while the pointer lock request is in
+  // progress. This won't be needed once the main frame is refactored to not use
+  // the WebViewImpl as its WebWidget.
+  if (mainFrameImpl())
+    mainFrameImpl()->frameWidget()->didLosePointerLock();
 }
 
 // TODO(ekaramad):This method is almost duplicated in WebFrameWidgetImpl as
 // well. This code needs to be refactored  (http://crbug.com/629721).
 bool WebViewImpl::getCompositionCharacterBounds(WebVector<WebRect>& bounds) {
   WebRange range = compositionRange();
   if (range.isEmpty())
     return false;
 
   WebLocalFrame* frame = focusedFrame();
@@ skipping 1606 matching lines @@
   if (focusedFrame->localFrameRoot() != mainFrameImpl()->frame())
     return nullptr;
   return focusedFrame;
 }
 
 LocalFrame* WebViewImpl::focusedLocalFrameAvailableForIme() const {
   return m_imeAcceptEvents ? focusedLocalFrameInWidget() : nullptr;
 }
 
 }  // namespace blink