Speculative fix for crasher.

third_party/WebKit/Source/web/WebAXObject.cpp

Index: third_party/WebKit/Source/web/WebAXObject.cpp
diff --git a/third_party/WebKit/Source/web/WebAXObject.cpp b/third_party/WebKit/Source/web/WebAXObject.cpp
index b2082cd383b44a735b037a7598a7e245463bdce0..ca4f1a95eb5321ebe3165dbcfc89d22665d94211 100644
--- a/third_party/WebKit/Source/web/WebAXObject.cpp
+++ b/third_party/WebKit/Source/web/WebAXObject.cpp
@@ -160,7 +160,7 @@ int WebAXObject::GenerateAXID() const {
 bool WebAXObject::UpdateLayoutAndCheckValidity() {
   if (!IsDetached()) {
     Document* document = private_->GetDocument();
-    if (!document || !document->View())
+    if (!document || !document->View() || document->IsDetached())

[dcheng, 2017/05/19 22:55:08]

Can we add a TODO for accessibility to see if we can sync the meaning of
IsDetached() here? It's confusing to have this.

[szager, 2017/05/19 23:04:40]

Done.

       return false;
     document->View()->UpdateLifecycleToCompositingCleanPlusScrolling();
   }