Fix for 'Simple Adblock' extension crashes

content/browser/renderer_host/render_view_host_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/render_view_host_impl.h"
 
 #include <set>
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 1024 matching lines @@
         RenderViewHostImpl::FromID(GetProcess()->GetID(), run_modal_opener_id_);
     if (opener) {
       opener->StartHangMonitorTimeout(TimeDelta::FromMilliseconds(
           hung_renderer_delay_ms_));
       // Balance out the decrement when we got created.
       opener->increment_in_flight_event_count();
     }
     run_modal_opener_id_ = MSG_ROUTING_NONE;
   }
 
+  // We can't release the SessionStorageNamespace until our peer
+  // in the renderer has wound down.
+  if (GetProcess()->HasConnection()) {
+    SessionStorageNamespaceMap map =
+        delegate_->GetSessionStorageNamespaceMap();
+    if (!map.empty()) {
+      // Note: in unittests, process is a MockRenderProcessHost so this
+      // cast doesn't work there.

[michaeln, 2014/06/02 20:13:39]

i'll have to do something better about this, just want to see of tests pass with
this quick change

+      static_cast<RenderProcessHostImpl*>(GetProcess())->
+          ReleaseOnCloseAck(map, GetRoutingID());
+    }
+  }
+
   RenderWidgetHostImpl::Shutdown();
 }
 
 bool RenderViewHostImpl::IsRenderView() const {
   return true;
 }
 
 void RenderViewHostImpl::CreateNewWindow(
     int route_id,
     int main_frame_route_id,
@@ skipping 625 matching lines @@
   FrameTree* frame_tree = delegate_->GetFrameTree();
 
   frame_tree->ResetForMainFrameSwap();
 }
 
 void RenderViewHostImpl::SelectWordAroundCaret() {
   Send(new ViewMsg_SelectWordAroundCaret(GetRoutingID()));
 }
 
 }  // namespace content