Fix a bug wherein we'd release a scoped_ptr and dereference it in the same line of code. That work…

content/browser/indexed_db/indexed_db_callbacks.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/indexed_db/indexed_db_callbacks.h"
 
 #include <algorithm>
 
 #include "base/guid.h"
 #include "base/strings/utf_string_conversions.h"
@@ skipping 231 matching lines @@
     const std::vector<IndexedDBBlobInfo>& blob_info,
     std::vector<IndexedDBMsg_BlobOrFileInfo>* blob_or_file_info) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
   if (CreateAllBlobs(blob_info, blob_or_file_info, dispatcher_host))
     dispatcher_host->Send(new MsgType(*params));
 }
 
 static void BlobLookupForCursorPrefetch(
     IndexedDBMsg_CallbacksSuccessCursorPrefetch_Params* params,
     scoped_refptr<IndexedDBDispatcherHost> dispatcher_host,
-    const std::vector<IndexedDBValue>& values,
-    std::vector<std::vector<IndexedDBMsg_BlobOrFileInfo> >*
-        blob_or_file_infos) {
+    const std::vector<IndexedDBValue>& values) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
-  DCHECK_EQ(values.size(), blob_or_file_infos->size());
+  DCHECK_EQ(values.size(), params->blob_or_file_infos.size());
 
   std::vector<IndexedDBValue>::const_iterator value_iter;
   std::vector<std::vector<IndexedDBMsg_BlobOrFileInfo> >::iterator blob_iter;
-  for (value_iter = values.begin(), blob_iter = blob_or_file_infos->begin();
-       value_iter != values.end();
+  for (value_iter = values.begin(), blob_iter =
+       params->blob_or_file_infos.begin(); value_iter != values.end();
        ++value_iter, ++blob_iter) {
     if (!CreateAllBlobs(value_iter->blob_info, &*blob_iter, dispatcher_host))
       return;
   }
   dispatcher_host->Send(
       new IndexedDBMsg_CallbacksSuccessCursorPrefetch(*params));
 }
 
 static void FillInBlobData(
     const std::vector<IndexedDBBlobInfo>& blob_info,
@@ skipping 174 matching lines @@
     }
   }
 
   if (found_blob_info) {
     BrowserThread::PostTask(
         BrowserThread::IO,
         FROM_HERE,
         base::Bind(BlobLookupForCursorPrefetch,
                    base::Owned(params.release()),
                    dispatcher_host_,
-                   values,
-                   base::Unretained(&params->blob_or_file_infos)));
+                   values));
   } else {
     dispatcher_host_->Send(
         new IndexedDBMsg_CallbacksSuccessCursorPrefetch(*params.get()));
   }
   dispatcher_host_ = NULL;
 }
 
 void IndexedDBCallbacks::OnSuccess(IndexedDBValue* value,
                                    const IndexedDBKey& key,
                                    const IndexedDBKeyPath& key_path) {
@@ skipping 99 matching lines @@
   DCHECK_EQ(kNoDatabase, ipc_database_id_);
   DCHECK_EQ(kNoDatabaseCallbacks, ipc_database_callbacks_id_);
   DCHECK_EQ(blink::WebIDBDataLossNone, data_loss_);
 
   dispatcher_host_->Send(new IndexedDBMsg_CallbacksSuccessUndefined(
       ipc_thread_id_, ipc_callbacks_id_));
   dispatcher_host_ = NULL;
 }
 
 }  // namespace content