Fix a bug wherein we'd release a scoped_ptr and dereference it in the same line of code. That work…

content/browser/indexed_db/indexed_db_callbacks.cc

Index: content/browser/indexed_db/indexed_db_callbacks.cc
diff --git a/content/browser/indexed_db/indexed_db_callbacks.cc b/content/browser/indexed_db/indexed_db_callbacks.cc
index 74c2558bf7f613e23babf7ff525fce8b03811487..74a76fdce53de540f390fb177a45710e8cb6c95e 100644
--- a/content/browser/indexed_db/indexed_db_callbacks.cc
+++ b/content/browser/indexed_db/indexed_db_callbacks.cc
@@ -249,16 +249,14 @@ static void CreateBlobsAndSend(
 static void BlobLookupForCursorPrefetch(
     IndexedDBMsg_CallbacksSuccessCursorPrefetch_Params* params,
     scoped_refptr<IndexedDBDispatcherHost> dispatcher_host,
-    const std::vector<IndexedDBValue>& values,
-    std::vector<std::vector<IndexedDBMsg_BlobOrFileInfo> >*
-        blob_or_file_infos) {
+    const std::vector<IndexedDBValue>& values) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
-  DCHECK_EQ(values.size(), blob_or_file_infos->size());
+  DCHECK_EQ(values.size(), params->blob_or_file_infos.size());
 
   std::vector<IndexedDBValue>::const_iterator value_iter;
   std::vector<std::vector<IndexedDBMsg_BlobOrFileInfo> >::iterator blob_iter;
-  for (value_iter = values.begin(), blob_iter = blob_or_file_infos->begin();
-       value_iter != values.end();
+  for (value_iter = values.begin(), blob_iter =
+       params->blob_or_file_infos.begin(); value_iter != values.end();
        ++value_iter, ++blob_iter) {
     if (!CreateAllBlobs(value_iter->blob_info, &*blob_iter, dispatcher_host))
       return;
@@ -453,8 +451,7 @@ void IndexedDBCallbacks::OnSuccessWithPrefetch(
         base::Bind(BlobLookupForCursorPrefetch,
                    base::Owned(params.release()),
                    dispatcher_host_,
-                   values,
-                   base::Unretained(&params->blob_or_file_infos)));
+                   values));
   } else {
     dispatcher_host_->Send(
         new IndexedDBMsg_CallbacksSuccessCursorPrefetch(*params.get()));