First attempt at fixing a crash that occurs when we get into WebFrameLoaderCl...

webkit/glue/webframeloaderclient_impl.cc

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 
 #include "Chrome.h"
 #include "CString.h"
 #include "Document.h"
 #include "DocumentLoader.h"
@@ skipping 477 matching lines @@
   // Anchor fragment navigations are not normal loads, so we need to synthesize
   // some events for our delegate.
   WebViewImpl* webview = webframe_->GetWebViewImpl();
   if (webview->client())
     webview->client()->didStartLoading();
 
   WebDataSourceImpl* ds = webframe_->GetDataSourceImpl();
   ASSERT(ds);  // Should not be null when navigating to a reference fragment!
   if (ds) {
     KURL url = webkit_glue::WebURLToKURL(ds->request().url());
-    KURL chain_end = ds->endOfRedirectChain();
-    ds->clearRedirectChain();
+    KURL chain_end;
+    if (ds->hasRedirectChain()) {
+      chain_end = ds->endOfRedirectChain();
+      ds->clearRedirectChain();
+    }
 
     // Figure out if this location change is because of a JS-initiated client
     // redirect (e.g onload/setTimeout document.location.href=).
     // TODO(timsteele): (bugs 1085325, 1046841) We don't get proper redirect
     // performed/cancelled notifications across anchor navigations, so the
     // other redirect-tracking code in this class (see dispatch*ClientRedirect()
     // and dispatchDidStartProvisionalLoad) is insufficient to catch and
     // properly flag these transitions. Once a proper fix for this bug is
     // identified and applied the following block may no longer be required.
     bool was_client_redirect =
@@ skipping 817 matching lines @@
   WebViewImpl* webview = webframe_->GetWebViewImpl();
   if (webview->client())
     webview->client()->navigateBackForwardSoon(offset);
 }
 
 PassOwnPtr<WebPluginLoadObserver> WebFrameLoaderClient::GetPluginLoadObserver() {
   WebDataSourceImpl* ds = WebDataSourceImpl::fromDocumentLoader(
       webframe_->frame()->loader()->activeDocumentLoader());
   return ds->releasePluginLoadObserver();
 }