First attempt at fixing a crash that occurs when we get into WebFrameLoaderCl...

webkit/glue/webframeloaderclient_impl.cc

Index: webkit/glue/webframeloaderclient_impl.cc
===================================================================
--- webkit/glue/webframeloaderclient_impl.cc	(revision 30460)
+++ webkit/glue/webframeloaderclient_impl.cc	(working copy)
@@ -495,8 +495,11 @@
   ASSERT(ds);  // Should not be null when navigating to a reference fragment!
   if (ds) {
     KURL url = webkit_glue::WebURLToKURL(ds->request().url());
-    KURL chain_end = ds->endOfRedirectChain();
-    ds->clearRedirectChain();
+    KURL chain_end;
+    if (ds->hasRedirectChain()) {
+      chain_end = ds->endOfRedirectChain();
+      ds->clearRedirectChain();
+    }
 
     // Figure out if this location change is because of a JS-initiated client
     // redirect (e.g onload/setTimeout document.location.href=).