Checks if the plugin has gone away inside of HandleURLRequestInternal()

webkit/glue/webplugin_impl.cc

Index: webkit/glue/webplugin_impl.cc
diff --git a/webkit/glue/webplugin_impl.cc b/webkit/glue/webplugin_impl.cc
index bc2387263b158908ec5d5003d15ca26b684bb800..37f34c22959f362858bebaad6a4dea4eba5c29df 100644
--- a/webkit/glue/webplugin_impl.cc
+++ b/webkit/glue/webplugin_impl.cc
@@ -841,6 +841,12 @@ void WebPluginImpl::HandleURLRequestInternal(
       return;
     }
 
+    // CreateResourceClient() sends a synchronous IPC message so it's possible
+    // that TearDownPluginInstance() may have been called in the nested
+    // message loop.  If so, don't start the request.
+    if (!delegate_)
+      return;
+
     InitiateHTTPRequest(resource_id, resource_client, method, buf, len,
                         complete_url, NULL, use_plugin_src_as_referrer);
   }