Gtk: fix reference counting/destruction of GtkMenu* in MenuGtk....

chrome/browser/gtk/menu_gtk.cc

Index: chrome/browser/gtk/menu_gtk.cc
===================================================================
--- chrome/browser/gtk/menu_gtk.cc	(revision 36530)
+++ chrome/browser/gtk/menu_gtk.cc	(working copy)
@@ -28,6 +28,7 @@
       menu_(gtk_menu_new()),
       factory_(this) {
   DCHECK(menu_data);
+  g_object_ref_sink(menu_);
   ConnectSignalHandlers();
   BuildMenuIn(menu_, menu_data);
 }
@@ -38,6 +39,7 @@
       dummy_accel_group_(gtk_accel_group_new()),
       menu_(gtk_menu_new()),
       factory_(this) {
+  g_object_ref_sink(menu_);
   ConnectSignalHandlers();
 }
 
@@ -48,6 +50,7 @@
       dummy_accel_group_(gtk_accel_group_new()),
       menu_(gtk_menu_new()),
       factory_(this) {
+  g_object_ref_sink(menu_);
   DCHECK(model);
   ConnectSignalHandlers();
   if (model)
@@ -55,6 +58,9 @@
 }
 
 MenuGtk::~MenuGtk() {
+  Cancel();
+  g_object_unref(menu_);
+
   STLDeleteContainerPointers(submenus_we_own_.begin(), submenus_we_own_.end());
   g_object_unref(dummy_accel_group_);
 }