<webview>: Fix an issue with destroying an opener that has unattached guests.

chrome/renderer/resources/extensions/web_view_events.js

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Event management for WebViewInternal.
 
 var DeclarativeWebRequestSchema =
     requireNative('schema_registry').GetSchema('declarativeWebRequest');
 var EventBindings = require('event_bindings');
 var IdGenerator = requireNative('id_generator');
@@ skipping 438 matching lines @@
         // Update the partition.
         if (event.storagePartitionId) {
           webViewInternal.onAttach(event.storagePartitionId);
         }
 
         var attached = webViewInternal.attachWindow(event.windowId, true);
 
         if (!attached) {
           window.console.error(ERROR_MSG_NEWWINDOW_UNABLE_TO_ATTACH);
         }
+
+        var guestInstanceId = getGuestInstanceId();
+        if (!guestInstanceId) {
+          // If the opener is already gone, then we won't have its
+          // guestInstanceId.
+          return;
+        }
+
         // If the object being passed into attach is not a valid <webview>
         // then we will fail and it will be treated as if the new window
         // was rejected. The permission API plumbing is used here to clean
         // up the state created for the new window if attaching fails.
         WebView.setPermission(
-            getGuestInstanceId(), requestId, attached ? 'allow' : 'deny');
+            guestInstanceId, requestId, attached ? 'allow' : 'deny');
       }, 0);
     },
     discard: function() {
       validateCall();
-      WebView.setPermission(getGuestInstanceId(), requestId, 'deny');
+      var guestInstanceId = getGuestInstanceId();
+      if (!guestInstanceId) {
+        // If the opener is already gone, then we won't have its
+        // guestInstanceId.
+        return;
+      }
+      WebView.setPermission(guestInstanceId, requestId, 'deny');
     }
   };
   webViewEvent.window = windowObj;
 
   var defaultPrevented = !this.webViewInternal.dispatchEvent(webViewEvent);
   if (actionTaken) {
     return;
   }
 
   if (defaultPrevented) {
     // Make browser plugin track lifetime of |windowObj|.
     MessagingNatives.BindToGC(windowObj, function() {
       // Avoid showing a warning message if the decision has already been made.
       if (actionTaken) {
         return;
       }
+
+      var guestInstanceId = getGuestInstanceId();
+      if (!guestInstanceId) {
+        // If the opener is already gone, then we won't have its
+        // guestInstanceId.
+        return;
+      }
+
       WebView.setPermission(
-          getGuestInstanceId(), requestId, 'default', '', function(allowed) {
-        if (allowed) {
-          return;
-        }
-        showWarningMessage();
-      });
+          guestInstanceId, requestId, 'default', '', function(allowed) {
+            if (allowed) {
+              return;
+            }
+            showWarningMessage();
+          });
     });
   } else {
     actionTaken = true;
     // The default action is to discard the window.
     WebView.setPermission(
         getGuestInstanceId(), requestId, 'default', '', function(allowed) {
       if (allowed) {
         return;
       }
       showWarningMessage();
@@ skipping 96 matching lines @@
   }
 };
 
 WebViewEvents.prototype.handleSizeChangedEvent = function(
     event, webViewEvent) {
   this.webViewInternal.onSizeChanged(webViewEvent);
 };
 
 exports.WebViewEvents = WebViewEvents;
 exports.CreateEvent = CreateEvent;