ScriptPromiseResolver leaked resource when constructed on stopped context.

Source/bindings/core/v8/ScriptPromiseResolver.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 
 #include "bindings/core/v8/V8RecursionScope.h"
 
 namespace blink {
 
 ScriptPromiseResolver::ScriptPromiseResolver(ScriptState* scriptState)
     : ActiveDOMObject(scriptState->executionContext())
     , m_state(Pending)
     , m_scriptState(scriptState)
     , m_mode(Default)
     , m_timer(this, &ScriptPromiseResolver::onTimerFired)
     , m_resolver(scriptState)
 #if ENABLE(ASSERT)
     , m_isPromiseCalled(false)
 #endif
 {
-    if (executionContext()->activeDOMObjectsAreStopped())
+    if (executionContext()->activeDOMObjectsAreStopped()) {
         m_state = ResolvedOrRejected;
+        m_resolver.clear();
+    }
 }
 
 void ScriptPromiseResolver::suspend()
 {
     m_timer.stop();
 }
 
 void ScriptPromiseResolver::resume()
 {
     if (m_state == Resolving || m_state == Rejecting)
@@ skipping 54 matching lines @@
     // |this| may be deleted here, but it is safe to check |state| because
     // it doesn't depend on |this|. When |this| is deleted, |state| can't be
     // |Resolving| nor |Rejecting| and hence |this->deref()| can't be executed.
     if (state == Resolving || state == Rejecting) {
         // |ref| was called in |resolveOrReject|.
         deref();
     }
 }
 
 } // namespace blink