A quick fix for Issue 9762 and 9763....

chrome/browser/renderer_host/render_widget_host.h

Index: chrome/browser/renderer_host/render_widget_host.h
===================================================================
--- chrome/browser/renderer_host/render_widget_host.h	(revision 13574)
+++ chrome/browser/renderer_host/render_widget_host.h	(working copy)
@@ -238,12 +238,19 @@
   //     if (key_event.windows_key_code == 'A' &&
   //         key_event.modifiers == WebKeyboardEvent::CTRL_KEY) {
   //       UpdateTextDirection(dir);
+  //     } else {
+  //       CancelUpdateTextDirection();
   //     }
   //   } else if (key_event.type == WebKeyboardEvent::KEY_UP) {
   //     NotifyTextDirection();
   //   }
+  // Once we cancel updating the text direction, we have to ignore all
+  // succeeding UpdateTextDirection() requests until calling
+  // NotifyTextDirection(). (We may receive keydown events even after we
+  // canceled updating the text direction because of auto-repeat.)
   // Note: we cannot undo this change for compatibility with Firefox and IE.
   void UpdateTextDirection(WebTextDirection direction);
+  void CancelUpdateTextDirection();
   void NotifyTextDirection();
 
   // This is for derived classes to give us access to the resizer rect.
@@ -403,6 +410,11 @@
   bool text_direction_updated_;
   WebTextDirection text_direction_;
 
+  // Set when we cancel updating the text direction.
+  // This flag also ignores succeeding update requests until we call
+  // NotifyTextDirection().
+  bool text_direction_canceled_;
+
   DISALLOW_COPY_AND_ASSIGN(RenderWidgetHost);
 };