Fix a couple of tab related bugs:...

chrome/browser/views/tabs/dragged_tab_controller.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <math.h>
 
 #include "chrome/browser/views/tabs/dragged_tab_controller.h"
 
 #include "chrome/browser/browser_window.h"
 #include "chrome/browser/frame_util.h"
@@ skipping 85 matching lines @@
   ChangeDraggedContents(
       source_tabstrip_->model()->GetTabContentsAt(source_model_index_));
   // Listen for Esc key presses.
   MessageLoopForUI::current()->AddObserver(this);
 }
 
 DraggedTabController::~DraggedTabController() {
   in_destructor_ = true;
   CleanUpSourceTab();
   MessageLoopForUI::current()->RemoveObserver(this);
+  // Need to delete the view here manually _before_ we reset the dragged
+  // contents to NULL, otherwise if the view is animating to its destination
+  // bounds, it won't be able to clean up properly since its cleanup routine
+  // uses GetIndexForDraggedContents, which will be invalid.
+  view_.reset(NULL);
   ChangeDraggedContents(NULL); // This removes our observer.
 }
 
 void DraggedTabController::CaptureDragInfo(const gfx::Point& mouse_offset) {
   start_screen_point_ = GetCursorScreenPoint();
   mouse_offset_ = mouse_offset;
 }
 
 void DraggedTabController::Drag() {
   // Before we get to dragging anywhere, ensure that we consider ourselves
@@ skipping 666 matching lines @@
     Tab* tab = GetTabMatchingDraggedContents(attached_tabstrip_);
     if (tab)
       tab->SetVisible(true);
   }
   CleanUpHiddenFrame();
 
   if (!in_destructor_)
     source_tabstrip_->DestroyDragController();
 }