tree 65711a1dad034529811fd7da0f98b37fbbd19ab8
parent 36f35847f858e779382cc3f68f96b9ff6e237dde
author Ben Murdoch <benm@google.com> 1414756416 +0000
committer The Android Automerger <android-build@android.com> 1414804780 -0700

Cherry pick "Fixes bug in GinJavaBridgeDispatcherHost"

Original description:
Fixes bug in GinJavaBridgeDispatcherHost

My try job kept failing on android and I finally tracked it down to
this code. GinJavaBridgeDispatcherHost::RemoveNamedObject may be
invoked with a value that comes from named_objects_ (see
AddNamedObject). RemoveNamedObject removes from named_object_ and then
uses the passed in value. If this happens |name| is no longer valid
and shouldn't be used.

BUG=none
TEST=none
R=mnaganov@chromium.org
TBR=mnaganov@chromium.org

Committed:
https://src.chromium.org/viewvc/chrome?view=rev&revision=288861

Bug: 17973356
Change-Id: I71ecab488994362f02ca7dbbe9a35e9514ee33fd