GitLab

Before this patch, Chrome on Android could attempt to use null
WebContents* or RenderFrameHost* pointer derived from the corresponding
Java objects, while an iframe is being removed, which caused a crash.

This patch adds WebContents.isDestroyed() check in Java and null checks
for RenderFrameHost* pointers in C++ derived from corresponding Java
  objects.

After this patch, Chrome does not crash when an iframe is being removed
on Android during PaymentRequest operation.

Bug: 1125614
Change-Id: Id390a6eceaa3c8ccfcc496583ee82c9e6bb2a20c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2401318
Commit-Queue: Rouslan Solomakhin <rouslan@chromium.org>
Reviewed-by: Liquan (Max) Gu <maxlg@chromium.org>
Cr-Commit-Position: refs/heads/master@{#805722}