2009-04-14 Anders Carlsson <andersca@apple.com>

        Reviewed by Sam Weinig.

        - Speculative fix for <rdar://problem/6781422> 

        Protect the plug-in instance proxy in case it's deleted while waiting for a reply.

        * Plugins/Hosted/NetscapePluginInstanceProxy.mm:
        (WebKit::NetscapePluginInstanceProxy::wheelEvent):



git-svn-id: svn://svn.chromium.org/blink/trunk@42527 bbb929c8-8fbe-4397-9dbb-9b2b20218538

third_party/WebKit/WebKit/mac/ChangeLog

+2009-04-14  Anders Carlsson  <andersca@apple.com>
+
+        Reviewed by Sam Weinig.
+
+        - Speculative fix for <rdar://problem/6781422> 
+
+        Protect the plug-in instance proxy in case it's deleted while waiting for a reply.
+
+        * Plugins/Hosted/NetscapePluginInstanceProxy.mm:
+        (WebKit::NetscapePluginInstanceProxy::wheelEvent):
+
 2009-04-14  Adele Peterson  <adele@apple.com>
 
         Reviewed by Darin.

third_party/WebKit/WebKit/mac/Plugins/Hosted/NetscapePluginInstanceProxy.mm

@@ -281,6 +281,9 @@ bool NetscapePluginInstanceProxy::wheelEvent(NSView *pluginView, NSEvent *event)
                                   pluginPoint.x, pluginPoint.y, [event buttonNumber], 
                                   [event deltaX], [event deltaY], [event deltaZ]);
     
+    // Protect ourselves in case waiting for the reply causes us to be deleted.
+    RefPtr<NetscapePluginInstanceProxy> protect(this);
+
     auto_ptr<NetscapePluginInstanceProxy::BooleanReply> reply = waitForReply<NetscapePluginInstanceProxy::BooleanReply>(requestID);
     if (!reply.get() || !reply->m_result)
         return false;