Fixes crash in closing menus. There are two issues here:

ui/views/controls/menu/menu_host.cc

Index: ui/views/controls/menu/menu_host.cc
diff --git a/ui/views/controls/menu/menu_host.cc b/ui/views/controls/menu/menu_host.cc
index 23060d7b14506d1ae5000c79a5179543e9f7cc8c..61311a603cd261a57cc151466d30597702d7cb3c 100644
--- a/ui/views/controls/menu/menu_host.cc
+++ b/ui/views/controls/menu/menu_host.cc
@@ -108,4 +108,11 @@ void MenuHost::OnNativeWidgetDestroyed() {
   Widget::OnNativeWidgetDestroyed();
 }
 
+void MenuHost::OnOwnedParentClosing() {

[oshima, 2012/04/26 03:05:27]

don't we have to do this on aura? If not, can you document it?

+  MenuController* menu_controller =
+      submenu_->GetMenuItem()->GetMenuController();
+  if (menu_controller && !menu_controller->drag_in_progress())
+    menu_controller->CancelAll();
+}
+
 }  // namespace views