Don't try to read message->type() after message has been deleted.

content/common/gpu/client/gpu_video_decode_accelerator_host.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/gpu/client/gpu_video_decode_accelerator_host.h"
 
 #include "base/bind.h"
 #include "base/logging.h"
 #include "base/message_loop.h"
 #include "content/common/gpu/client/gpu_channel_host.h"
@@ skipping 114 matching lines @@
   delete this;
 }
 
 GpuVideoDecodeAcceleratorHost::~GpuVideoDecodeAcceleratorHost() {}
 
 void GpuVideoDecodeAcceleratorHost::Send(IPC::Message* message) {
   // After OnChannelError is called, the client should no longer send
   // messages to the gpu channel through this object.  But queued posted tasks
   // can still be draining, so we're forgiving and simply ignore them.
   bool error = false;
+  uint32 message_type = message->type();
   if (!channel_) {
     delete message;
-    DLOG(ERROR) << "Send(" << message->type() << ") after error ignored";
+    DLOG(ERROR) << "Send(" << message_type << ") after error ignored";
     error = true;
   } else if (!channel_->Send(message)) {
-    DLOG(ERROR) << "Send(" << message->type() << ") failed";
+    DLOG(ERROR) << "Send(" << message_type << ") failed";
     error = true;
   }
   if (error)
     OnErrorNotification(PLATFORM_FAILURE);
 }
 
 void GpuVideoDecodeAcceleratorHost::OnBitstreamBufferProcessed(
     int32 bitstream_buffer_id) {
   DCHECK(CalledOnValidThread());
   if (client_)
@@ skipping 40 matching lines @@
 }
 
 void GpuVideoDecodeAcceleratorHost::OnErrorNotification(uint32 error) {
   DCHECK(CalledOnValidThread());
   if (!client_)
     return;
   client_->NotifyError(
       static_cast<media::VideoDecodeAccelerator::Error>(error));
   client_ = NULL;
 }