[WebIntents] Fix for default service crash.

chrome/browser/ui/intents/web_intent_picker_controller.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/intents/web_intent_picker_controller.h"
 
 #include <vector>
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
@@ skipping 854 matching lines @@
       DCHECK(dialog_state_ == kPickerWaiting);
       break;
 
     case kPickerMain:
       // No DCHECK - main state can be reached from any state.
       // Ready to display data.
       picker_model_->SetWaitingForSuggestions(false);
       break;
 
     case kPickerHidden:
+      // Once the picker dialog is closed, abandon all pending callbacks.
+      weak_ptr_factory_.InvalidateWeakPtrs();
       break;
 
     default:
       NOTREACHED();
       break;
 
   }
 
   dialog_state_ = state;
 
@@ skipping 10 matching lines @@
   picker_->SetActionString(GetIntentActionString(
       UTF16ToUTF8(picker_model_->action())));
   picker_shown_ = true;
 }
 
 void WebIntentPickerController::ClosePicker() {
   SetDialogState(kPickerHidden);
   if (picker_)
     picker_->Close();
 }