swap the renderer_ reference to local before calling Stop()

content/renderer/media/webrtc_audio_device_impl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/media/webrtc_audio_device_impl.h"
 
 #include "base/bind.h"
 #include "base/metrics/histogram.h"
 #include "base/string_util.h"
 #include "base/win/windows_version.h"
@@ skipping 241 matching lines @@
 
   // Calling Terminate() multiple times in a row is OK.
   if (!initialized_)
     return 0;
 
   StopRecording();
   StopPlayout();
 
   // It is necessary to stop the |renderer_| before going away.
   if (renderer_) {
-    renderer_->Stop();
-    renderer_ = NULL;
+    // Grab a local reference while we call Stop(), which will trigger a call to
+    // RemoveAudioRenderer that clears our reference to the audio renderer.
+    scoped_refptr<WebRtcAudioRenderer> local_renderer(renderer_);
+    local_renderer->Stop();
+    DCHECK(!renderer_);
   }
 
   if (capturer_) {
     // |capturer_| is stopped by the media stream, so do not need to
     // call Stop() here.
     capturer_->RemoveSink(this);
     capturer_ = NULL;
   }
 
   initialized_ = false;
@@ skipping 222 matching lines @@
     return false;
 
   if (!renderer->Initialize(this))
     return false;
 
   renderer_ = renderer;
   return true;
 }
 
 }  // namespace content