Fixes use after free during drag and drop.

chrome/browser/ui/views/tabs/tab_drag_controller.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_UI_VIEWS_TABS_TAB_DRAG_CONTROLLER_H_
 #define CHROME_BROWSER_UI_VIEWS_TABS_TAB_DRAG_CONTROLLER_H_
 
 #include <vector>
 
 #include "base/memory/scoped_ptr.h"
@@ skipping 517 matching lines @@
   // This is used to calculate window_create_point_.
   gfx::Point first_source_tab_point_;
 
   // The bounds of the browser window before the last Tab was detached. When
   // the last Tab is detached, rather than destroying the frame (which would
   // abort the drag session), the frame is moved off-screen. If the drag is
   // aborted (e.g. by the user pressing Esc, or capture being lost), the Tab is
   // attached to the hidden frame and the frame moved back to these bounds.
   gfx::Rect restore_bounds_;
 
-  // The last view that had focus in the window containing |source_tab_|. This
-  // is saved so that focus can be restored properly when a drag begins and
-  // ends within this same window.
-  views::View* old_focused_view_;
+  // ID of the last view that had focus in the window containing
+  // |source_tab_|. This is saved so that focus can be restored properly when a
+  // drag begins and ends within this same window.
+  const int old_focused_view_id_;
 
   // The position along the major axis of the mouse cursor in screen coordinates
   // at the time of the last re-order event.
   int last_move_screen_loc_;
 
   DockInfo dock_info_;
 
   DockWindows dock_windows_;
 
   std::vector<DockDisplayer*> dock_controllers_;
@@ skipping 63 matching lines @@
   // If non-null set to true from destructor.
   bool* destroyed_;
 
   // See description above getter.
   bool is_mutating_;
 
   DISALLOW_COPY_AND_ASSIGN(TabDragController);
 };
 
 #endif  // CHROME_BROWSER_UI_VIEWS_TABS_TAB_DRAG_CONTROLLER_H_