Fix crash when calling ScrollAnchor::clear from PaintLayer's destructor

third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp

Index: third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp
diff --git a/third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp b/third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp
index 7cbd81dc74e4404feba55bb499b63e868d9f8966..0660f0bf0711d9e44ba645da7c2707133b335d69 100644
--- a/third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp
+++ b/third_party/WebKit/Source/core/paint/PaintLayerScrollableArea.cpp
@@ -177,7 +177,7 @@ void PaintLayerScrollableArea::dispose() {
   // leaving the ScrollAnchor with a stale LayoutObject pointer.
   if (RuntimeEnabledFeatures::scrollAnchoringEnabled() &&
       !box().documentBeingDestroyed())
-    m_scrollAnchor.clear();
+    m_scrollAnchor.clearSelf();
 
 #if ENABLE(ASSERT)
   m_hasBeenDisposed = true;