Fix re-entrancy bug in SimpleDataSource::Abort() introduced in r118338.

webkit/media/simple_data_source.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // An extremely simple implementation of DataSource that downloads the entire
 // media resource into memory before signaling that initialization has finished.
 // Primarily used to test <audio> and <video> with buffering/caching removed
 // from the equation.
 
 #ifndef WEBKIT_MEDIA_SIMPLE_DATA_SOURCE_H_
@@ skipping 75 matching lines @@
 
   // webkit_glue::WebDataSource implementation.
   virtual void Initialize(const GURL& url,
                           const media::PipelineStatusCB& callback) OVERRIDE;
   virtual bool HasSingleOrigin() OVERRIDE;
   virtual void Abort() OVERRIDE;
 
  private:
   // Cancels and deletes the resource loading on the render thread.
   void CancelTask();
+  void CancelTask_Locked();
 
   // Perform initialization completion tasks under a lock.
   void DoneInitialization_Locked(bool success);
 
   // Update host() stats like total bytes & buffered bytes.
   void UpdateHostState();
 
   // Primarily used for asserting the bridge is loading on the render thread.
   MessageLoop* render_loop_;
 
@@ skipping 25 matching lines @@
 
   // Used to ensure mocks for unittests are used instead of reset in Start().
   bool keep_test_loader_;
 
   DISALLOW_COPY_AND_ASSIGN(SimpleDataSource);
 };
 
 }  // namespace webkit_media
 
 #endif  // WEBKIT_MEDIA_SIMPLE_DATA_SOURCE_H_