Google Chrome 36.0.1985.142 Use-after-free vulnerability

[WebSocket] Task creation should be separated from task posting.

Having a complex argument as a waitForMethodCompletion may keep alive
temporary objects which must be killed before posting a task to another
thread.

more here.............http://cxsecurity.com/issue/WLB-2014080061