The CloudPolicyRefreshScheduler class contains the refresh_callback_ member of type base::CancelableClosure. This member is assigned with a bound PerformRefresh() call.
The problematic thing here is that PerformRefresh() itself calls Cancel() on refresh_callback_. In other words, the callback is canceling itself.
We should investigate whether such construction is correct. It's quite likely that this is an incorrect usage of CancelableClosure, and we didn't observe crashes in this places only because an Unretained(this) is all that is passed to the callback.
Comment 1 by emaxx@chromium.org
, Feb 20 2017