Chrome blink::LocalFrameView::PerformLayout Use-After-Free

Chrome suffers from a heap use-after-free vulnerability in blink::LocalFrameView::PerformLayout due to an incomplete fix for CVE-2022-3199.