From f8a915f0468cce1d979593419cc8f3f7e43a8487 Mon Sep 17 00:00:00 2001
From: Marshall Greenblatt <magreenblatt@gmail.com>
Date: Wed, 19 Aug 2026 14:06:41 -0400
Subject: [PATCH] alloy: Fix crash in
 ReadAnythingSoftNavigationObserver::OnSoftNavigation (fixes #4234)

---
 patch/patch.cfg                                  |  6 ++++++
 patch/patches/chrome_browser_read_anything.patch | 14 ++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 patch/patches/chrome_browser_read_anything.patch

diff --git a/patch/patch.cfg b/patch/patch.cfg
index df895fd00..c6e3d45a0 100644
--- a/patch/patch.cfg
+++ b/patch/patch.cfg
@@ -377,6 +377,12 @@ patches = [
     # https://github.com/chromiumembedded/cef/issues/3681
     'name': 'chrome_browser_printing_oop_osr',
   },
+  {
+    # alloy: Fix crash in
+    # ReadAnythingSoftNavigationObserver::OnSoftNavigation
+    # https://github.com/chromiumembedded/cef/issues/4234
+    'name': 'chrome_browser_read_anything',
+  },
   {
     # Support override of Chrome process singleton behavior.
     # https://github.com/chromiumembedded/cef/issues/3609
diff --git a/patch/patches/chrome_browser_read_anything.patch b/patch/patches/chrome_browser_read_anything.patch
new file mode 100644
index 000000000..0e2d0209c
--- /dev/null
+++ b/patch/patches/chrome_browser_read_anything.patch
@@ -0,0 +1,14 @@
+diff --git chrome/browser/ui/read_anything/read_anything_soft_navigation_observer.cc chrome/browser/ui/read_anything/read_anything_soft_navigation_observer.cc
+index 3a57f6d13db4bc3c8a028f79ebd61fb8913f5458..55dacaf0eec94528738dcbf3a8b55a30b3033b7d 100644
+--- chrome/browser/ui/read_anything/read_anything_soft_navigation_observer.cc
++++ chrome/browser/ui/read_anything/read_anything_soft_navigation_observer.cc
+@@ -44,7 +44,8 @@ void ReadAnythingSoftNavigationObserver::OnSoftNavigation() {
+   if (!web_contents) {
+     return;
+   }
+-  tabs::TabInterface* tab = tabs::TabInterface::GetFromContents(web_contents);
++  tabs::TabInterface* tab =
++      tabs::TabInterface::MaybeGetFromContents(web_contents);
+   if (!tab) {
+     return;
+   }