Crash in ImageFrameCache::decodedSizeChanged() after image load cancellation