Index: chrome/browser/renderer_host/resource_message_filter.cc |
=================================================================== |
--- chrome/browser/renderer_host/resource_message_filter.cc (revision 46391) |
+++ chrome/browser/renderer_host/resource_message_filter.cc (working copy) |
@@ -873,6 +873,10 @@ |
// the write on the UI thread. |
Clipboard::ObjectMap* long_living_objects = new Clipboard::ObjectMap(objects); |
+ // This async message doesn't support shared-memory based bitmaps; they must |
+ // be removed otherwise we might dereference a rubbish pointer. |
+ long_living_objects->erase(Clipboard::CBF_SMBITMAP); |
+ |
ChromeThread::PostTask( |
ChromeThread::UI, |
FROM_HERE, |