Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(178)

Issue 215018: The WebPluginImpl::paint function can be invoked when the delegate_ member is... (Closed)

Created:
11 years, 3 months ago by ananta
Modified:
9 years, 6 months ago
CC:
chromium-reviews_googlegroups.com, jam
Visibility:
Public.

Description

The WebPluginImpl::paint function can be invoked when the delegate_ member is NULL. This scenario can happen if a plugin is reinitialized, in which case the plugin instance is torn down and a new one is initialized. If the second initialization fails, we have a plugin instance in the renderer which has a NULL delegate_. Fix is to add a NULL check for the delegate in the paint function. Fixes http://code.google.com/p/chromium/issues/detail?id=22196 Bug=22196 Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=26552

Patch Set 1 #

Patch Set 2 : '' #

Patch Set 3 : '' #

Unified diffs Side-by-side diffs Delta from patch set Stats (+2 lines, -0 lines) Patch
M webkit/glue/webplugin_impl.cc View 1 2 1 chunk +2 lines, -0 lines 0 comments Download

Messages

Total messages: 5 (0 generated)
ananta
11 years, 3 months ago (2009-09-17 23:01:07 UTC) #1
jam
lgtm why not just an early return?
11 years, 3 months ago (2009-09-17 23:08:22 UTC) #2
ananta
On 2009/09/17 23:08:22, John Abd-El-Malek wrote: > lgtm > > why not just an early ...
11 years, 3 months ago (2009-09-17 23:22:54 UTC) #3
darin (slow to review)
The scenario that leads to this crash sounds like something we could simulate in a ...
11 years, 3 months ago (2009-09-18 04:32:26 UTC) #4
iyengar
11 years, 3 months ago (2009-09-18 04:44:08 UTC) #5
To simulate this in a test, we would need to issue a byte range request from
a plugin in response to which the web serverwould return a HTTP 200
response. This would trigger reinitialization of the plugin which then needs
to fail.

I will try and get to the test case in a subsequent CL..

Thanks
Ananta

On Thu, Sep 17, 2009 at 9:32 PM, <darin@chromium.org> wrote:

> The scenario that leads to this crash sounds like something we could
> simulate in
> a test, right?
>
>
> http://codereview.chromium.org/215018
>

Powered by Google App Engine
This is Rietveld 408576698