Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(756)

Issue 7562003: Speculative fix for crash. Crashes seem to indicate (Closed)

Created:
9 years, 4 months ago by sky
Modified:
9 years, 4 months ago
CC:
chromium-reviews, Aaron Boodman, Erik does not do reviews, mihaip+watch_chromium.org
Visibility:
Public.

Description

Speculative fix for crash. Crashes seem to indicate ExtensionsTabModule is asking for the id of a deleted TabContents. My guess is ExtensionWebNavigationTabObserver is adding an entry for a TabContents that is later deleted and ExtensionWebNavigationTabObserver doesn't clean up it's map so that if another TabContents ends up with the same pointer value we get a crash. BUG=91385 TEST=none R=jochen@chromium.org Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=95818

Patch Set 1 #

Total comments: 1

Patch Set 2 : Remove if source deleted #

Total comments: 1

Patch Set 3 : erase(i++) #

Unified diffs Side-by-side diffs Delta from patch set Stats (+22 lines, -0 lines) Patch
M chrome/browser/extensions/extension_webnavigation_api.h View 1 chunk +4 lines, -0 lines 0 comments Download
M chrome/browser/extensions/extension_webnavigation_api.cc View 1 2 3 chunks +18 lines, -0 lines 0 comments Download

Messages

Total messages: 7 (0 generated)
sky
9 years, 4 months ago (2011-08-03 03:40:48 UTC) #1
sky
Matt, passing your way since jochen is out. If you prefer to wait till he ...
9 years, 4 months ago (2011-08-03 03:44:12 UTC) #2
sky
http://codereview.chromium.org/7562003/diff/1/chrome/browser/extensions/extension_webnavigation_api.cc File chrome/browser/extensions/extension_webnavigation_api.cc (right): http://codereview.chromium.org/7562003/diff/1/chrome/browser/extensions/extension_webnavigation_api.cc#newcode431 chrome/browser/extensions/extension_webnavigation_api.cc:431: pending_tab_contents_.erase(tab_contents); Seems like it's actually the source that is ...
9 years, 4 months ago (2011-08-03 17:58:22 UTC) #3
Matt Perry
LGTM http://codereview.chromium.org/7562003/diff/7/chrome/browser/extensions/extension_webnavigation_api.cc File chrome/browser/extensions/extension_webnavigation_api.cc (right): http://codereview.chromium.org/7562003/diff/7/chrome/browser/extensions/extension_webnavigation_api.cc#newcode437 chrome/browser/extensions/extension_webnavigation_api.cc:437: pending_tab_contents_.erase(to_erase); FYI, erase(i++) is equivalent
9 years, 4 months ago (2011-08-03 19:00:21 UTC) #4
sky
Updated. Thanks, -Scott
9 years, 4 months ago (2011-08-03 22:28:01 UTC) #5
Matt Perry
still lgtm
9 years, 4 months ago (2011-08-03 22:30:05 UTC) #6
jochen (gone - plz use gerrit)
9 years, 4 months ago (2011-08-08 15:19:24 UTC) #7
LGTM thx

I wonder how to reproduce this

Powered by Google App Engine
This is Rietveld 408576698