Descriptionbindings/oilpan: Stops using ScriptWrappable pointers already collected by GC.
Garbage collected objects can be collected by Oilpan by the time when
ScriptWrappable::secondWeakCallback is called. In that case,
secondWeakCallback tries to cast a pointer to the already-collected
object to ScriptWrappable*. CFI(Control Flow Integrity) detects this
cast as a bad cast because vtbl doesn't match.
This CL fixes the issue making it not call secondWeakCallback for
garbage collected objects.
BUG=528798
Committed: https://crrev.com/a923a78d56bf56317f018ed6fbdc42e0ec8fc9a3
git-svn-id: svn://svn.chromium.org/blink/trunk@202133 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Patch Set 1 #
Messages
Total messages: 7 (2 generated)
|