Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1039)

Issue 1381823002: Remove an assert that triggers a bad cast in blink::LifecycleNotifier. (Closed)

Created:
5 years, 2 months ago by krasin
Modified:
5 years, 2 months ago
Reviewers:
haraken, krasin1
CC:
chromium-reviews, blink-reviews, sof
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Remove an assert that triggers a bad cast in blink::LifecycleNotifier. The bad cast happens in blink::LifecycleNotifier<blink::ExecutionContext, blink::ContextLifecycleObserver>::context(), when it's called from the destructor. See https://crbug.com/537398. The primary issue is that this method makes a base-to-derived cast at the time, when the derived instance is already destroyed. This bug was found by Control Flow Integrity check: https://sites.google.com/a/chromium.org/dev/developers/testing/control-flow-integrity BUG=chromium:537398, chromium:464797 Committed: https://crrev.com/58ce4660835621899e0129250e690059d9ece8a9 Cr-Commit-Position: refs/heads/master@{#351884}

Patch Set 1 #

Patch Set 2 : no changes, just make sure the patch is accessible by bots #

Unified diffs Side-by-side diffs Delta from patch set Stats (+0 lines, -1 line) Patch
M third_party/WebKit/Source/platform/LifecycleNotifier.h View 1 chunk +0 lines, -1 line 0 comments Download

Messages

Total messages: 13 (5 generated)
krasin1
5 years, 2 months ago (2015-09-30 23:43:54 UTC) #2
krasin1
On 2015/09/30 23:43:54, krasin1 wrote: Hi Kentaro, please review this CL. See https://crbug.com/537398 for more ...
5 years, 2 months ago (2015-09-30 23:47:41 UTC) #3
haraken
LGTM
5 years, 2 months ago (2015-09-30 23:52:41 UTC) #4
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1381823002/1 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1381823002/1
5 years, 2 months ago (2015-10-01 19:08:36 UTC) #6
commit-bot: I haz the power
Try jobs failed on following builders: win8_chromium_ng on tryserver.chromium.win (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.win/builders/win8_chromium_ng/builds/48312) win_chromium_compile_dbg_ng on tryserver.chromium.win (JOB_FAILED, ...
5 years, 2 months ago (2015-10-01 19:13:52 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1381823002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1381823002/20001
5 years, 2 months ago (2015-10-01 19:18:01 UTC) #11
commit-bot: I haz the power
Committed patchset #2 (id:20001)
5 years, 2 months ago (2015-10-01 21:09:09 UTC) #12
commit-bot: I haz the power
5 years, 2 months ago (2015-10-01 21:10:02 UTC) #13
Message was sent while issue was closed.
Patchset 2 (id:??) landed as
https://crrev.com/58ce4660835621899e0129250e690059d9ece8a9
Cr-Commit-Position: refs/heads/master@{#351884}

Powered by Google App Engine
This is Rietveld 408576698