Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(60)

Issue 2007943003: [mojo-edk] Add some buffer checks and fix UAF on NodeChannel (Closed)

Created:
4 years, 7 months ago by Ken Rockot(use gerrit already)
Modified:
4 years, 7 months ago
Reviewers:
CC:
chromium-reviews
Base URL:
https://chromium.googlesource.com/chromium/src.git@2743
Target Ref:
refs/pending/branch-heads/2743
Project:
chromium
Visibility:
Public.

Description

[mojo-edk] Add some buffer checks and fix UAF on NodeChannel Adds message sanity checks at the dispatcher layer for message and data pipes. Also eliminates potential UAFs on NodeChannel by ensuring it stays alive through any delegate calls which might have otherwise deleted it. BUG=613698 Review-Url: https://codereview.chromium.org/2004763002 Cr-Commit-Position: refs/heads/master@{#395373} (cherry picked from commit 99a83d5bc1df0c4d6d660dedf45c9b0e14a9df3f) Committed: https://chromium.googlesource.com/chromium/src/+/d056d244f7068902a46b7e997eb28015fd2ccda4

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+59 lines, -17 lines) Patch
M mojo/edk/system/data_pipe_consumer_dispatcher.cc View 1 chunk +5 lines, -0 lines 0 comments Download
M mojo/edk/system/data_pipe_producer_dispatcher.cc View 1 chunk +6 lines, -2 lines 0 comments Download
M mojo/edk/system/message_pipe_dispatcher.cc View 6 chunks +40 lines, -15 lines 0 comments Download
M mojo/edk/system/node_channel.cc View 2 chunks +8 lines, -0 lines 0 comments Download

Messages

Total messages: 2 (1 generated)
Ken Rockot(use gerrit already)
4 years, 7 months ago (2016-05-24 17:59:26 UTC) #2
Message was sent while issue was closed.
Committed patchset #1 (id:1) manually as
d056d244f7068902a46b7e997eb28015fd2ccda4.

Powered by Google App Engine
This is Rietveld 408576698