Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(143)

Issue 2034233002: Fix ResumableTCPSocket destruction. (Closed)

Created:
4 years, 6 months ago by krasin
Modified:
4 years, 6 months ago
CC:
chromium-apps-reviews_chromium.org, chromium-reviews, extensions-reviews_chromium.org, pcc1
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Fix ResumableTCPSocket destruction. ResumableTCPSocket sets a read_callback_ that points to TCPSocketEventDispatcher::ReadCallback. This callback gets called from ~TCPSocket, when ~ResumableTCPSocket already completed, and it calls ResumableTCPSocket methods (which are already illegal to call). The fix just calls Disconnect from ~ResumableTCPSocket which clears the callback and all the state that relies on ResumableTCPSocket members. This fixes a bug found with UBSan Vptr. BUG=617199 Committed: https://crrev.com/feeee3ad3750286671cf2ca5e90400fa745a13d6 Cr-Commit-Position: refs/heads/master@{#397829}

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+10 lines, -0 lines) Patch
M extensions/browser/api/socket/tcp_socket.h View 1 chunk +2 lines, -0 lines 0 comments Download
M extensions/browser/api/socket/tcp_socket.cc View 1 chunk +8 lines, -0 lines 0 comments Download

Messages

Total messages: 8 (3 generated)
krasin
4 years, 6 months ago (2016-06-03 20:38:15 UTC) #2
Reilly Grant (use Gerrit)
lgtm
4 years, 6 months ago (2016-06-03 20:44:34 UTC) #3
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2034233002/1
4 years, 6 months ago (2016-06-03 20:45:57 UTC) #5
commit-bot: I haz the power
Committed patchset #1 (id:1)
4 years, 6 months ago (2016-06-03 22:48:20 UTC) #6
commit-bot: I haz the power
4 years, 6 months ago (2016-06-03 22:50:50 UTC) #8
Message was sent while issue was closed.
Patchset 1 (id:??) landed as
https://crrev.com/feeee3ad3750286671cf2ca5e90400fa745a13d6
Cr-Commit-Position: refs/heads/master@{#397829}

Powered by Google App Engine
This is Rietveld 408576698