Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(270)

Issue 2039333002: Fixes ASan crash for an embedded Blink-in-JS component. (Closed)

Created:
4 years, 6 months ago by ikilpatrick
Modified:
4 years, 6 months ago
Reviewers:
haraken, domenic, yhirano
CC:
chromium-reviews, blink-reviews, blink-reviews-bindings_chromium.org
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Fixes ASan crash for an embedded Blink-in-JS component. In the test case (in this patch) it appears the Blink-in-JS component tries to run JS during document creation. However there is a ScriptForbidden scope which throws a "Uncaught Error: Script execution is forbidden." (probably because it is being created in this weird place?) This patch re-adds the simple check that was removed in https://codereview.chromium.org/1885833002 which checked if the toDOMWindow(isolate->GetEnteredContext()) was null. (now the check is just isolate->GetEnteredContext()->IsEmpty()). BUG=617104 Committed: https://crrev.com/2deeee5b5604eb997fa053a1b6ab4268c662596f Cr-Commit-Position: refs/heads/master@{#398310}

Patch Set 1 #

Patch Set 2 : ...now with test expectation. #

Unified diffs Side-by-side diffs Delta from patch set Stats (+35 lines, -1 line) Patch
A third_party/WebKit/LayoutTests/bindings/blink-in-js-asan-crash.html View 1 1 chunk +31 lines, -0 lines 0 comments Download
A + third_party/WebKit/LayoutTests/bindings/blink-in-js-asan-crash-expected.txt View 1 1 chunk +1 line, -1 line 0 comments Download
M third_party/WebKit/Source/bindings/core/v8/V8Initializer.cpp View 1 chunk +3 lines, -0 lines 0 comments Download

Messages

Total messages: 20 (9 generated)
ikilpatrick
4 years, 6 months ago (2016-06-06 19:44:35 UTC) #4
yhirano
lgtm
4 years, 6 months ago (2016-06-06 22:56:42 UTC) #5
haraken
LGTM I guess that isolate->GetCurrentContext()->IsEmpty() would be a better check though (because ScriptState::current uses the ...
4 years, 6 months ago (2016-06-06 23:21:14 UTC) #6
ikilpatrick
On 2016/06/06 23:21:14, haraken wrote: > LGTM > > I guess that isolate->GetCurrentContext()->IsEmpty() would be ...
4 years, 6 months ago (2016-06-07 00:15:24 UTC) #7
haraken
On 2016/06/07 00:15:24, ikilpatrick wrote: > On 2016/06/06 23:21:14, haraken wrote: > > LGTM > ...
4 years, 6 months ago (2016-06-07 00:23:19 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2039333002/1
4 years, 6 months ago (2016-06-07 00:26:20 UTC) #10
ikilpatrick
On 2016/06/07 00:23:19, haraken wrote: > On 2016/06/07 00:15:24, ikilpatrick wrote: > > On 2016/06/06 ...
4 years, 6 months ago (2016-06-07 00:27:28 UTC) #11
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_rel_ng on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_rel_ng/builds/242126)
4 years, 6 months ago (2016-06-07 01:32:58 UTC) #13
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2039333002/20001
4 years, 6 months ago (2016-06-07 15:38:50 UTC) #16
commit-bot: I haz the power
Committed patchset #2 (id:20001)
4 years, 6 months ago (2016-06-07 16:04:26 UTC) #18
commit-bot: I haz the power
4 years, 6 months ago (2016-06-07 16:17:20 UTC) #20
Message was sent while issue was closed.
Patchset 2 (id:??) landed as
https://crrev.com/2deeee5b5604eb997fa053a1b6ab4268c662596f
Cr-Commit-Position: refs/heads/master@{#398310}

Powered by Google App Engine
This is Rietveld 408576698