Description[XFA] Force destruction order of font managers.
The GEFont points to the font manager which creates it and tries to unregister
itself. Currently the GEFont can be created by the default mapper and then
stored in a different mapper. If the default mapper is destroyed first, when
the second mapper cleans up the font there will be a call to unregister on
the default mapper causing a use-after-free.
The long term fix is to fixup the GEFont so it points to the correct mapper
to unregister from. This CL forces the destruction order in CXFA_FFApp to
cleanup the non-default mapper first.
BUG=chromium:637546
Committed: https://pdfium.googlesource.com/pdfium/+/837735660808d52580703183ae24a3c7c7b05c7d
Patch Set 1 #Patch Set 2 : More resets #
Total comments: 2
Patch Set 3 : Re-arrange header entries #
Messages
Total messages: 22 (13 generated)
|