Chromium Code Reviews
DescriptionPlugin Power Saver: Fix race between GIN bindings and destruction
Sometimes the plugin.didFinishIconRepositionForTesting() C++ handler
triggers after the plugin has been marked for deletion.
This leads to a use-after-free crash as reported in the bug. This CL
fixes that by checking for plugin() being nullptr.
Other GIN callbacks use this check already to handle this case.
BUG=512140
Committed: https://crrev.com/2c329c9ed91c9aeae56633a50128f4d1b9abf927
Cr-Commit-Position: refs/heads/master@{#432550}
Patch Set 1 #
Messages
Total messages: 16 (11 generated)
|
|||||||||||||||||||