Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(260)

Issue 2638293002: Revert of Fix MenuController Heap-use-after-free (Closed)

Created:
3 years, 11 months ago by meade_UTC10
Modified:
3 years, 11 months ago
Reviewers:
jonross, sky
CC:
chromium-reviews, tfarina
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Revert of Fix MenuController Heap-use-after-free (patchset #2 id:20001 of https://codereview.chromium.org/2636293002/ ) Reason for revert: Caused a memory leak in BookmarkBarViewTest7.DNDToDifferentMenu and BookmarkBarViewTest8.DNDBackToOriginatingMenu See crbug.com/682109 Build link: https://build.chromium.org/p/chromium.memory/builders/Linux%20Chromium%20OS%20ASan%20LSan%20Tests%20%281%29/builds/19037 Original issue's description: > Fix MenuController Heap-use-after-free > > MenuController applies a ref to ViewsDelegate, in order to prevent Chrome from > shutting down while a menu is open. This ref is released as the menu is closing. > > However it is possible for the release of the ref to lead to Chrome shutting > down immediately. During this MenuController is deleted. However it was possible > that MenuController would access the heap as the stack collapsed. > > This change updates the menu closing process to detect the deletion and to > shutdown cleanly. > > TEST=MenuControllerTest.DestroyedDuringViewsRelease > BUG=681462 > > Review-Url: https://codereview.chromium.org/2636293002 > Cr-Commit-Position: refs/heads/master@{#444203} > Committed: https://chromium.googlesource.com/chromium/src/+/faaee985121bc612a5a79b03215a490f7f65d0eb TBR=sky@chromium.org,jonross@chromium.org # Skipping CQ checks because original CL landed less than 1 days ago. NOPRESUBMIT=true NOTREECHECKS=true NOTRY=true BUG=681462 Review-Url: https://codereview.chromium.org/2638293002 Cr-Commit-Position: refs/heads/master@{#444281} Committed: https://chromium.googlesource.com/chromium/src/+/cd4f55690437f7c40bfa710586781ec316cc889e

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+0 lines, -66 lines) Patch
M ui/views/controls/menu/menu_controller.cc View 2 chunks +0 lines, -7 lines 0 comments Download
M ui/views/controls/menu/menu_controller_unittest.cc View 6 chunks +0 lines, -59 lines 0 comments Download

Messages

Total messages: 6 (3 generated)
meade_UTC10
Created Revert of Fix MenuController Heap-use-after-free
3 years, 11 months ago (2017-01-18 05:18:16 UTC) #2
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2638293002/1
3 years, 11 months ago (2017-01-18 05:18:25 UTC) #3
commit-bot: I haz the power
3 years, 11 months ago (2017-01-18 05:20:18 UTC) #6
Message was sent while issue was closed.
Committed patchset #1 (id:1) as
https://chromium.googlesource.com/chromium/src/+/cd4f55690437f7c40bfa71058678...

Powered by Google App Engine
This is Rietveld 408576698