Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(167)

Issue 2806003002: Verify that constant vectors aren't invalidated during iteration. (Closed)

Created:
3 years, 8 months ago by sof
Modified:
3 years, 8 months ago
Reviewers:
haraken, meade_UTC10
CC:
chromium-reviews, kenneth.christiansen, Yoav Weiss, blink-reviews-css, dglazkov+blink, apavlov+blink_chromium.org, darktears, blink-reviews, rwlbuis
Target Ref:
refs/heads/master
Project:
chromium
Visibility:
Public.

Description

Verify that constant vectors aren't invalidated during iteration. Clearing a heap vector while it is being iterated and on the stack is unsafe, as it promptly releases the backing store. Add CHECK()s to verify that this doesn't happen for a crasher involving MediaQuerySets that's proving hard to pindown, but there are some suggestions that the heap vector contents of MediaQuerySet::m_queries is being mutated. R= BUG=699269 Review-Url: https://codereview.chromium.org/2806003002 Cr-Commit-Position: refs/heads/master@{#463124} Committed: https://chromium.googlesource.com/chromium/src/+/b2a0ce3e8a9b3e561c67cf0a2772c4567567b9f6

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+6 lines, -1 line) Patch
M third_party/WebKit/Source/core/css/MediaQueryEvaluator.cpp View 1 chunk +4 lines, -1 line 0 comments Download
M third_party/WebKit/Source/core/css/RuleSet.cpp View 1 chunk +2 lines, -0 lines 0 comments Download

Messages

Total messages: 12 (8 generated)
sof
please take a look. i can't explain all MediaQuerySet-related crash stacks from a bug like ...
3 years, 8 months ago (2017-04-07 20:52:46 UTC) #4
haraken
LGTM (I was chatting with keishi@ about MediaQuery crashes yesterday but didn't come up with ...
3 years, 8 months ago (2017-04-07 22:38:05 UTC) #5
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2806003002/1
3 years, 8 months ago (2017-04-08 05:15:35 UTC) #9
commit-bot: I haz the power
3 years, 8 months ago (2017-04-08 05:20:15 UTC) #12
Message was sent while issue was closed.
Committed patchset #1 (id:1) as
https://chromium.googlesource.com/chromium/src/+/b2a0ce3e8a9b3e561c67cf0a2772...

Powered by Google App Engine
This is Rietveld 408576698