DescriptionFix use-after-free in BrowserActionView::~BrowserActionView()
BrowserActionView::~BrowserActionView deletes ExtensionActionViewController,
which calls CleanupPopup, which resets a MenuButton::PressedLock, which was
already deleted. Fix the order of destruction.
BUG=418737
Committed: https://crrev.com/5b2368cfdf6e0790910eb7c0be5fdb0d068e00a3
Cr-Commit-Position: refs/heads/master@{#297325}
Patch Set 1 #
Messages
Total messages: 7 (2 generated)
|