Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(157)

Issue 615543006: Fix use-after-free in BrowserActionView::~BrowserActionView() (Closed)

Created:
6 years, 2 months ago by Devlin
Modified:
6 years, 2 months ago
Reviewers:
sky
CC:
chromium-reviews, tfarina
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Project:
chromium
Visibility:
Public.

Description

Fix use-after-free in BrowserActionView::~BrowserActionView() BrowserActionView::~BrowserActionView deletes ExtensionActionViewController, which calls CleanupPopup, which resets a MenuButton::PressedLock, which was already deleted. Fix the order of destruction. BUG=418737 Committed: https://crrev.com/5b2368cfdf6e0790910eb7c0be5fdb0d068e00a3 Cr-Commit-Position: refs/heads/master@{#297325}

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+6 lines, -3 lines) Patch
M chrome/browser/ui/views/toolbar/browser_action_view.h View 2 chunks +6 lines, -3 lines 0 comments Download

Messages

Total messages: 7 (2 generated)
Devlin
Scott, PTAL. Could also fix this easily by reset()ing |pressed_lock_| in ~BrowserActionView(), if you prefer.
6 years, 2 months ago (2014-09-29 23:07:15 UTC) #2
sky
LGTM
6 years, 2 months ago (2014-09-29 23:49:39 UTC) #3
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/615543006/1
6 years, 2 months ago (2014-09-30 00:03:54 UTC) #5
commit-bot: I haz the power
Committed patchset #1 (id:1) as b9467412e0c9544579835e5f0db9b60cc79b1945
6 years, 2 months ago (2014-09-30 01:10:30 UTC) #6
commit-bot: I haz the power
6 years, 2 months ago (2014-09-30 01:12:19 UTC) #7
Message was sent while issue was closed.
Patchset 1 (id:??) landed as
https://crrev.com/5b2368cfdf6e0790910eb7c0be5fdb0d068e00a3
Cr-Commit-Position: refs/heads/master@{#297325}

Powered by Google App Engine
This is Rietveld 408576698