diff options
| author | jam@chromium.org <jam@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-04-08 16:44:04 +0000 |
|---|---|---|
| committer | jam@chromium.org <jam@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-04-08 16:44:04 +0000 |
| commit | b91becc10183aedfbfe9b5767b80bd44acdad540 (patch) | |
| tree | 8da739f24e9d571a1921646d6ef5284154dee06a | |
| parent | 8041a63cc3f90bb8ba4adcc8a015461b94dcf0ec (diff) | |
| download | chromium_src-b91becc10183aedfbfe9b5767b80bd44acdad540.zip chromium_src-b91becc10183aedfbfe9b5767b80bd44acdad540.tar.gz chromium_src-b91becc10183aedfbfe9b5767b80bd44acdad540.tar.bz2 | |
Fix heap corruption that occurs when RenderViewHostObserver calls RenderViewHost to unregister when the latter is in its destructor.
TBR=dmichael
Review URL: http://codereview.chromium.org/6813043
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@80946 0039d316-1c4b-4281-b951-d872f2087c98
| -rw-r--r-- | content/browser/renderer_host/render_view_host_observer.cc | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/content/browser/renderer_host/render_view_host_observer.cc b/content/browser/renderer_host/render_view_host_observer.cc index e60e2bb..4319855 100644 --- a/content/browser/renderer_host/render_view_host_observer.cc +++ b/content/browser/renderer_host/render_view_host_observer.cc @@ -35,7 +35,6 @@ bool RenderViewHostObserver::Send(IPC::Message* message) { } void RenderViewHostObserver::RenderViewHostDestruction() { - render_view_host_->RemoveObserver(this); - RenderViewHostDestroyed(); render_view_host_ = NULL; + RenderViewHostDestroyed(); } |