diff options
| author | fsamuel@chromium.org <fsamuel@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-01-31 19:31:06 +0000 |
|---|---|---|
| committer | fsamuel@chromium.org <fsamuel@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-01-31 19:31:06 +0000 |
| commit | 61c55542f5d452cbb2f049b6eb83dfe25f29e20a (patch) | |
| tree | 200b095383e34dcdcec53a6c8bb44e9a3c9169d9 /base/strings | |
| parent | 71bd8b7ac365ba15c7e1950baad5bdde88b2e235 (diff) | |
| download | chromium_src-61c55542f5d452cbb2f049b6eb83dfe25f29e20a.zip chromium_src-61c55542f5d452cbb2f049b6eb83dfe25f29e20a.tar.gz chromium_src-61c55542f5d452cbb2f049b6eb83dfe25f29e20a.tar.bz2 | |
Browser Plugin: Software path failover no longer crashes the embedder.
When failing over to the software rendering path from the compositing path,
BrowserPlugin would use the old backing store that was created prior to
switching to the compositing path. If the BrowserPlugin was resized while
compositing, then the backing store would be rendered incorrectly and
BrowserPlugin might attempt to read/write beyond the end of the buffer and crash.
BUG=171978
Test=Manually killing the GPU process three times while viewing Poster Circle
Review URL: https://chromiumcodereview.appspot.com/12079050
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@179925 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'base/strings')
0 files changed, 0 insertions, 0 deletions