diff options
| author | piman@chromium.org <piman@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-02-09 04:40:26 +0000 |
|---|---|---|
| committer | piman@chromium.org <piman@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-02-09 04:40:26 +0000 |
| commit | c826d738c0cf7e5e1822664dec01c58ece6cd699 (patch) | |
| tree | bfbbd5c56f6e7e5312efefd91ec3a5ec09f4ddb8 /chrome/browser/chromeos/imageburner | |
| parent | b5f8e194110259bc48aba41826ced5922e8aeb65 (diff) | |
| download | chromium_src-c826d738c0cf7e5e1822664dec01c58ece6cd699.zip chromium_src-c826d738c0cf7e5e1822664dec01c58ece6cd699.tar.gz chromium_src-c826d738c0cf7e5e1822664dec01c58ece6cd699.tar.bz2 | |
Fix use-after-free in ~TextureInfo
In some paths, the TextureInfo (refcounted) may outlive the TextureManager,
accessing a stale pointer in its destructor. This fixes it.
BUG=chromium-os:25634
TEST=pepper flash, reload videos many times.
Review URL: http://codereview.chromium.org/9374004
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@121188 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/chromeos/imageburner')
0 files changed, 0 insertions, 0 deletions