diff options
| author | ananta@chromium.org <ananta@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-24 19:27:02 +0000 |
|---|---|---|
| committer | ananta@chromium.org <ananta@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-24 19:27:02 +0000 |
| commit | 9d9f653d7ac6a2f083dd9acd2ff7a12a5c202398 (patch) | |
| tree | 9d7190bdcebd607e333674902e98fb1fd0165e84 /chrome/browser/download | |
| parent | dd924193b5c11b188a56a09f7c29c8cbdfa0737e (diff) | |
| download | chromium_src-9d9f653d7ac6a2f083dd9acd2ff7a12a5c202398.zip chromium_src-9d9f653d7ac6a2f083dd9acd2ff7a12a5c202398.tar.gz chromium_src-9d9f653d7ac6a2f083dd9acd2ff7a12a5c202398.tar.bz2 | |
Fixed a hang in ChromeFrame while tearing down pending url requests during shutdown. This would occur
when we received a redirect notification on an aborted request. We would end up aborting the request twice
which would cause the UrlmonUrlRequest object to be destroyed twice by IE, thus resulting in a junk reference
in the request map.
Fix is to bail out in the IBindStatusCallback::OnProgress callback if it is invoked for an aborted request.
Part of the fix for http://code.google.com/p/chromium/issues/detail?id=34687
The other issue being fixed is a crash in ChromeFrame caused if the UrlmonUrlRequest object gets destroyed
in the context of UrlmonUrlRequest::StartAsyncDownload. The crash would occur while accessing members of the
object on return from this function. Fix is to grab a reference on this object in the context of the call.
Bug=34687
Review URL: http://codereview.chromium.org/652202
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@39909 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/download')
0 files changed, 0 insertions, 0 deletions