diff options
| author | vabr@chromium.org <vabr@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-03-15 16:08:30 +0000 |
|---|---|---|
| committer | vabr@chromium.org <vabr@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-03-15 16:08:30 +0000 |
| commit | 2c17fde1ccb8fd5064dca8fa43d2d03315196b1e (patch) | |
| tree | 747a7500c182e7311b39108b57cca51e9ac17acf /chrome/test/chromedriver/commands.cc | |
| parent | f7357d0b6cddbc164c9a1633ce54f308de422558 (diff) | |
| download | chromium_src-2c17fde1ccb8fd5064dca8fa43d2d03315196b1e.zip chromium_src-2c17fde1ccb8fd5064dca8fa43d2d03315196b1e.tar.gz chromium_src-2c17fde1ccb8fd5064dca8fa43d2d03315196b1e.tar.bz2 | |
Hold RulesRegistryStorageDelegate::Inner in scoped_refptr when posting tasks
Naked pointers were used, which resulted very probably in use-after-free.
This implements the fix suggested in
https://code.google.com/p/chromium/issues/detail?id=177653#c22
BUG=177653
Review URL: https://chromiumcodereview.appspot.com/12859005
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@188409 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/test/chromedriver/commands.cc')
0 files changed, 0 insertions, 0 deletions