diff options
| author | ddorwin@chromium.org <ddorwin@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-06-01 01:15:55 +0000 |
|---|---|---|
| committer | ddorwin@chromium.org <ddorwin@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-06-01 01:15:55 +0000 |
| commit | b4773529f0551da68136998a9a13cc4a89230937 (patch) | |
| tree | a985a8d7a337c2bf1a77f667e32be3d3c6a859fb /content/renderer/pepper_plugin_delegate_impl.cc | |
| parent | 9487852f94c271c436e94bb2ddf5655e39802a63 (diff) | |
| download | chromium_src-b4773529f0551da68136998a9a13cc4a89230937.zip chromium_src-b4773529f0551da68136998a9a13cc4a89230937.tar.gz chromium_src-b4773529f0551da68136998a9a13cc4a89230937.tar.bz2 | |
Fixed issue 84548 by checking the pointer before dereferencing it.
BUG=84548
TEST=See bug.
Review URL: http://codereview.chromium.org/7057046
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@87405 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/renderer/pepper_plugin_delegate_impl.cc')
| -rw-r--r-- | content/renderer/pepper_plugin_delegate_impl.cc | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/content/renderer/pepper_plugin_delegate_impl.cc b/content/renderer/pepper_plugin_delegate_impl.cc index b20c2b9..918ec5b 100644 --- a/content/renderer/pepper_plugin_delegate_impl.cc +++ b/content/renderer/pepper_plugin_delegate_impl.cc @@ -654,10 +654,10 @@ void PepperPluginDelegateImpl::OnPpapiBrokerChannelCreated( int request_id, base::ProcessHandle broker_process_handle, const IPC::ChannelHandle& handle) { - - scoped_refptr<PpapiBrokerImpl> broker = - *pending_connect_broker_.Lookup(request_id); - if (broker) { + scoped_refptr<PpapiBrokerImpl>* broker_ptr = + pending_connect_broker_.Lookup(request_id); + if (broker_ptr) { + scoped_refptr<PpapiBrokerImpl> broker = *broker_ptr; pending_connect_broker_.Remove(request_id); broker->OnBrokerChannelConnected(broker_process_handle, handle); } else { |