summaryrefslogtreecommitdiffstats
path: root/sandbox
diff options
context:
space:
mode:
authortbreisacher@chromium.org <tbreisacher@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-07-25 21:47:35 +0000
committertbreisacher@chromium.org <tbreisacher@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-07-25 21:47:35 +0000
commit8c5e41d2a6b97929df6be79c8b5a0020b13c9504 (patch)
tree8b107b30b43d18b8c5b55598587152e7dcefc523 /sandbox
parent420ade41729ee2ef0369acf8e172ee79eb007842 (diff)
downloadchromium_src-8c5e41d2a6b97929df6be79c8b5a0020b13c9504.zip
chromium_src-8c5e41d2a6b97929df6be79c8b5a0020b13c9504.tar.gz
chromium_src-8c5e41d2a6b97929df6be79c8b5a0020b13c9504.tar.bz2
Remove use-after-free bug.
CID=104376 BUG= TEST= Review URL: https://chromiumcodereview.appspot.com/10821018 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@148424 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'sandbox')
-rw-r--r--sandbox/win/src/broker_services.cc6
1 files changed, 3 insertions, 3 deletions
diff --git a/sandbox/win/src/broker_services.cc b/sandbox/win/src/broker_services.cc
index 80837b3..6aca8e5 100644
--- a/sandbox/win/src/broker_services.cc
+++ b/sandbox/win/src/broker_services.cc
@@ -297,12 +297,12 @@ ResultCode BrokerServicesBase::SpawnTarget(const wchar_t* exe_path,
HANDLE lockdown_token_temp;
DWORD win_result = policy_base->MakeTokens(&initial_token_temp,
&lockdown_token_temp);
- base::win::ScopedHandle initial_token(initial_token_temp);
- base::win::ScopedHandle lockdown_token(lockdown_token_temp);
-
if (ERROR_SUCCESS != win_result)
return SBOX_ERROR_GENERIC;
+ base::win::ScopedHandle initial_token(initial_token_temp);
+ base::win::ScopedHandle lockdown_token(lockdown_token_temp);
+
HANDLE job_temp;
win_result = policy_base->MakeJobObject(&job_temp);
base::win::ScopedHandle job(job_temp);