diff options
| author | Raymes Khoury <raymes@chromium.org> | 2015-01-27 13:00:11 +1100 |
|---|---|---|
| committer | Raymes Khoury <raymes@chromium.org> | 2015-01-27 02:07:04 +0000 |
| commit | 70b5863decfedcf93d371c1c67ba1edf9b482a51 (patch) | |
| tree | 82b5fe3e6f0f17b87fe4d2af8ba27d9f86ec34dc /testing | |
| parent | c3ef7fc8833a675d999002bb2b64cd2882a2113b (diff) | |
| download | chromium_src-70b5863decfedcf93d371c1c67ba1edf9b482a51.zip chromium_src-70b5863decfedcf93d371c1c67ba1edf9b482a51.tar.gz chromium_src-70b5863decfedcf93d371c1c67ba1edf9b482a51.tar.bz2 | |
Merge: Prevent UAF of RenderFrames from GuestViewContainer
Current the RenderFrame a GuestViewContainer is associated with can be
accessed even after it is destroyed. We should track the destruction with
a RenderFrameObserver and avoid accesses in that case.
BUG=449574
Committed: https://crrev.com/4d29dd615212c539463a4e4a02188aa34d06e96f
Cr-Commit-Position: refs/heads/master@{#312143}
Review URL: https://codereview.chromium.org/822483007
Cr-Commit-Position: refs/heads/master@{#312216}
(cherry picked from commit 569ce1bcb696473c117b8afdc15871183c0052ef)
TBR=raymes@chromium.org
Review URL: https://codereview.chromium.org/876983002
Cr-Commit-Position: refs/branch-heads/2272@{#124}
Cr-Branched-From: 827a380cfdb31aa54c8d56e63ce2c3fd8c3ba4d4-refs/heads/master@{#310958}
Diffstat (limited to 'testing')
0 files changed, 0 insertions, 0 deletions