diff options
| author | piman@google.com <piman@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-03-22 23:44:37 +0000 |
|---|---|---|
| committer | piman@google.com <piman@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-03-22 23:44:37 +0000 |
| commit | 3f668cbc83792f192cfb262bd7a720152ae0f450 (patch) | |
| tree | 2c0bebd82ea76cee0dab591ce25ca273983d777b /webkit/plugins | |
| parent | 80b3ac77f0924653037cba65c6c8586b98ed57d4 (diff) | |
| download | chromium_src-3f668cbc83792f192cfb262bd7a720152ae0f450.zip chromium_src-3f668cbc83792f192cfb262bd7a720152ae0f450.tar.gz chromium_src-3f668cbc83792f192cfb262bd7a720152ae0f450.tar.bz2 | |
Fix write-after-free in PPB_Surface_3D_Impl
BUG=chromium-os:13314
TEST=Youtube with Pepper Flash, click on expand, observe no crash.
Review URL: http://codereview.chromium.org/6717015
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@79071 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'webkit/plugins')
| -rw-r--r-- | webkit/plugins/ppapi/ppb_surface_3d_impl.cc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/webkit/plugins/ppapi/ppb_surface_3d_impl.cc b/webkit/plugins/ppapi/ppb_surface_3d_impl.cc index bb88fe0..e48b1d5 100644 --- a/webkit/plugins/ppapi/ppb_surface_3d_impl.cc +++ b/webkit/plugins/ppapi/ppb_surface_3d_impl.cc @@ -78,6 +78,8 @@ PPB_Surface3D_Impl::PPB_Surface3D_Impl(PluginInstance* instance) } PPB_Surface3D_Impl::~PPB_Surface3D_Impl() { + if (context_) + context_->BindSurfaces(NULL, NULL); } const PPB_Surface3D_Dev* PPB_Surface3D_Impl::GetInterface() { |