| commit | 912887b4a462f216fca73228de49b4c6cc980da4 | |
| author | lfg <lfg@chromium.org> | |
| Sat, 14 Feb 2015 00:04:00 +0000 (13 16:04 -0800) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Sat, 14 Feb 2015 00:04:55 +0000 (14 00:04 +0000) | ||
| tree | 18a0b79794178fc6d9468f70b6ff7d5e17e93415 | treesnapshot (tar.gz zip) |
| parent | 479ea5af28a7121022365384630634aa489ac916 | commitdiff |
Sets render_frame_proxy_ to null in the RenderFrameImpl when destroying the RenderFrameProxy.
This fixes with a use-after-free in the RenderFrameProxy reported by the asan bots, but uncovers another one.
TEST=NavigateRemoteFrame
BUG=357747
Review URL: https://codereview.chromium.org/929463004
Cr-Commit-Position: refs/heads/master@{#316337}
This fixes with a use-after-free in the RenderFrameProxy reported by the asan bots, but uncovers another one.
TEST=NavigateRemoteFrame
BUG=357747
Review URL: https://codereview.chromium.org/929463004
Cr-Commit-Position: refs/heads/master@{#316337}
| content/renderer/render_frame_proxy.cc | diffblobblamehistory |