commit | 02f393b976c43d48d54f8e9cfc5bf03ea48c398a | [log] [tgz] |
---|---|---|
author | Grzegorz Gacek <ggacek@opera.com> | Tue Aug 21 10:20:45 2018 |
committer | Commit Bot <commit-bot@chromium.org> | Tue Aug 21 10:20:45 2018 |
tree | 49fe728c0537d9f737707c26757da788338ee41d | |
parent | 270f931396ff7dcdd3c6c4073554f55f5c212cc9 [diff] |
Fix possible use-after-free when menu is closed by its item. Fix use-after-free which occured when a menu contained an item closing it on a mouse press event. In such case MenuController object was freed during a call of its OnMousePressed() but it continued to modify its member variables. Bug: 871205 Change-Id: Ic2a5dd3a745da6b0c1ef7a87f2cb498cc1a97234 Reviewed-on: https://chromium-review.googlesource.com/1163617 Reviewed-by: Trent Apted <tapted@chromium.org> Commit-Queue: Trent Apted <tapted@chromium.org> Cr-Commit-Position: refs/heads/master@{#584706}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .