Bug 45329

Summary: [chromium] PlatformLayer's must get their owner reset when owner is destroyed
Product: WebKit Reporter: Vangelis Kokkevis <vangelis>
Component: WebCore Misc.Assignee: Vangelis Kokkevis <vangelis>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: OS X 10.5   
Attachments:
Description Flags
Proposed patch fishd: review+, vangelis: commit-queue-

Vangelis Kokkevis
Reported 2010-09-07 15:40:05 PDT
A PlatformLayer's owner is a GraphicsLayer which holds a RefPtr to the PlatformLayer. PlatformLayer's can outlive their owning GraphicsLayer as other objects can also have references to them and therefore need to have their owner reset once that owner goes away. Failing to do so can result in accessing memory that has been freed.
Attachments
Proposed patch (1.44 KB, patch)
2010-09-07 15:47 PDT, Vangelis Kokkevis 		fishd: review+
vangelis: commit-queue-
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Vangelis Kokkevis
Comment 1 2010-09-07 15:47:11 PDT
Created attachment 66779 [details] Proposed patch
Vangelis Kokkevis
Comment 2 2010-09-07 16:06:09 PDT
Committed r66923: <http://trac.webkit.org/changeset/66923>
Note You need to log in before you can comment on or make changes to this bug.