| commit | 4d29dd615212c539463a4e4a02188aa34d06e96f | |
| author | raymes <raymes@chromium.org> | |
| Mon, 19 Jan 2015 20:56:15 +0000 (19 12:56 -0800) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Mon, 19 Jan 2015 20:57:12 +0000 (19 20:57 +0000) | ||
| tree | d9b226be69a9d6b5c36889bf6415733a8224324e | treesnapshot (tar.gz zip) |
| parent | 3da2c32a8e348cf62f6f2b561ce469f068d20bdf | commitdiff |
Prevent UAF of RenderFrames from GuestViewContainer
Current the RenderFrame a GuestViewContainer is associated with can be
accessed even after it is destroyed. We should track the destruction with
a RenderFrameObserver and avoid accesses in that case.
BUG=449574
Review URL: https://codereview.chromium.org/822483007
Cr-Commit-Position: refs/heads/master@{#312143}
Current the RenderFrame a GuestViewContainer is associated with can be
accessed even after it is destroyed. We should track the destruction with
a RenderFrameObserver and avoid accesses in that case.
BUG=449574
Review URL: https://codereview.chromium.org/822483007
Cr-Commit-Position: refs/heads/master@{#312143}