| commit | 5007f0718014e5ab8b81db0fde8dd8cc06ae2fc4 | |
| author | reveman <reveman@chromium.org> | |
| Tue, 11 Nov 2014 22:08:04 +0000 (11 14:08 -0800) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Tue, 11 Nov 2014 22:08:22 +0000 (11 22:08 +0000) | ||
| tree | cc21685d48989fd77eddf1babeb55ae456f187fd | treesnapshot (tar.gz zip) |
| parent | 1ba4ec56cb8f8e76f5d0cd37db09ebe41129c9c8 | commitdiff |
content: Fix IOSurface use-after-free problem.
base::ScopedCFTypeRef will free the IOSurface after
passing it to the GpuMemoryBufferImplIOSurface ctor
unless we call release() to pass the ownership.
BUG=
R=piman@chromium.org
Review URL: https://codereview.chromium.org/708223006
Cr-Commit-Position: refs/heads/master@{#303729}
base::ScopedCFTypeRef will free the IOSurface after
passing it to the GpuMemoryBufferImplIOSurface ctor
unless we call release() to pass the ownership.
BUG=
R=piman@chromium.org
Review URL: https://codereview.chromium.org/708223006
Cr-Commit-Position: refs/heads/master@{#303729}
| content/common/gpu/client/gpu_memory_buffer_impl_io_surface.cc | diffblobblamehistory |