| commit | c18057cb698ccb16b0ab6c308926c32000f3dd52 | |
| author | fsamuel <fsamuel@chromium.org> | |
| Mon, 6 Jul 2015 23:29:06 +0000 (6 16:29 -0700) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Mon, 6 Jul 2015 23:30:33 +0000 (6 23:30 +0000) | ||
| tree | 59c9a87329d6e3406a46e2105d0a91893814f415 | treesnapshot (tar.gz zip) |
| parent | e085bffbc79f85284a4c9c0c5145f80d94726c3b | commitdiff |
Mandoline: Make TransferBufferManager RefCounted
In Mandoline, GLES2Decoder is the only reference to ContextGroup which owns
TransferBufferManager.
If GLES2Decoder is destroyed before CommandBufferService, then CommandBufferService
will hold on to an invalid pointer which can result in use after free.
BUG=496935
TBR=piman@chromium.org for trivial change in gpu/gles2_conform_support
Review URL: https://codereview.chromium.org/1218183010
Cr-Commit-Position: refs/heads/master@{#337515}
In Mandoline, GLES2Decoder is the only reference to ContextGroup which owns
TransferBufferManager.
If GLES2Decoder is destroyed before CommandBufferService, then CommandBufferService
will hold on to an invalid pointer which can result in use after free.
BUG=496935
TBR=piman@chromium.org for trivial change in gpu/gles2_conform_support
Review URL: https://codereview.chromium.org/1218183010
Cr-Commit-Position: refs/heads/master@{#337515}
14 files changed: