| commit | 967b67de294b4d719871c2f34e8302bf8aa5aa3b | |
| author | Joey Arhar <jarhar@chromium.org> | |
| Sun, 20 Nov 2022 16:08:11 +0000 (20 16:08 +0000) | ||
| committer | moz-wptsync-bot <wptsync@mozilla.com> | |
| Mon, 21 Nov 2022 02:53:22 +0000 (21 02:53 +0000) | ||
| tree | 030f4a7c4b39709d147feac753648176259d6571 | treesnapshot (tar.gz zip) |
| parent | 84ae4a136300bac4f7d064a5b5ca1e551d58d4cd | commitdiff |
Bug 1800098 [wpt PR 36910] - Avoid use-after-free in ValidationMessageOverlayDelegate, a=testonly
Automatic update from web-platform-tests
Avoid use-after-free in ValidationMessageOverlayDelegate
When ValidationMessageOverlayDelegate calls
ForceSynchronousDocumentInstall, it can somehow cause another validation
overlay to be created and delete the ValidationMessageOverlayDelegate.
This patch avoids additional code from being run inside the deleted
ValidationMessageOverlayDelegate.
Fixed: 1382581
Change-Id: I044f91ecb55c77c4a5c40030b6856fc9a8ac7f6f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4019655
Reviewed-by: David Baron <dbaron@chromium.org>
Commit-Queue: Joey Arhar <jarhar@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1071652}
--
wpt-commits: 001870c82cc698c71e39c208171a9e5a236955b4
wpt-pr: 36910
Automatic update from web-platform-tests
Avoid use-after-free in ValidationMessageOverlayDelegate
When ValidationMessageOverlayDelegate calls
ForceSynchronousDocumentInstall, it can somehow cause another validation
overlay to be created and delete the ValidationMessageOverlayDelegate.
This patch avoids additional code from being run inside the deleted
ValidationMessageOverlayDelegate.
Fixed: 1382581
Change-Id: I044f91ecb55c77c4a5c40030b6856fc9a8ac7f6f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4019655
Reviewed-by: David Baron <dbaron@chromium.org>
Commit-Queue: Joey Arhar <jarhar@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1071652}
--
wpt-commits: 001870c82cc698c71e39c208171a9e5a236955b4
wpt-pr: 36910
| testing/web-platform/tests/html/semantics/forms/constraints/reportValidity-crash.html | [new file with mode: 0644] | blob |