Google Git
Sign in
chromium / chromium / src / b7cdf1940bcade90a4203fd6faafd79813fff6a4
commitb7cdf1940bcade90a4203fd6faafd79813fff6a4[log] [tgz]
authorestade@chromium.org <estade@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>Mon Aug 26 23:14:49 2013
committerestade@chromium.org <estade@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>Mon Aug 26 23:14:49 2013
tree8cc0bd0cd78d21dbe0a78e83b446782d5a647f7c
parent13246b81179bd95f0c6019b1cb7a20f2d8a88098 [diff]
gtk: Fix use after free

This undoes r132498, which I'm pretty sure was barking up the wrong tree.

The issue in the bug is that the model is cleared and the popup is /hidden/ (not destroyed), but still has events queued up. LineFromY does attempt to sanitize the result (in case the model has changed without the UI having a chance to catch up), but doesn't handle an empty model.

BUG=123530

Review URL: https://chromiumcodereview.appspot.com/23257002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@219636 0039d316-1c4b-4281-b951-d872f2087c98
2 files changed
tree: 8cc0bd0cd78d21dbe0a78e83b446782d5a647f7c
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. breakpad/
  6. build/
  7. cc/
  8. chrome/
  9. chrome_frame/
  10. chromeos/
  11. cloud_print/
  12. components/
  13. content/
  14. courgette/
  15. crypto/
  16. dbus/
  17. device/
  18. extensions/
  19. google_apis/
  20. google_update/
  21. gpu/
  22. ios/
  23. ipc/
  24. jingle/
  25. media/
  26. native_client_sdk/
  27. net/
  28. ppapi/
  29. printing/
  30. remoting/
  31. rlz/
  32. sandbox/
  33. sdch/
  34. skia/
  35. sql/
  36. sync/
  37. testing/
  38. third_party/
  39. tools/
  40. ui/
  41. url/
  42. webkit/
  43. win8/
  44. .DEPS.git
  45. .gitignore
  46. .gitmodules
  47. .gn
  48. Android.mk
  49. AUTHORS
  50. codereview.settings
  51. DEPS
  52. LICENSE
  53. LICENSE.chromium_os
  54. OWNERS
  55. PRESUBMIT.py
  56. PRESUBMIT_test.py
  57. WATCHLISTS