| commit | 912887b4a462f216fca73228de49b4c6cc980da4 | [log] [tgz] |
|---|---|---|
| author | lfg <lfg@chromium.org> | Sat Feb 14 00:04:00 2015 |
| committer | Commit bot <commit-bot@chromium.org> | Sat Feb 14 00:04:55 2015 |
| tree | 18a0b79794178fc6d9468f70b6ff7d5e17e93415 | |
| parent | 479ea5af28a7121022365384630634aa489ac916 [diff] |
Sets render_frame_proxy_ to null in the RenderFrameImpl when destroying the RenderFrameProxy. This fixes with a use-after-free in the RenderFrameProxy reported by the asan bots, but uncovers another one. TEST=NavigateRemoteFrame BUG=357747 Review URL: https://codereview.chromium.org/929463004 Cr-Commit-Position: refs/heads/master@{#316337}