Google Git
Sign in
chromium / chromium / src / d12d293f7c958cd389bb29d5bd1f6f3c274a7799
commitd12d293f7c958cd389bb29d5bd1f6f3c274a7799[log] [tgz]
authorAdithya Srinivasan <adithyas@chromium.org>Wed Dec 26 06:20:53 2018
committerCommit Bot <commit-bot@chromium.org>Wed Dec 26 06:20:53 2018
tree871e6465dd0132ad4edea66d3efe21fde45fa792
parent0213c55a58f27c9b9541c2a01987e722a0e2063f [diff]
[WebMIDI] Detach clients in MidiService::Shutdown

MidiService::Shutdown clears the |manager_| pointer but doesn't directly
destroy MidiManager. Clients cannot call EndSession and remove themselves
from the |clients_| list in MidiManager (because MidiService no longer owns
it). These clients then can be independently destroyed, leading to a use
after free when MidiManager tries to call Detach on the clients.

Bug: 915693, 913270, 582328
Change-Id: I0f713743bfd8f736c17e3ec3dd8472bd05ad7254
Reviewed-on: https://chromium-review.googlesource.com/c/1383436
Commit-Queue: Takashi Toyoshima <toyoshim@chromium.org>
Reviewed-by: Takashi Toyoshima <toyoshim@chromium.org>
Cr-Commit-Position: refs/heads/master@{#618906}
3 files changed
tree: 871e6465dd0132ad4edea66d3efe21fde45fa792
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. build/
  6. build_overrides/
  7. cc/
  8. chrome/
  9. chrome_elf/
  10. chromecast/
  11. chromeos/
  12. cloud_print/
  13. components/
  14. content/
  15. courgette/
  16. crypto/
  17. dbus/
  18. device/
  19. docs/
  20. extensions/
  21. gin/
  22. google_apis/
  23. google_update/
  24. gpu/
  25. headless/
  26. infra/
  27. ios/
  28. ipc/
  29. jingle/
  30. mash/
  31. media/
  32. mojo/
  33. native_client_sdk/
  34. net/
  35. pdf/
  36. ppapi/
  37. printing/
  38. remoting/
  39. rlz/
  40. sandbox/
  41. services/
  42. skia/
  43. sql/
  44. storage/
  45. styleguide/
  46. testing/
  47. third_party/
  48. tools/
  49. ui/
  50. url/
  51. webrunner/
  52. .clang-format
  53. .eslintrc.js
  54. .git-blame-ignore-revs
  55. .gitattributes
  56. .gitignore
  57. .gn
  58. .vpython
  59. AUTHORS
  60. BUILD.gn
  61. CODE_OF_CONDUCT.md
  62. codereview.settings
  63. DEPS
  64. ENG_REVIEW_OWNERS
  65. LICENSE
  66. LICENSE.chromium_os
  67. OWNERS
  68. PRESUBMIT.py
  69. PRESUBMIT_test.py
  70. PRESUBMIT_test_mocks.py
  71. README.md
  72. WATCHLISTS
README.md

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure .