This use after free was triggered when a window was made key and destroyed, then another window was made key. dedResignKey was called on the former's WindowDelegate which had already been freed, causing a crash. BUG=angleproject:891 Change-Id: If47e88419f9a407a6a77c5cd9853b7b4860dc698 Reviewed-on: https://chromium-review.googlesource.com/305817 Tryjob-Request: Corentin Wallez <cwallez@chromium.org> Reviewed-by:Jamie Madill <jmadill@chromium.org> Reviewed-by:
Geoff Lang <geofflang@chromium.org> Commit-Queue: Corentin Wallez <cwallez@chromium.org> Tested-by:
Corentin Wallez <cwallez@chromium.org>
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| linux | Loading commit data... | |
| osx | Loading commit data... | |
| posix | Loading commit data... | |
| windows | Loading commit data... | |
| x11 | Loading commit data... | |
| EGLWindow.cpp | Loading commit data... | |
| EGLWindow.h | Loading commit data... | |
| Event.h | Loading commit data... | |
| Matrix.cpp | Loading commit data... | |
| Matrix.h | Loading commit data... | |
| OSPixmap.h | Loading commit data... | |
| OSWindow.cpp | Loading commit data... | |
| OSWindow.h | Loading commit data... | |
| Timer.h | Loading commit data... | |
| Vector.cpp | Loading commit data... | |
| Vector.h | Loading commit data... | |
| com_utils.h | Loading commit data... | |
| geometry_utils.cpp | Loading commit data... | |
| geometry_utils.h | Loading commit data... | |
| keyboard.h | Loading commit data... | |
| mouse.h | Loading commit data... | |
| random_utils.cpp | Loading commit data... | |
| random_utils.h | Loading commit data... | |
| shader_utils.cpp | Loading commit data... | |
| shader_utils.h | Loading commit data... | |
| system_utils.h | Loading commit data... | |
| util.gyp | Loading commit data... |